Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d7700c4-2062-4b4c-8fc9-21c7cfb4c1cb.roa
File:                     7d7700c4-2062-4b4c-8fc9-21c7cfb4c1cb.roa (raw, json)
Hash identifier:          TP5OehAhAyFfTvheFXTSX/Mdw0VWmYK7p4dwi2mWN+U=
Subject key identifier:   64:45:EB:1C:41:A1:E6:37:73:C5:B3:D3:DD:2F:3F:5E:41:A1:F1:F0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6455CE0F6B6CFA5F69D0695F30ED8ABC231BBF02
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d7700c4-2062-4b4c-8fc9-21c7cfb4c1cb.roa
Signing time:             Wed 09 Sep 2026 16:03:38 +0000
ROA not before:           Wed 09 Sep 2026 16:03:38 +0000
ROA not after:            Tue 08 Dec 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1fe7:8000::/39 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:55:ce:0f:6b:6c:fa:5f:69:d0:69:5f:30:ed:8a:bc:23:1b:bf:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep  9 16:03:38 2026 GMT
            Not After : Dec  8 23:59:59 2026 GMT
        Subject: serialNumber=223d7de2ad528eae36834a7c7d83bd55c1e8856ca70789713e5682540dcd557c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bd:63:7b:63:32:64:1e:2b:f8:05:c1:8d:2c:
                    13:f6:74:63:4c:64:ce:3d:6f:63:cf:10:4e:2a:da:
                    74:04:1a:78:bd:74:fe:c1:55:b7:0f:f9:b2:72:3d:
                    4c:de:e9:76:54:19:0f:38:16:8a:ce:0b:7b:9f:56:
                    b1:24:b9:8c:cd:05:77:a8:aa:7f:3e:b7:4c:d9:82:
                    3c:a6:be:2a:62:85:ee:72:35:59:e7:23:cc:35:dd:
                    c7:f5:51:23:00:d6:c2:3f:bd:82:d5:e8:8c:61:67:
                    0a:65:90:d2:b8:cc:be:90:c1:94:03:d9:3f:95:4c:
                    86:21:90:70:13:0a:eb:80:54:e7:d7:72:a3:8c:7a:
                    7c:bd:99:c0:49:26:23:9f:0f:4e:b9:18:94:ef:98:
                    3b:02:1d:f7:64:b4:76:59:f9:de:06:94:da:b9:9d:
                    e4:4d:28:f4:9a:7e:f2:06:d8:72:9e:0a:fc:d7:04:
                    31:7e:5f:e9:72:7a:6d:57:2c:25:29:ec:34:6a:bf:
                    4c:e0:d7:29:47:43:bf:24:e9:53:3e:e3:de:55:02:
                    24:29:a4:75:cd:8a:eb:6d:c3:d8:05:af:90:ae:84:
                    fa:f4:48:86:a7:11:04:6f:d9:5f:b4:28:6d:eb:7f:
                    79:b5:21:53:eb:ab:9f:b5:f3:a2:d9:73:2a:0d:a4:
                    14:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:45:EB:1C:41:A1:E6:37:73:C5:B3:D3:DD:2F:3F:5E:41:A1:F1:F0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d7700c4-2062-4b4c-8fc9-21c7cfb4c1cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fe7:8000::/39

    Signature Algorithm: sha256WithRSAEncryption
         12:d4:c0:d3:57:8f:ab:4a:88:db:88:f5:37:5e:b0:48:91:70:
         24:95:2c:ca:c6:35:e0:f1:a6:07:7e:0b:d7:4c:61:94:3d:5a:
         73:63:ad:93:74:58:bd:5d:1f:04:54:86:4c:ef:0d:a3:bb:3d:
         ae:d9:c3:c4:be:d7:5d:6f:82:c0:79:44:61:00:74:e4:90:e4:
         60:d8:be:6f:6f:95:c6:70:ea:36:27:91:ca:a8:52:cb:57:07:
         26:c8:f4:b3:be:7d:dd:b2:36:50:d2:31:01:ee:62:3a:df:55:
         b1:6d:89:14:57:84:c7:69:74:2c:fe:c2:d9:d8:8f:02:6a:a4:
         38:c9:77:64:60:77:0c:e7:04:85:73:54:76:e6:85:47:90:e2:
         cd:2b:c2:e0:5f:69:ef:40:53:62:36:23:92:4f:85:a9:98:e8:
         04:0d:18:3f:98:53:ad:48:bd:4b:25:0d:50:a4:a2:a4:4b:c6:
         88:57:11:1a:d3:be:2f:74:96:f3:da:d8:09:17:a0:1c:26:87:
         97:ae:e6:34:12:de:77:62:17:06:0e:f2:2c:c5:62:bd:39:6b:
         dc:45:d7:6f:93:94:4f:aa:39:ee:88:12:07:3c:8c:3a:20:71:
         1b:1f:5f:fc:de:fe:b2:f3:b6:a0:21:4a:82:63:92:0f:03:9a:
         cd:e7:43:a2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Sep 17 17:38:07 2026 by rpki-client