Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/599adbdd-fa3e-4704-8d59-71490ae39ea5.roa
File:                     599adbdd-fa3e-4704-8d59-71490ae39ea5.roa (raw, json)
Hash identifier:          sBnte2UJkk5jFSmiUuyJOmWCj0+z0PxJB+7mhm/ci6s=
Subject key identifier:   1A:45:23:2F:5B:31:AD:D5:7D:ED:28:31:CF:60:94:EF:21:D9:27:63
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       61B108FA9DF7752500584F398ADF01154017EE60
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/599adbdd-fa3e-4704-8d59-71490ae39ea5.roa
Signing time:             Fri 09 Oct 2026 01:10:16 +0000
ROA not before:           Fri 09 Oct 2026 01:10:16 +0000
ROA not after:            Thu 07 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff3:1040::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:b1:08:fa:9d:f7:75:25:00:58:4f:39:8a:df:01:15:40:17:ee:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  9 01:10:16 2026 GMT
            Not After : Jan  7 23:59:59 2027 GMT
        Subject: serialNumber=e478800d2c2473dc9f2bf1b4e38059d474ddae8b8279ff2499c60eaeb30a8a22, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:5f:40:db:10:9a:75:11:ca:c6:8a:c2:89:40:
                    79:8e:6b:d9:2e:ae:cd:c0:9f:17:df:0d:85:a3:a7:
                    8b:33:7c:2f:a0:fe:75:87:7b:83:74:e5:5a:01:a1:
                    a6:30:b6:e6:fe:d1:a1:0d:8a:0a:60:16:13:a7:34:
                    c2:e5:6f:83:cb:49:34:38:22:0c:d5:d9:0e:9a:ae:
                    6e:75:7b:6e:3f:76:8c:d3:4f:eb:12:09:65:ff:9a:
                    d0:75:78:bc:62:1d:0a:b4:43:4b:20:a7:33:5b:d5:
                    e0:80:13:89:79:5d:c8:12:fa:e1:b5:71:d8:e5:2a:
                    3e:20:c6:67:2d:bf:30:04:f6:ee:9e:f6:0e:e3:7f:
                    c8:cc:8e:5f:bd:fc:94:e8:34:3a:70:92:d4:ab:32:
                    0c:3e:8e:4a:10:06:53:f8:f5:b0:82:48:87:a1:ba:
                    55:21:86:a9:a7:33:69:a4:58:e5:55:72:c5:74:87:
                    db:76:94:59:a1:68:59:75:6b:a7:63:c8:ee:fe:e2:
                    85:ee:e3:3f:6e:ff:56:0f:03:53:7f:cd:25:00:d8:
                    42:a1:72:1c:74:0d:4e:73:bc:8b:50:26:93:00:e7:
                    6f:f4:2b:d5:9c:80:87:57:47:77:3d:90:c9:f6:02:
                    8b:ed:72:a6:3d:36:86:e5:c2:3a:7a:49:48:a7:27:
                    c1:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:45:23:2F:5B:31:AD:D5:7D:ED:28:31:CF:60:94:EF:21:D9:27:63
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/599adbdd-fa3e-4704-8d59-71490ae39ea5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff3:1040::/46

    Signature Algorithm: sha256WithRSAEncryption
         97:c9:1d:e3:5e:a0:ba:c3:d4:ed:7f:49:00:d0:6c:68:d9:b6:
         f9:96:ef:25:11:8f:b1:49:bb:79:89:97:5a:1b:32:55:b8:2b:
         a2:37:b2:b2:51:c1:f5:10:ed:19:4b:3b:22:8b:f7:12:aa:f1:
         ea:3f:c8:b8:df:f6:b9:50:a8:15:c8:c1:f6:9d:ff:38:86:f5:
         49:05:b1:a5:0e:cf:b1:29:12:b0:69:88:6b:05:95:d4:62:0a:
         b6:f7:57:59:3e:48:c4:bc:2a:98:9c:4d:53:19:9c:ed:c3:29:
         f4:91:ea:63:92:99:5d:8b:9b:e6:72:43:35:4f:69:e9:58:88:
         80:f5:f1:1c:56:2f:72:4b:bb:68:bb:57:1e:e7:93:96:6c:0b:
         5b:08:50:0e:21:aa:37:19:6f:c9:bb:8b:c4:24:61:bb:79:e7:
         52:18:c1:f4:b8:17:fc:92:b9:77:a3:bb:9e:dc:e3:59:9a:61:
         70:38:41:58:dc:bb:34:99:35:e0:d2:34:7a:42:f6:5f:07:05:
         e3:5d:7b:56:c4:ef:3c:c4:87:01:cd:36:b2:87:6a:da:1e:f3:
         1f:b8:a1:01:a4:96:f4:e1:9f:bd:90:12:21:8a:99:27:7e:d3:
         d6:c1:4a:48:da:f8:82:5f:a5:78:4b:aa:11:41:db:70:58:f6:
         7f:99:ce:ef
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Nov 2 21:08:51 2026 by rpki-client