Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/81a2a41d-ec33-4787-b495-99f69ce1082e.roa
File:                     81a2a41d-ec33-4787-b495-99f69ce1082e.roa (raw, json)
Hash identifier:          VY54Ze3VFNpW8fGu3kX+hBNXEzZF7tkrTAXnx1px1HY=
Subject key identifier:   5E:8B:5F:F9:05:AB:44:CD:F2:28:AB:86:BB:F4:E6:27:36:6F:72:E7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       64A0551A74F2CDB2537EB9FD28A84C52F5CDCB61
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/81a2a41d-ec33-4787-b495-99f69ce1082e.roa
Signing time:             Thu 10 Sep 2026 00:11:07 +0000
ROA not before:           Thu 10 Sep 2026 00:11:07 +0000
ROA not after:            Wed 09 Dec 2026 23:59:59 +0000
asID:                     8987
IP address blocks:        2600:1feb:20c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:a0:55:1a:74:f2:cd:b2:53:7e:b9:fd:28:a8:4c:52:f5:cd:cb:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 10 00:11:07 2026 GMT
            Not After : Dec  9 23:59:59 2026 GMT
        Subject: serialNumber=fab1bcdb7d47afbdfd637fde2eef9423bbabc49342161dde5c098874705edf10, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2f:26:2b:f6:82:59:aa:43:b2:ec:41:6e:39:
                    08:06:61:9b:c5:3a:19:3c:bb:f2:b1:62:a9:69:82:
                    b0:f1:5e:ff:9d:93:59:80:ae:bc:48:8d:7b:9c:e2:
                    99:1a:45:f4:48:a5:9a:c0:f2:87:7c:48:54:c7:26:
                    e2:e1:d2:01:f6:a9:35:14:e9:96:c8:73:11:b8:8b:
                    b3:0c:9a:bd:cf:5d:c4:7c:55:0b:ff:df:20:87:82:
                    b9:4e:91:a0:a8:53:c6:42:dd:a7:d1:c7:1d:ad:a5:
                    67:4c:72:13:70:38:7e:e0:71:50:54:db:72:b7:0d:
                    f8:cd:06:27:79:3b:29:d2:d5:cb:d9:f3:82:94:47:
                    1b:b7:dd:6c:f0:3f:7f:eb:35:68:6c:5f:12:0a:e5:
                    06:ed:11:8d:87:e3:83:6c:ab:8d:4d:3a:a0:f0:a3:
                    26:ba:0d:1f:8c:d0:f8:37:b6:9f:8f:96:4d:f1:dc:
                    55:84:92:5a:6a:e9:02:62:4f:24:78:9c:12:d0:58:
                    d3:0a:59:ca:90:55:6b:ac:17:1b:96:d9:32:36:34:
                    25:b3:34:a2:ac:6e:83:36:79:52:dd:4d:c3:3d:a0:
                    bc:c2:c0:0f:5e:c1:a5:d1:2c:16:43:50:f0:93:6a:
                    79:2d:02:e7:4b:65:fb:9d:bb:68:9e:8d:1b:b6:56:
                    7e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:8B:5F:F9:05:AB:44:CD:F2:28:AB:86:BB:F4:E6:27:36:6F:72:E7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/81a2a41d-ec33-4787-b495-99f69ce1082e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1feb:20c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         98:e9:6f:fa:37:81:d4:9f:aa:40:a4:90:8c:d3:e9:fc:a9:e2:
         4a:f4:6b:e5:d2:06:e0:9d:05:8e:61:f3:0e:1c:05:1b:db:cb:
         ac:25:f3:00:55:9d:4d:7c:0f:62:37:1c:43:3e:38:7f:ae:e2:
         83:32:49:e5:6a:68:62:74:c9:03:a1:3d:35:da:4b:45:19:0b:
         10:c6:40:bb:ce:00:72:f5:3b:17:77:69:d4:0c:31:2b:47:4e:
         aa:d9:b3:1a:4a:6a:95:dd:0e:fd:04:72:25:62:b5:56:f1:80:
         eb:f1:cf:4d:45:18:89:fc:32:f4:56:03:8b:c9:a1:47:41:ab:
         23:54:d3:4d:ac:ba:4a:71:99:86:e1:ab:03:0d:47:68:5c:a2:
         c2:68:53:92:fa:d9:45:6f:03:bd:f5:f1:e7:c9:ce:91:41:99:
         70:87:c1:03:32:5e:e0:a4:53:08:91:a7:af:70:32:94:0d:01:
         76:63:03:2e:97:df:9e:9b:ce:25:34:c7:44:c6:1b:59:7e:b2:
         7e:c6:c7:da:be:0d:38:14:53:d7:fc:22:f0:5d:5d:ad:8a:8d:
         86:36:22:b8:cc:58:29:63:b4:ca:37:4f:80:33:8a:9f:b5:5e:
         ea:1c:5d:bc:1b:9b:94:52:48:52:8f:ea:54:f1:53:2b:aa:48:
         83:6a:55:c6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Sep 17 16:58:00 2026 by rpki-client