Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6882c258-69f8-40b1-a8e7-9c05f661267f.roa
File:                     6882c258-69f8-40b1-a8e7-9c05f661267f.roa (raw, json)
Hash identifier:          f4z0VbGL/W+PRHWYLy4jARKUUztFzIAKO6YABIGFys0=
Subject key identifier:   F6:EC:2E:BD:F6:D9:59:5E:57:FB:23:84:F3:82:2F:A9:15:9B:55:48
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       777D7947571D64FBD75346F87CD9770E15A899A7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6882c258-69f8-40b1-a8e7-9c05f661267f.roa
Signing time:             Tue 29 Sep 2026 00:00:05 +0000
ROA not before:           Tue 29 Sep 2026 00:00:05 +0000
ROA not after:            Mon 28 Dec 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fe0:6000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:7d:79:47:57:1d:64:fb:d7:53:46:f8:7c:d9:77:0e:15:a8:99:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 29 00:00:05 2026 GMT
            Not After : Dec 28 23:59:59 2026 GMT
        Subject: serialNumber=0509c239525463948abcbeb727c905aaeacc0460d95d11676f25b3b6520fbbcd, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:50:d0:ea:60:1c:f6:a6:6b:bc:71:4b:b5:2a:
                    5f:2b:5e:68:d8:b1:c1:21:6c:3c:83:67:80:a8:45:
                    20:78:8d:2c:e0:8d:aa:37:fd:1e:8d:cc:2c:c0:25:
                    5e:8f:aa:2b:65:77:0e:90:eb:df:13:5d:77:20:c7:
                    2b:e5:21:1a:ae:b4:a9:18:8f:60:10:e8:96:0f:76:
                    c2:7c:4c:95:b8:ff:70:ac:ab:9a:79:62:ac:fd:d5:
                    45:2c:fe:6d:00:2c:e5:c9:73:9c:61:e3:5b:fe:85:
                    3c:de:80:25:1b:31:f1:d1:9f:a3:c5:09:a5:ab:ee:
                    68:9f:2c:7a:1d:3b:82:fc:d8:8c:57:86:6c:f0:e7:
                    1b:ba:ce:30:d7:38:b2:73:1d:c6:50:33:51:db:7f:
                    fd:c5:4f:03:b4:9b:14:fb:fb:5f:02:0b:18:15:de:
                    e3:73:82:c7:1c:c6:ab:67:13:15:7f:f5:65:b9:84:
                    32:2c:b9:88:bf:af:6e:ca:12:ca:ad:89:e8:29:5e:
                    40:29:7d:c0:9e:6e:bd:68:67:e5:27:72:3f:23:09:
                    de:24:cf:40:48:46:0c:37:59:0f:2e:82:68:df:e9:
                    61:d4:14:8b:f2:14:73:e8:16:ed:41:13:29:3b:ea:
                    a9:b4:16:82:cc:d4:d5:e8:fa:b1:dd:e8:2a:bf:99:
                    77:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:EC:2E:BD:F6:D9:59:5E:57:FB:23:84:F3:82:2F:A9:15:9B:55:48
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6882c258-69f8-40b1-a8e7-9c05f661267f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fe0:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         9b:d9:0e:7c:3c:34:04:96:68:45:ee:7d:cc:3a:4a:a7:d2:2f:
         8b:af:66:66:e9:7d:6c:e7:62:75:f8:29:7e:4a:aa:91:e5:4b:
         f6:48:52:7c:d4:68:2e:f1:e3:6d:67:94:6a:89:10:02:2b:0e:
         05:2b:04:8d:68:81:ae:ea:39:45:73:4a:fc:4c:89:2c:9d:e3:
         62:99:23:b4:86:c6:50:2b:28:a3:01:31:ec:1b:cc:c5:c9:0f:
         e4:8b:50:fc:b9:d4:8c:0e:34:d1:1a:3e:84:77:cb:e0:84:28:
         80:0a:e9:e1:49:ab:7c:52:ef:a6:9b:bf:75:a6:73:f7:c9:b3:
         b8:03:b1:96:4f:eb:a2:02:4a:33:aa:3b:10:3c:3b:7f:76:ad:
         d4:ae:71:87:48:44:1e:75:5b:62:cf:80:00:26:03:36:01:d1:
         24:e8:1b:e4:6d:7f:e6:37:cc:ae:e0:6b:74:20:6a:71:f2:3a:
         71:42:c7:d2:d9:52:05:aa:50:ae:b7:2c:40:e0:7a:5a:6a:19:
         07:a8:28:4a:e6:c7:1d:81:f2:91:0e:a2:ef:24:91:5b:a3:ea:
         8f:82:bd:5c:2f:58:db:a5:ff:a1:ef:3e:ba:fb:06:2d:84:e6:
         70:e6:ae:e4:6e:30:77:9b:e3:3d:8b:2e:79:0e:25:b2:ec:d0:
         de:8d:da:36
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Nov 3 01:27:01 2026 by rpki-client