Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7719b58b-57dd-437e-9b9b-1927b8b79608.roa
File:                     7719b58b-57dd-437e-9b9b-1927b8b79608.roa (raw, json)
Hash identifier:          ZACHQw425kWohflMln0tnSTiFSbfw/oiEwgN2pM3EKA=
Subject key identifier:   DF:FD:67:BA:26:C0:A5:87:83:17:B4:63:27:9C:6C:5B:39:4E:BF:A7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1021A0D6F4FA8CAD711B647BEC0F31171969B098
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7719b58b-57dd-437e-9b9b-1927b8b79608.roa
Signing time:             Mon 10 Aug 2026 00:31:07 +0000
ROA not before:           Mon 10 Aug 2026 00:31:07 +0000
ROA not after:            Sun 08 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1feb:800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:21:a0:d6:f4:fa:8c:ad:71:1b:64:7b:ec:0f:31:17:19:69:b0:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 10 00:31:07 2026 GMT
            Not After : Nov  8 23:59:59 2026 GMT
        Subject: serialNumber=fa2c63dbd09649d5debd9bfcf0a4712ecd11288364ef72ceefdd328132fe0b8a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:81:14:ec:1a:04:d2:71:74:28:24:a1:b5:8c:
                    00:a7:23:f4:c5:da:68:66:72:2a:b7:59:d8:5d:83:
                    10:b3:53:58:8c:fa:bc:84:22:ea:79:2b:75:02:39:
                    a3:47:ca:f8:60:de:59:32:87:b5:e3:97:8b:93:1e:
                    cc:e2:e1:7d:db:4f:7e:7c:6d:1c:9f:ee:39:4b:7e:
                    d2:c3:7f:1c:56:f1:36:26:9a:90:bd:7e:77:49:05:
                    40:02:ce:27:4c:e6:d2:b6:26:5c:ed:4c:39:1c:7d:
                    ad:3c:9f:7e:53:1f:0e:98:ba:2e:2c:d9:ff:cc:df:
                    8a:15:f0:19:49:ab:d7:c9:aa:87:58:ac:4f:29:96:
                    8d:7f:4a:51:1d:ce:96:ac:2a:61:26:7f:a3:4c:64:
                    da:3f:66:5e:6a:02:8f:bf:08:ac:c1:30:63:ac:fd:
                    c3:ec:2f:8d:83:48:f3:d4:00:bc:9d:d0:d7:37:00:
                    66:64:a9:8f:fc:91:62:1b:ed:0f:ea:66:7f:7a:57:
                    c3:50:84:1c:75:15:3b:8f:e0:f6:bf:f0:08:5d:73:
                    b7:73:e5:f1:82:89:79:c3:5c:10:4b:c1:53:6f:1f:
                    a8:c1:9e:99:2d:36:47:f6:35:53:a9:8a:58:33:3f:
                    63:51:8a:9a:51:19:82:e6:72:eb:11:7b:7b:c7:86:
                    60:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:FD:67:BA:26:C0:A5:87:83:17:B4:63:27:9C:6C:5B:39:4E:BF:A7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7719b58b-57dd-437e-9b9b-1927b8b79608.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1feb:800::/40

    Signature Algorithm: sha256WithRSAEncryption
         0d:07:3a:d2:88:7f:a6:dc:96:46:3e:4e:2f:aa:be:6a:43:c3:
         3b:85:08:df:03:cd:15:ca:ca:e7:7a:09:ab:be:7f:e3:37:96:
         f4:6a:4e:e6:68:07:90:92:1d:c3:61:b5:e4:ac:06:b3:93:f6:
         e1:45:02:d8:bc:b4:9f:fc:24:00:6c:df:3b:25:0e:35:9c:91:
         6f:84:30:35:37:7f:80:3c:fc:e1:c8:08:aa:8c:1e:97:3a:0e:
         56:9c:ea:15:48:8a:a6:aa:5c:90:5c:08:fa:d1:e4:72:b5:b7:
         f3:20:88:43:36:01:d6:bb:6d:d0:6c:98:73:c8:23:02:5a:7f:
         59:66:7c:bd:68:97:86:c9:cb:31:5e:9c:02:cf:a0:71:d7:b5:
         98:65:1f:7c:93:7d:97:9c:9e:4b:02:49:5e:9d:73:21:86:4a:
         24:4d:e8:61:7e:39:eb:c1:4c:91:22:07:24:d4:4a:ba:dc:25:
         26:b6:57:55:cc:ea:44:ff:4c:ee:c6:34:1d:b5:15:5a:0c:fe:
         da:70:78:b4:33:e5:5d:05:03:be:e3:ad:21:93:14:97:01:c9:
         31:ae:2c:37:2a:00:45:06:79:89:51:5d:61:f2:1d:7e:78:32:
         b9:b7:7b:a7:62:e8:db:5f:31:d2:cc:73:bf:bf:5d:58:19:e4:
         d3:9f:e0:e5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Sep 17 16:22:21 2026 by rpki-client