Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a005ca1-9152-4910-a152-3b30476e109b.roa
File:                     6a005ca1-9152-4910-a152-3b30476e109b.roa (raw, json)
Hash identifier:          vTbt01D49oV+Pj86EtNec+MDrx7oqlwouNevnTdzrsQ=
Subject key identifier:   10:EC:1E:BF:8B:1B:95:94:FE:70:4F:B6:79:E9:91:DD:80:56:FC:17
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6E4C0063820CAB5D63B51E27150BC14FAD461720
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a005ca1-9152-4910-a152-3b30476e109b.roa
Signing time:             Mon 03 Aug 2026 01:02:00 +0000
ROA not before:           Mon 03 Aug 2026 01:02:00 +0000
ROA not after:            Sun 01 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fff:80b0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:4c:00:63:82:0c:ab:5d:63:b5:1e:27:15:0b:c1:4f:ad:46:17:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  3 01:02:00 2026 GMT
            Not After : Nov  1 23:59:59 2026 GMT
        Subject: serialNumber=e686d2e53b224cff400f4af661c63aae3022fe01dae068f5c22d660f9d678809, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:cf:7e:b7:5a:01:6e:b4:71:97:1a:79:75:17:
                    60:51:ed:2b:3e:ee:c7:21:d9:aa:8a:9b:3a:f4:c7:
                    b2:8a:20:3c:20:f4:c0:ff:c9:5a:8a:cb:45:95:f2:
                    32:c1:6f:79:99:3a:89:f4:01:0d:40:97:e8:03:e1:
                    2a:ce:6c:f3:ac:d1:1b:54:da:05:72:ca:5b:24:f1:
                    b9:f5:6a:fd:bc:c2:5d:9b:80:c5:25:ce:4c:44:d0:
                    a4:62:73:e7:56:89:50:64:e6:1b:57:06:0f:43:d6:
                    9d:b2:b7:dc:c7:c9:65:28:0d:e3:84:79:4c:88:b9:
                    3d:bc:90:93:01:23:05:e0:37:e4:ef:c7:9e:f6:5a:
                    cc:f6:0e:80:57:00:ee:6f:5d:2d:d0:28:7f:1a:0b:
                    11:3e:02:64:d1:1a:e9:ad:59:66:b5:38:bf:fa:c9:
                    a2:38:e3:a5:60:05:0d:56:1a:d1:af:41:ae:57:74:
                    47:74:1c:94:db:02:dd:e3:65:e9:a0:d1:57:00:23:
                    a0:eb:c3:56:db:45:c1:d7:db:44:9e:c6:5e:c6:e5:
                    bc:3d:53:01:d4:e6:ec:9b:71:11:86:e2:07:24:2e:
                    f0:f4:97:2f:58:f4:b6:e6:82:12:19:de:9e:1d:e3:
                    78:73:67:94:dc:3c:38:18:c4:de:78:ab:8d:b4:7c:
                    86:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:EC:1E:BF:8B:1B:95:94:FE:70:4F:B6:79:E9:91:DD:80:56:FC:17
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a005ca1-9152-4910-a152-3b30476e109b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fff:80b0::/48

    Signature Algorithm: sha256WithRSAEncryption
         34:42:58:42:fb:ac:df:e6:62:17:9b:2a:c4:6d:2b:4b:8e:f4:
         6f:4e:d2:05:34:2e:7c:00:02:19:48:99:ee:f8:36:4a:fc:e8:
         77:35:35:69:57:05:2f:30:00:f7:52:cc:2b:96:39:77:e0:d7:
         f6:eb:f4:c0:63:f3:fd:0e:c0:81:09:cf:c3:12:83:87:19:2a:
         70:fa:f0:4c:2f:68:d0:5e:37:bd:4e:a7:5a:c8:58:bd:2e:4d:
         75:62:e9:90:e4:3e:bf:ff:3a:8f:34:8f:6e:16:da:a7:49:4e:
         6d:7b:38:a5:ea:73:9d:a2:37:80:8a:a5:36:c8:ae:01:14:ff:
         9b:e2:17:ca:2e:b2:be:9f:fc:18:92:f0:0a:ef:ca:a3:57:47:
         c1:4b:80:4d:42:c6:31:53:b7:f5:7f:08:8c:0e:07:90:72:43:
         a8:18:5f:39:16:49:5d:4d:e2:52:0c:a5:53:84:fa:ba:77:80:
         35:be:8d:c1:b4:75:73:5a:64:8f:29:f7:ca:48:f4:24:12:95:
         1b:60:78:48:4a:3c:3f:54:4e:e7:82:19:e3:54:1c:20:05:a3:
         84:73:0a:f3:be:31:21:c0:db:e2:e0:0b:23:3b:4b:02:c7:86:
         68:73:3a:3a:b2:32:1d:b4:e7:f1:9b:d2:70:9a:f8:c7:38:0d:
         0d:18:d1:2c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Sep 15 13:21:11 2026 by rpki-client