Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/80782d40-54aa-4ff7-ab2e-72186962a508.roa
File:                     80782d40-54aa-4ff7-ab2e-72186962a508.roa (raw, json)
Hash identifier:          6UzSM1rSF2/cUdrYUisshqEf+Up9XFxub1hqjyy2UlE=
Subject key identifier:   AB:76:ED:0C:22:95:CA:4A:77:78:4B:5F:F9:49:E6:9D:25:24:DB:DA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       36F6A3B5157A41F004D3F5B291D821F619F38295
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/80782d40-54aa-4ff7-ab2e-72186962a508.roa
Signing time:             Mon 10 Aug 2026 00:31:09 +0000
ROA not before:           Mon 10 Aug 2026 00:31:09 +0000
ROA not after:            Sun 08 Nov 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f61:8000::/39 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:f6:a3:b5:15:7a:41:f0:04:d3:f5:b2:91:d8:21:f6:19:f3:82:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 10 00:31:09 2026 GMT
            Not After : Nov  8 23:59:59 2026 GMT
        Subject: serialNumber=963cf6647fe3fd176f3cd01b74cf8b05181289dcad90f0f1fddd5b1004166f58, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:59:0a:4d:b5:a3:4f:b1:fc:f6:55:6e:8f:e9:
                    e2:60:9b:2c:eb:3c:a5:1d:d4:a0:31:1b:27:db:5a:
                    dc:06:9d:0b:4b:2c:57:a6:fa:09:9a:e4:89:72:06:
                    9c:1a:a6:cc:58:d3:7c:c4:a2:81:5e:f4:62:45:3a:
                    9f:50:94:b8:13:94:9d:1e:4e:0f:66:32:20:95:28:
                    15:31:b6:4f:c1:b7:f4:6a:03:84:f4:75:0d:31:e0:
                    d4:d6:d9:df:b0:e5:fc:22:19:52:7a:7c:b2:dc:f0:
                    e8:28:ec:2a:34:3d:a4:78:db:f3:6f:89:ef:62:39:
                    93:67:01:1f:f5:3a:44:42:ec:54:fc:31:7f:e8:28:
                    e1:2d:7e:2c:c8:59:79:58:40:f1:a6:99:b2:d6:24:
                    06:86:21:85:00:96:b7:1b:a0:9f:ef:f8:21:8c:b2:
                    e6:11:f3:28:9e:51:ad:eb:ee:c9:9b:24:34:1f:c0:
                    92:d2:e8:89:dc:b3:9b:dc:23:b6:50:95:5b:70:c7:
                    55:c1:e1:4d:aa:c3:c6:e5:6d:aa:65:0c:49:d8:33:
                    bf:b5:1a:c0:67:78:e6:9a:4a:41:c4:ea:61:1b:93:
                    29:6a:0c:ed:28:d9:48:2e:cf:73:c9:6d:ce:c5:18:
                    2c:c4:29:13:ab:79:3d:f5:6f:f8:ac:04:21:27:87:
                    3d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:76:ED:0C:22:95:CA:4A:77:78:4B:5F:F9:49:E6:9D:25:24:DB:DA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/80782d40-54aa-4ff7-ab2e-72186962a508.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f61:8000::/39

    Signature Algorithm: sha256WithRSAEncryption
         7b:09:2e:a1:1d:7c:ed:f8:89:a5:b0:82:34:16:0f:8b:a5:40:
         72:67:23:53:2c:92:0e:d4:28:a7:f4:52:fd:14:10:73:0e:ad:
         77:f9:15:c0:1e:13:30:91:c8:ce:c1:e2:cd:d2:7e:74:33:0d:
         53:9d:54:0a:8c:0a:c8:64:0b:cd:f9:d0:67:87:1d:72:83:df:
         bd:a9:8c:03:a3:7c:b3:39:76:7e:00:b0:11:fb:4c:00:a9:0e:
         6a:43:9c:4d:23:60:24:af:51:a4:27:e2:b3:49:0b:6c:24:e3:
         74:4f:0a:b2:c7:32:2a:2e:47:9e:cb:89:58:27:66:5a:50:db:
         f2:88:f0:bd:57:fe:d1:c7:e1:47:74:02:cc:27:54:f8:db:7d:
         5d:22:f2:07:d5:5e:b4:38:b2:ca:65:f3:98:83:79:1b:41:3f:
         c2:1f:22:c9:2d:a4:8e:d1:01:6c:5d:de:32:38:49:61:da:e6:
         8c:ae:f8:9e:d7:dc:7f:cb:3d:77:2f:96:4c:5c:11:cf:40:0f:
         32:6e:f9:b4:e7:31:b9:73:f1:94:e8:93:33:93:b2:c8:95:52:
         d5:fd:8d:3c:6e:57:f0:c7:78:5e:5f:e8:ab:0f:e3:42:e2:9f:
         42:21:3d:5e:68:aa:9a:53:ef:d0:3a:d2:5c:e0:30:9f:a4:0b:
         cb:88:c6:b5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Sep 17 15:35:07 2026 by rpki-client