Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7034d5d9-ee87-4cda-8cb2-ba825242f6a9.roa
File:                     7034d5d9-ee87-4cda-8cb2-ba825242f6a9.roa (raw, json)
Hash identifier:          4d1Vfpzdfw+5lqDC6SboN7BVplUI/Id0k1TL+z7d1s4=
Subject key identifier:   02:42:9B:47:05:8A:C2:26:6B:D7:F7:25:ED:4A:BD:DB:4C:A3:33:20
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6E5A5CB500D372EB70EAC8FDE229F2CD7F5B1E74
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7034d5d9-ee87-4cda-8cb2-ba825242f6a9.roa
Signing time:             Thu 22 Oct 2026 01:41:06 +0000
ROA not before:           Thu 22 Oct 2026 01:41:06 +0000
ROA not after:            Wed 20 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fff:4080::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:5a:5c:b5:00:d3:72:eb:70:ea:c8:fd:e2:29:f2:cd:7f:5b:1e:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 22 01:41:06 2026 GMT
            Not After : Jan 20 23:59:59 2027 GMT
        Subject: serialNumber=a2c8bf89e8b8d7c4878b0b78b9ed1d9dcc14b647180b8084eb2472910e730f04, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ec:49:9b:d1:44:8b:5d:66:c3:d9:c5:a9:a3:
                    24:a5:3a:88:99:f6:23:db:e0:66:c0:c3:c7:16:24:
                    4f:1f:52:47:eb:31:f1:23:b0:66:8f:2c:95:eb:20:
                    41:f3:86:c1:c1:eb:31:5d:52:3e:8a:de:06:5e:0e:
                    4d:c3:2b:e3:36:b5:84:c7:24:f9:23:52:5d:76:c7:
                    4d:1c:6e:df:a6:05:e3:ac:cd:d3:2b:05:50:89:79:
                    72:84:d3:67:d2:41:06:bf:42:6d:db:33:79:61:6f:
                    d3:f5:a3:af:52:7d:57:49:3e:98:a7:ac:dd:b0:57:
                    8d:5e:8a:fd:c4:f9:fd:4e:ee:a1:59:b8:1c:bd:09:
                    1a:16:64:c8:ca:30:35:06:d8:87:79:67:40:d9:67:
                    74:04:b4:66:35:d4:c0:f3:65:b0:ac:16:ed:57:3f:
                    40:3e:6b:8d:75:91:39:a2:dd:56:eb:4a:df:b4:fc:
                    bf:28:13:34:ee:98:ab:24:bc:59:95:9e:f1:1c:2d:
                    ff:dd:b1:0f:4e:63:10:59:05:59:c4:e2:35:3c:63:
                    ef:40:57:43:14:4a:33:d9:f6:f6:8b:9c:0e:c4:18:
                    e2:36:ac:e7:37:97:b5:0e:cc:86:74:6c:83:4a:e1:
                    c8:6e:e7:64:93:63:e3:29:6e:9d:05:4c:b6:c9:52:
                    22:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:42:9B:47:05:8A:C2:26:6B:D7:F7:25:ED:4A:BD:DB:4C:A3:33:20
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7034d5d9-ee87-4cda-8cb2-ba825242f6a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fff:4080::/48

    Signature Algorithm: sha256WithRSAEncryption
         9e:4a:b5:68:c8:c3:b2:5a:43:c3:e9:27:2c:6d:03:91:cc:24:
         06:c6:76:7f:fa:df:42:b2:fd:4c:7b:02:73:c1:af:44:56:b4:
         2c:68:71:c9:74:1a:dd:d5:84:69:77:c6:b4:6e:e4:d9:d5:a0:
         22:28:b1:7d:b2:8f:a3:78:b2:13:da:e8:68:9c:9b:19:41:69:
         d0:5e:01:b0:20:8f:c1:0b:bd:8a:78:79:14:b5:a4:03:9a:22:
         36:f7:68:3f:ba:33:b3:a4:4f:3b:19:31:4d:b7:2c:54:88:19:
         82:23:20:3f:77:7c:b7:fc:f5:9a:0c:5e:22:67:b1:5f:2e:e0:
         df:d0:e4:d9:3d:3e:50:ca:a7:03:d7:49:a7:9a:f5:20:60:10:
         a3:23:00:65:6f:7f:33:a9:63:91:4d:18:33:ef:2f:66:83:ce:
         51:ff:43:3e:98:bd:d6:e0:b3:93:2c:96:c3:c2:dc:90:0d:f6:
         cd:12:4b:a0:b7:82:ec:43:97:00:ca:77:87:0d:3b:70:ea:23:
         bb:63:36:ac:e5:61:c1:09:8d:70:76:da:49:f2:65:86:84:a1:
         df:a2:1c:0e:af:84:b5:c6:f5:fc:45:a5:46:d8:ac:64:ad:46:
         c0:55:f6:09:80:08:c7:ad:b9:e2:b9:54:8d:cc:92:4c:69:84:
         a6:89:a7:c9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Nov 3 12:01:32 2026 by rpki-client