Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e77afe0-ddc1-4f2b-9478-c081cd335706.roa
File:                     5e77afe0-ddc1-4f2b-9478-c081cd335706.roa (raw, json)
Hash identifier:          GiH5QE2IVslsNXNAip6i++LFwhPhXc1Q2+PdIGB6fBk=
Subject key identifier:   EB:A6:97:FD:E5:AF:49:E0:37:04:48:D9:EE:02:80:4F:16:6D:CB:A5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5EE437A898BAF5FE436D055A5DC8C8D5CDA04F0E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e77afe0-ddc1-4f2b-9478-c081cd335706.roa
Signing time:             Tue 04 Aug 2026 02:22:00 +0000
ROA not before:           Tue 04 Aug 2026 02:22:00 +0000
ROA not after:            Mon 02 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fff:60a0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:e4:37:a8:98:ba:f5:fe:43:6d:05:5a:5d:c8:c8:d5:cd:a0:4f:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  4 02:22:00 2026 GMT
            Not After : Nov  2 23:59:59 2026 GMT
        Subject: serialNumber=22aec9377409cf3074b808a8b89c37c395414df029bca510be6b3e1382d0a3fe, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5c:1b:1a:35:83:cf:3b:5c:56:86:8b:3d:7a:
                    39:05:ae:11:46:59:01:ce:ea:a1:4c:fa:42:14:ec:
                    01:56:94:d6:b9:a1:b7:19:8f:55:10:45:a8:f0:61:
                    c1:36:25:c7:b6:1e:56:fb:ae:6b:57:2f:85:f0:b3:
                    bc:9d:54:21:85:b1:09:d0:d8:f1:94:b9:af:a9:d4:
                    1d:8a:63:44:82:9f:ba:c6:ea:56:77:fa:5e:99:24:
                    36:9b:58:ba:29:98:46:a9:0e:40:f8:28:29:4b:71:
                    3e:59:0e:bf:5b:2d:c2:8e:33:a9:eb:7e:7c:ab:7c:
                    7e:d1:91:fa:ba:e4:ab:f3:b5:b0:59:e6:e5:2e:d6:
                    82:0e:88:67:1e:45:3e:d1:4a:9f:b0:cb:60:24:e1:
                    10:c4:57:e0:ae:bf:7b:65:7e:1f:3c:05:d0:b0:d2:
                    46:60:10:76:b9:04:b5:87:1c:4f:be:a9:d1:d1:ef:
                    35:a2:29:12:0c:67:4a:a7:62:6b:93:5d:9b:f8:d7:
                    f9:a5:ba:b7:2f:b4:64:17:4b:87:a2:d0:15:67:4a:
                    87:05:e3:81:c1:4f:a5:f9:34:1d:53:26:9a:34:42:
                    15:f3:0e:f0:ac:64:ed:02:e1:1b:c6:d0:08:d1:a8:
                    48:7c:93:79:9e:1c:8e:de:e6:ef:98:8c:58:a7:f8:
                    df:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:A6:97:FD:E5:AF:49:E0:37:04:48:D9:EE:02:80:4F:16:6D:CB:A5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e77afe0-ddc1-4f2b-9478-c081cd335706.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fff:60a0::/48

    Signature Algorithm: sha256WithRSAEncryption
         4e:c7:44:5e:a3:09:f4:11:9c:e9:bf:aa:0a:12:5b:6c:dd:87:
         bc:ea:22:28:b6:27:02:4a:27:7e:46:af:1d:cc:d3:bf:5a:9b:
         ac:f0:2e:ec:57:f6:91:a9:99:21:d6:30:f2:f0:e8:dd:ff:28:
         9e:38:b8:63:ff:1e:ab:9d:90:06:1d:a1:b3:73:12:bc:c8:2c:
         06:1d:83:30:a3:3e:2e:dd:c1:f7:67:83:84:06:5b:b5:96:7d:
         46:74:4d:e0:15:28:e4:52:1d:e5:c5:b2:ee:0e:a7:f2:34:7c:
         f3:1f:09:06:16:2a:0a:33:a1:53:de:eb:0b:2c:2c:02:9f:fb:
         da:6a:96:ca:3f:54:00:46:fa:93:c9:2b:e1:b3:9c:f0:ec:18:
         65:cf:9d:2d:f3:f5:ae:f6:04:59:2f:95:7d:15:83:e6:8e:e4:
         83:24:86:eb:a8:51:45:07:5d:6d:c8:16:06:29:aa:82:d6:91:
         61:d0:d1:10:a6:e6:fd:29:a6:46:c5:6a:54:38:70:03:92:fc:
         84:66:13:74:d3:49:3e:10:ac:09:9e:fb:e6:46:15:76:0f:84:
         89:76:c8:31:fa:98:9c:4b:55:be:ad:54:aa:a1:09:50:bd:d5:
         ec:44:a3:9d:80:94:7f:16:1b:41:76:c0:ad:e7:88:08:88:72:
         2f:0c:3a:d9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Sep 17 16:17:54 2026 by rpki-client