Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7109eae2-0e21-4e85-9b88-63b1777e3c13.roa
File:                     7109eae2-0e21-4e85-9b88-63b1777e3c13.roa (raw, json)
Hash identifier:          MmNhftyliM0YEUqphH1Cwq0uhu5OKPzzPnYR6qHraqY=
Subject key identifier:   70:8A:01:47:2D:DB:41:A2:C7:D6:B8:5D:B8:BA:43:75:24:AA:A6:09
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       47DF88513DAAE5B68DD0BC4EBFECC34E5154D520
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7109eae2-0e21-4e85-9b88-63b1777e3c13.roa
Signing time:             Tue 04 Aug 2026 00:30:18 +0000
ROA not before:           Tue 04 Aug 2026 00:30:18 +0000
ROA not after:            Mon 02 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f70:6000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:df:88:51:3d:aa:e5:b6:8d:d0:bc:4e:bf:ec:c3:4e:51:54:d5:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  4 00:30:18 2026 GMT
            Not After : Nov  2 23:59:59 2026 GMT
        Subject: serialNumber=b1a2519a7851cf255c01d67dbb81a458b4570c17473953bb048414d08ce1f893, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2b:94:ec:8c:63:50:76:d0:ab:3a:60:c3:69:
                    fa:79:c7:04:37:0d:34:82:a1:96:f0:d8:3e:9e:10:
                    0e:6d:e2:c5:9b:92:18:86:f4:77:c7:ff:6b:2a:2f:
                    19:fa:56:a6:a1:c0:5d:e5:e3:27:7b:75:db:2d:ea:
                    79:69:da:5b:53:64:b6:01:1f:e1:22:f6:5d:cf:c4:
                    57:3d:2e:38:f4:af:be:15:a6:39:3b:9a:a4:14:51:
                    50:8c:d8:0e:1a:4f:2f:84:df:0b:90:d6:06:e3:14:
                    7d:4a:6e:0b:f0:c4:e3:22:7f:75:66:2d:f2:9f:e0:
                    af:ab:03:cd:16:6d:eb:71:db:66:1c:93:c3:20:e2:
                    a2:47:27:9b:62:4f:9e:85:84:e0:82:86:fb:f8:f2:
                    6a:12:0f:db:44:c9:f3:ec:e0:31:33:f0:c9:eb:46:
                    e5:b9:dd:82:b6:99:dc:d0:77:cc:a5:1b:49:01:77:
                    79:67:b1:a3:1d:52:dd:ce:63:6b:95:01:30:f6:53:
                    d4:dc:63:77:af:cc:0e:4e:f3:90:e1:a3:25:13:23:
                    5d:a2:a8:07:04:77:3a:0e:79:b7:88:48:2f:cf:97:
                    76:2a:c3:cb:90:f6:b1:df:a8:15:38:fa:ac:6f:a7:
                    2d:72:88:0a:61:5f:4f:50:0f:19:4f:dd:c0:0a:49:
                    9d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:8A:01:47:2D:DB:41:A2:C7:D6:B8:5D:B8:BA:43:75:24:AA:A6:09
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7109eae2-0e21-4e85-9b88-63b1777e3c13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f70:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         18:f7:47:29:5c:1d:15:fe:0a:6e:92:35:d2:0b:03:26:60:4c:
         49:8c:14:05:00:ea:21:ee:70:5b:27:92:35:e8:31:c8:da:b7:
         d4:e8:15:17:e3:d3:06:f5:ac:3b:2c:74:68:fa:4d:f9:5d:a6:
         74:fc:a6:11:49:49:78:5e:b9:36:b4:76:55:be:2a:62:cb:1a:
         4a:d1:01:3b:22:dd:bc:71:09:7a:57:36:55:2a:ef:de:8a:d7:
         3a:78:89:f2:65:80:d4:b1:3f:55:25:b9:c1:ce:ad:d9:ab:9b:
         15:b6:93:e0:22:23:7e:8b:9b:8e:94:bd:32:ef:3b:23:a2:c1:
         bc:38:41:4b:12:c0:53:4d:6a:91:f2:79:df:98:69:03:75:20:
         86:2f:aa:ad:81:0b:a5:c4:11:b4:5e:11:a8:2f:62:89:a1:f1:
         32:09:bb:39:ca:c1:c9:74:a4:b4:33:d6:6b:2c:3e:da:3b:d3:
         db:40:0e:6f:c4:0a:64:c4:e2:79:82:fe:03:a8:43:08:38:2e:
         40:1c:37:8a:3e:ec:a4:72:de:13:f2:cf:34:25:d4:53:c3:43:
         2f:b7:b0:1c:f6:88:e9:0b:e6:10:f9:ce:7a:24:70:17:e3:71:
         35:c4:43:0e:b6:2c:b5:16:29:05:13:aa:c7:ca:7f:72:59:c7:
         5b:45:a8:76
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Sep 17 16:15:15 2026 by rpki-client