Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e1249cd-cc31-42bd-a5be-6946a7b244cc.roa
File:                     6e1249cd-cc31-42bd-a5be-6946a7b244cc.roa (raw, json)
Hash identifier:          +fDeiIA83zn09wJ1MMQ5xOJaxHWsUIeCuvbcgvPax78=
Subject key identifier:   9B:5D:8E:02:41:2A:EA:97:DC:E9:85:31:04:18:32:9F:E3:A1:F2:5C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       27C3B50FB2F82FBE84EF8754F26B0354404FCD97
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e1249cd-cc31-42bd-a5be-6946a7b244cc.roa
Signing time:             Mon 10 Aug 2026 00:41:21 +0000
ROA not before:           Mon 10 Aug 2026 00:41:21 +0000
ROA not after:            Sun 08 Nov 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1fe8:8000::/39 maxlen: 39
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:c3:b5:0f:b2:f8:2f:be:84:ef:87:54:f2:6b:03:54:40:4f:cd:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 10 00:41:21 2026 GMT
            Not After : Nov  8 23:59:59 2026 GMT
        Subject: serialNumber=c1ebe42fcb53f3cff18ae807e8af3bd63fabb59d5551be2291336d9ffec8691f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:10:f7:db:1e:3d:de:a9:e0:87:84:4e:0f:6c:
                    60:aa:6c:0f:32:0b:5f:a1:55:b6:a0:ed:74:c7:a3:
                    35:a3:a0:f4:c1:20:f5:b8:ef:8b:4a:d5:1b:a0:d2:
                    f5:1d:c6:f3:1f:b0:16:fd:4f:10:4a:af:9f:fb:38:
                    77:18:37:3c:2d:f0:85:65:35:07:3c:51:71:93:33:
                    23:9d:44:e0:82:98:8b:01:f4:e3:cc:2b:a2:6d:76:
                    ba:a6:8f:a6:fb:d4:0a:bf:a3:54:2c:12:83:a1:5d:
                    8d:ae:07:ce:22:81:06:7b:86:b3:1c:b5:f0:a2:f3:
                    34:22:5f:74:fe:d3:cf:27:aa:b1:5e:6f:e6:65:2f:
                    cb:03:a5:8c:2d:db:41:f2:8d:93:ff:06:c8:3e:3c:
                    05:94:21:5d:ec:54:68:2d:16:0f:64:57:28:af:fc:
                    83:09:32:a6:03:b9:32:6f:8c:4a:f5:31:6c:f1:3c:
                    a3:7c:8f:36:37:ca:83:4e:27:3b:21:56:a2:81:ba:
                    3a:36:e3:90:1e:d3:3a:45:20:08:54:5f:0f:eb:8d:
                    91:09:c3:28:61:61:c8:6a:2e:39:2d:ce:01:0a:3e:
                    6d:03:4f:1e:fd:af:68:3b:1b:2a:b8:c3:4e:1e:a4:
                    a9:71:51:a9:d1:72:85:8b:ba:eb:42:fb:c7:f6:a2:
                    e6:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:5D:8E:02:41:2A:EA:97:DC:E9:85:31:04:18:32:9F:E3:A1:F2:5C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e1249cd-cc31-42bd-a5be-6946a7b244cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fe8:8000::/39

    Signature Algorithm: sha256WithRSAEncryption
         4e:fd:a6:1e:a5:7b:29:9a:a4:84:e6:65:ed:54:6a:74:d6:d5:
         fb:1d:9b:86:28:12:7b:ff:7d:87:84:ba:b5:b5:5f:76:4e:96:
         ec:84:d0:24:2c:d1:6a:c3:66:6f:91:9b:9a:a0:67:1a:38:c4:
         44:54:03:c6:98:9e:99:bc:fd:b7:ba:da:00:2c:36:35:9b:e9:
         0f:69:c7:42:a7:70:0c:36:b3:07:46:1d:cb:de:8f:26:16:99:
         ff:6e:de:43:02:74:10:42:f5:54:d4:09:d1:45:5f:b3:36:85:
         95:26:b2:08:11:9f:79:c3:2f:75:6f:e5:92:b7:67:05:90:74:
         c3:62:b7:ea:4a:c2:19:eb:30:99:d9:2c:68:f8:eb:2e:c4:ad:
         4d:b6:aa:ff:e7:80:1b:d8:e5:e6:ff:b3:48:c9:d2:12:49:8a:
         97:1f:c3:ee:5f:b7:af:43:ab:1a:dc:74:60:c1:0c:0a:79:96:
         34:6d:00:72:d1:b0:4a:94:7e:b6:78:1a:69:6e:2a:b8:23:94:
         e6:95:e1:72:b4:3a:4f:05:bc:77:ad:77:b1:0f:ad:99:84:cd:
         d2:2c:2c:8d:6b:a4:73:33:70:ed:84:c9:5e:a2:0d:ca:02:1c:
         07:78:6f:97:21:c5:75:e0:e8:1f:00:40:4f:76:ef:b5:a4:8d:
         9c:1a:b5:84
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Sep 17 18:23:14 2026 by rpki-client