Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7b1cc2c7-8b62-4dd4-ac15-64182934f7e7.roa
File:                     7b1cc2c7-8b62-4dd4-ac15-64182934f7e7.roa (raw, json)
Hash identifier:          0sh9wEaQSjTyGqnndalAs39Z8ebhAGPppDSKGO4i3mg=
Subject key identifier:   D9:BD:4E:7C:84:AB:FE:A3:9B:7B:C4:59:37:48:D9:8B:EE:91:06:54
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       20A49F2253F24D5661C044F9BCE72FF1B280B6FB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7b1cc2c7-8b62-4dd4-ac15-64182934f7e7.roa
Signing time:             Wed 09 Sep 2026 16:06:51 +0000
ROA not before:           Wed 09 Sep 2026 16:06:51 +0000
ROA not after:            Tue 08 Dec 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f6a:200::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:a4:9f:22:53:f2:4d:56:61:c0:44:f9:bc:e7:2f:f1:b2:80:b6:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep  9 16:06:51 2026 GMT
            Not After : Dec  8 23:59:59 2026 GMT
        Subject: serialNumber=f3ffba512146a0df2f59ee67885fd1eade1db03ea88fbbd0c509f63ff2dbdf29, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:10:a3:db:cf:35:9c:0c:f2:13:1b:6c:64:37:
                    04:91:48:40:f9:2e:11:25:89:fd:ad:74:c9:da:53:
                    87:c3:c2:9d:af:f1:09:89:04:af:f9:79:29:3b:f4:
                    80:95:d6:bb:1d:6a:a7:fb:47:05:82:89:b2:6f:2f:
                    b2:40:8d:26:32:cf:d3:db:99:28:52:cc:25:4a:3b:
                    2a:95:79:fe:49:09:e1:35:a1:8d:b4:9d:eb:47:90:
                    dc:33:26:b0:7d:a2:a8:87:52:22:5f:ae:b2:5e:d5:
                    3d:0f:42:85:3b:c8:7d:e5:db:5e:35:3c:f9:ea:b2:
                    60:7d:2a:b9:a9:a7:3b:fe:0e:4a:e9:02:71:64:a2:
                    1e:62:75:19:d4:09:73:05:54:f0:97:bc:7c:e8:9e:
                    f3:5f:ba:2a:11:28:d9:98:1b:e7:0a:39:3a:ae:80:
                    15:a2:4c:28:fb:74:69:8b:b3:8f:74:6b:e1:a6:7f:
                    e4:4d:75:4f:b0:32:da:84:e4:0a:b4:02:49:17:1d:
                    bc:6a:85:6f:76:7d:77:b5:57:1c:48:fc:67:0b:14:
                    b4:eb:f8:b8:52:76:0a:7f:71:ae:c3:f6:21:38:d2:
                    65:43:d4:0d:be:27:3b:ce:4a:3d:6d:f7:40:43:c1:
                    32:04:8e:87:a4:03:eb:39:8e:ac:53:84:40:fa:f3:
                    cc:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:BD:4E:7C:84:AB:FE:A3:9B:7B:C4:59:37:48:D9:8B:EE:91:06:54
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7b1cc2c7-8b62-4dd4-ac15-64182934f7e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f6a:200::/46

    Signature Algorithm: sha256WithRSAEncryption
         7a:1d:4c:a6:60:41:a1:28:95:68:5a:96:b3:6d:03:a6:a0:2f:
         c1:08:1c:3e:fd:41:54:b2:e9:8b:0d:c4:a1:42:0a:88:0e:58:
         8f:64:26:6c:97:45:d5:e9:38:74:67:9b:0c:b1:d7:5d:d6:26:
         62:c9:79:e6:57:62:52:39:8a:0f:98:b6:e3:f7:46:95:d5:96:
         b5:66:e0:6e:32:66:8b:0e:b4:3b:66:b7:02:91:c8:54:f8:af:
         64:94:98:c7:ed:9e:1d:fc:2b:6c:4c:0f:7d:ec:55:02:24:94:
         f4:f0:23:a4:29:e1:28:b7:bc:43:92:56:d7:de:84:ff:41:ba:
         93:43:18:b8:bc:5b:1a:ee:b7:73:c8:07:06:19:16:83:2e:85:
         c8:ad:8a:c6:cb:3f:b4:90:a8:bf:b4:a7:ac:68:8c:4e:32:e1:
         c0:1b:d0:99:0d:37:bf:5d:3f:a0:66:53:cc:e9:14:b7:b5:f7:
         41:5d:ff:9c:cd:5a:e1:d3:1b:a0:53:b9:0e:93:16:c5:88:5a:
         45:13:65:0f:22:31:95:85:11:6b:bf:7c:d2:18:a9:f0:26:6b:
         19:60:6b:73:e1:fb:22:49:db:5e:74:2e:91:a8:49:1d:d9:b9:
         c1:aa:eb:b0:b6:99:6c:28:76:df:49:4e:ec:7a:c0:ac:42:3c:
         83:72:ec:78
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Sep 15 12:43:26 2026 by rpki-client