Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59aa7464-2c88-4680-a40a-7c7f46a600db.roa
File:                     59aa7464-2c88-4680-a40a-7c7f46a600db.roa (raw, json)
Hash identifier:          xYRmKstLNxVwAFQIE7/3zElJ3seofk02uPhUTUGmSmI=
Subject key identifier:   B4:6F:25:E4:2F:7D:6E:C4:96:87:D2:7C:16:8A:17:79:D8:B5:B5:C3
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5C83D10BE0A413D10CEB821499439A10AA7AB062
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59aa7464-2c88-4680-a40a-7c7f46a600db.roa
Signing time:             Fri 31 Jul 2026 00:51:01 +0000
ROA not before:           Fri 31 Jul 2026 00:51:01 +0000
ROA not after:            Thu 29 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f69:e000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:83:d1:0b:e0:a4:13:d1:0c:eb:82:14:99:43:9a:10:aa:7a:b0:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 31 00:51:01 2026 GMT
            Not After : Oct 29 23:59:59 2026 GMT
        Subject: serialNumber=4c3418bb56c68b198f9fba0bd9c1b4b4a1888df89ab7d97040f40083ef1f4107, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:26:3c:f6:dd:b2:80:9c:bb:d8:c8:e9:65:c4:
                    e9:d3:35:4d:9c:a9:ed:3b:a2:0c:1e:7e:9a:ca:58:
                    ba:e7:b4:73:0d:25:69:36:65:73:17:7f:7b:da:05:
                    ad:95:66:2c:e8:f9:e8:1a:2f:d0:7f:5a:8e:9a:2b:
                    f0:11:d6:02:ea:da:de:0c:a1:85:b1:1f:66:5e:4e:
                    fd:71:64:4d:30:d2:6e:e6:e6:b6:c2:3c:9f:9f:7e:
                    eb:40:42:e5:61:84:d3:f8:18:83:e6:84:d5:5d:93:
                    1a:2b:c7:0e:5d:58:8f:8e:0e:3a:9e:98:2f:9d:ef:
                    9a:56:76:9b:ec:cf:0b:14:c6:c9:b3:de:ed:0b:7c:
                    89:6a:3e:e7:5b:66:a5:db:37:1d:56:d6:80:17:33:
                    fc:42:74:f0:36:8e:7d:2a:e9:bb:54:8f:3e:e7:34:
                    80:17:76:2a:df:67:be:db:63:7c:9b:df:6f:85:a0:
                    1b:8b:e7:bd:96:87:1c:21:92:b8:13:f2:41:1b:e9:
                    1d:9e:dc:5b:6c:0a:80:7a:6b:d1:03:55:13:f3:58:
                    a8:f6:95:57:cb:eb:7d:ce:82:2b:90:19:b0:57:74:
                    33:d0:c9:e5:7b:80:c8:d5:6c:ad:5f:85:bf:e1:5b:
                    02:36:81:a6:9c:f1:54:cf:5a:3a:44:3f:cf:6e:6f:
                    97:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:6F:25:E4:2F:7D:6E:C4:96:87:D2:7C:16:8A:17:79:D8:B5:B5:C3
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59aa7464-2c88-4680-a40a-7c7f46a600db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f69:e000::/40

    Signature Algorithm: sha256WithRSAEncryption
         a6:88:63:f9:26:86:51:c4:70:11:fb:13:7c:d7:e2:fb:98:f1:
         16:24:d4:d8:95:58:3a:37:25:c0:9b:f0:f2:15:46:2f:69:06:
         ee:a4:7c:8b:fb:c0:b5:12:99:42:41:e4:7e:1d:97:a4:44:2a:
         1f:1c:bb:4f:95:60:38:18:10:73:28:55:66:87:ae:0a:51:03:
         be:8c:87:76:ce:96:f3:bf:1a:4e:91:6c:72:b4:8d:79:33:cc:
         ee:45:8e:75:db:ff:7b:e4:b9:11:10:dc:6d:c6:e6:a4:f0:43:
         0f:02:7e:2f:93:82:99:2c:b1:eb:34:89:c1:89:b6:a5:f6:e5:
         a0:7e:ab:44:83:50:9f:7b:ef:c1:13:8b:bb:59:57:75:7b:99:
         4d:73:57:f8:7b:32:c4:b5:66:e9:3a:aa:5d:16:db:c6:0a:ca:
         c4:9e:fb:81:50:93:ba:51:fa:30:55:f3:20:35:be:b1:fa:4c:
         7e:a4:5f:8b:85:07:7f:aa:cd:76:51:62:c9:e4:3b:57:c9:16:
         19:23:b4:ce:10:a4:19:5a:8d:1e:90:d8:13:d8:a6:f8:c8:3f:
         0e:69:c9:12:20:df:ca:44:e8:ff:09:d9:f6:7c:85:c4:c4:ad:
         62:b5:c4:ca:cd:24:93:e4:b0:9a:49:06:de:86:25:0e:87:44:
         5f:22:cf:d9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Aug 3 05:41:29 2026 by rpki-client