Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5dbc6e6b-7d6a-44fc-9de5-03134fd3cea4.roa
File:                     5dbc6e6b-7d6a-44fc-9de5-03134fd3cea4.roa (raw, json)
Hash identifier:          d9SccMui+YC2npDBMWmgfNPAbGhXZuAYFxFWE/BbHGs=
Subject key identifier:   B2:99:64:01:27:65:01:91:6E:48:F8:DC:FF:FB:7C:72:1C:D0:B7:26
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       69F58ED3BEF7E6E35B5DDCE9DA989B3EEF7193CC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5dbc6e6b-7d6a-44fc-9de5-03134fd3cea4.roa
Signing time:             Fri 23 Oct 2026 01:10:54 +0000
ROA not before:           Fri 23 Oct 2026 01:10:54 +0000
ROA not after:            Thu 21 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f1f:8000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:f5:8e:d3:be:f7:e6:e3:5b:5d:dc:e9:da:98:9b:3e:ef:71:93:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 23 01:10:54 2026 GMT
            Not After : Jan 21 23:59:59 2027 GMT
        Subject: serialNumber=1accf96c8a99d2d489dc5556065f6340efac043388f8ba8e12a74cea406419dc, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:19:9d:ec:ee:07:5d:f8:80:a4:da:8c:de:3a:
                    32:5d:41:24:1c:c2:c5:41:84:19:d9:43:8d:e4:cb:
                    aa:23:05:84:ae:e0:3f:9f:0d:33:26:d8:2f:14:8a:
                    61:8e:7f:38:b3:97:7b:89:5c:31:90:6c:d1:3a:6c:
                    59:33:57:e2:80:54:17:e3:f2:05:8e:03:2d:e9:8e:
                    f3:91:97:23:e4:79:06:cf:7a:4e:fb:a2:68:f0:d8:
                    57:aa:39:a5:37:6a:e9:99:65:0d:a9:d8:51:1c:29:
                    e0:89:f1:8b:3c:dc:93:03:ed:96:82:10:68:1e:6a:
                    28:19:87:43:a3:46:fb:4c:bd:f8:94:1e:24:0e:23:
                    e2:0e:bd:9e:d2:bf:ff:f2:0c:36:54:6c:a5:e5:3b:
                    fc:9a:eb:9d:c2:c7:72:98:29:82:04:2a:0c:df:7e:
                    67:f4:5d:42:b2:16:f9:54:2b:ee:85:f9:b9:43:38:
                    13:e3:ee:fb:4e:1a:be:39:7a:9e:85:0d:89:48:b3:
                    bb:7e:41:e5:3f:16:26:9e:ae:b3:f4:ad:1a:71:bd:
                    4b:12:6e:19:2b:48:1d:34:bc:a4:0d:b7:2a:38:6c:
                    1d:32:fd:da:e7:dc:e7:be:75:29:b7:79:4f:d1:11:
                    57:79:cb:ee:f9:6d:5a:14:8b:22:73:c4:52:59:a1:
                    88:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:99:64:01:27:65:01:91:6E:48:F8:DC:FF:FB:7C:72:1C:D0:B7:26
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5dbc6e6b-7d6a-44fc-9de5-03134fd3cea4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f1f:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         62:10:53:61:f0:e3:9a:b0:2c:4a:dd:a7:2e:5b:73:b9:31:46:
         d1:f2:de:9b:6a:f9:c1:34:c4:fc:19:da:26:ee:0f:3c:a0:ce:
         eb:17:a1:b9:80:56:dd:12:90:a9:53:f8:d7:c0:de:76:c2:ce:
         e3:87:fe:2a:bd:ce:9c:c9:c5:27:db:cc:6f:76:bf:fc:4f:3b:
         4e:09:4b:fd:fb:2b:93:c6:78:ab:5e:ee:2f:98:bf:21:c8:5d:
         1a:55:1b:24:cb:85:6a:3e:77:c7:eb:96:de:a3:f3:b6:58:b4:
         0b:72:e9:f5:8f:aa:b1:80:85:d9:f2:85:a2:ab:b3:98:71:09:
         a3:50:f7:b1:2b:dc:b5:d7:3f:d9:db:a9:7c:63:f3:97:87:86:
         60:c4:0e:d0:bd:59:0b:f4:8f:d3:b6:11:f4:6d:fb:6e:47:9b:
         ae:16:82:a7:cc:d6:ef:b8:72:82:eb:2b:c8:ba:4e:01:26:df:
         22:16:14:11:16:03:04:b3:b0:2b:1f:2c:5c:ef:fe:97:51:bb:
         39:92:c3:a9:e5:41:a1:3b:cb:7d:22:9c:9e:4b:42:55:b4:60:
         9e:76:bd:b8:8e:5c:39:eb:b3:e1:34:bc:88:7d:ee:ca:86:d2:
         0b:e6:d1:fb:a3:0a:57:56:88:2c:db:1e:96:b0:e4:62:fe:b8:
         03:ab:ab:1a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Nov 3 15:16:49 2026 by rpki-client