Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6aaec6d6-ae8f-4ba7-adc6-893482cf969e.roa
File:                     6aaec6d6-ae8f-4ba7-adc6-893482cf969e.roa (raw, json)
Hash identifier:          XGxm74iKXuuT+qBDEmh2H99tc9hAzBiserzuHSi+L+o=
Subject key identifier:   F1:A1:A3:63:DE:6B:7F:E0:2B:06:F7:F9:3A:44:FF:4C:18:93:5C:7A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       22CB1446CF3A628C762537D1146F370E2D366B91
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6aaec6d6-ae8f-4ba7-adc6-893482cf969e.roa
Signing time:             Wed 05 Aug 2026 00:41:09 +0000
ROA not before:           Wed 05 Aug 2026 00:41:09 +0000
ROA not after:            Tue 03 Nov 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1ff3:80e0::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:cb:14:46:cf:3a:62:8c:76:25:37:d1:14:6f:37:0e:2d:36:6b:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  5 00:41:09 2026 GMT
            Not After : Nov  3 23:59:59 2026 GMT
        Subject: serialNumber=4fedc30947c5218deab7de51412ebebb1b5422c85cd89ff4d8e8003eaa2c3313, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ec:48:46:aa:48:00:e6:68:66:6c:08:ea:79:
                    9b:f4:14:0b:80:1f:f2:d2:dd:e9:eb:9f:a3:c6:56:
                    83:88:f1:7a:83:da:27:38:fb:65:dd:8d:7b:6e:30:
                    c0:17:f8:49:43:25:37:88:a0:52:f7:ab:a9:62:c6:
                    10:c3:c8:47:27:e0:01:83:22:af:aa:70:4e:29:ce:
                    ad:28:2f:0d:8a:c6:d2:f8:cb:5b:1c:a0:99:62:2a:
                    16:66:3f:6e:e4:46:0d:d0:20:fe:92:46:03:5d:8c:
                    bb:e6:1c:c6:a3:5c:f6:21:3b:11:ea:2c:a4:65:ba:
                    51:d5:54:e0:7d:05:6e:7e:ba:98:ea:07:7a:ae:21:
                    95:04:43:54:6d:b2:50:33:d2:46:af:a3:42:79:43:
                    3e:ea:c3:fc:62:33:a7:12:0e:7f:94:7b:85:c7:a6:
                    a5:40:b5:8c:f8:f0:a5:ef:81:7e:71:6e:8d:91:d5:
                    6f:e1:7e:bd:ce:99:56:68:91:94:f7:53:88:84:a2:
                    a8:e9:0d:44:9a:c8:ed:54:72:a2:17:8d:bb:ac:aa:
                    03:53:3b:7f:48:3c:33:12:29:f8:5c:47:af:c4:fc:
                    c5:60:00:64:4c:3f:26:5d:b1:ba:72:13:de:4c:82:
                    74:58:8f:28:30:00:76:d9:77:d1:6e:27:cb:6c:cf:
                    ea:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:A1:A3:63:DE:6B:7F:E0:2B:06:F7:F9:3A:44:FF:4C:18:93:5C:7A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6aaec6d6-ae8f-4ba7-adc6-893482cf969e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff3:80e0::/46

    Signature Algorithm: sha256WithRSAEncryption
         15:21:34:74:ac:c7:84:4d:f1:ca:c1:fa:c1:74:b9:18:41:19:
         40:79:74:58:5e:f2:43:37:2b:8b:a0:e1:45:a5:39:e4:6e:98:
         a8:d1:08:aa:ca:d5:e6:5d:33:38:f2:96:9a:ae:86:cd:b2:4f:
         89:f7:87:da:f5:a8:ee:db:0e:d1:33:ac:9d:a6:f4:f7:5d:fc:
         be:bd:18:44:48:77:87:3d:e1:85:7e:5a:14:a2:aa:01:9e:6c:
         4d:b0:cc:b2:58:4c:71:28:bc:dc:7c:23:bf:bb:c8:5f:40:73:
         f4:24:12:5a:a9:97:cc:7c:9e:4e:bc:b3:59:77:df:ab:ee:2a:
         c9:f8:3c:82:f5:ca:c1:8f:e8:f5:3f:fa:fc:d5:99:98:98:0e:
         4d:3f:d4:87:35:ff:94:19:43:b9:58:5a:1b:88:c3:7d:ef:2e:
         26:62:10:63:b4:c0:2a:5e:50:73:92:83:64:7b:ba:d5:f9:45:
         c4:16:ac:e4:72:bf:05:51:2f:59:d3:4d:1f:07:30:de:7b:b4:
         db:22:a8:6e:72:69:04:dd:18:b0:b2:25:00:59:5c:dd:02:61:
         a9:35:95:67:0a:cd:9c:7d:a1:d5:16:62:9f:01:c3:56:bb:7f:
         e1:84:c7:16:19:7e:0d:30:2a:89:13:f9:ee:aa:c5:e6:5d:23:
         2b:fb:8e:d4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Sep 17 16:52:33 2026 by rpki-client