Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83fa861d-7e2c-44c3-8500-ad1f6d0c3da0.roa
File:                     83fa861d-7e2c-44c3-8500-ad1f6d0c3da0.roa (raw, json)
Hash identifier:          KyOgzPpg0FNnH/Q0BnUDJ6Vux4adeTTROijwZaLOfpM=
Subject key identifier:   2A:FC:CA:B9:9A:CE:4E:A6:42:10:6B:C8:6D:E4:4B:2B:50:47:38:9C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       787A7A56082BE6751EEB3D5F8DB0E509C3554A57
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83fa861d-7e2c-44c3-8500-ad1f6d0c3da0.roa
Signing time:             Fri 23 Oct 2026 02:10:29 +0000
ROA not before:           Fri 23 Oct 2026 02:10:29 +0000
ROA not after:            Thu 21 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fff:80d0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:7a:7a:56:08:2b:e6:75:1e:eb:3d:5f:8d:b0:e5:09:c3:55:4a:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 23 02:10:29 2026 GMT
            Not After : Jan 21 23:59:59 2027 GMT
        Subject: serialNumber=b9251dab447c884546a2704e20b44dadfa8d51c23c51b715b2263e402f9cb0fc, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4c:f1:c8:d9:e2:43:45:4a:07:d7:96:cf:57:
                    fd:e0:69:c2:21:e2:ac:bc:da:f1:db:6f:e4:0b:48:
                    ef:b3:03:59:14:82:7d:04:f3:41:a8:0a:c6:b5:2e:
                    10:36:65:3a:22:9e:65:bd:20:a9:ab:f2:7f:31:52:
                    b2:2d:e5:89:72:22:47:e4:6e:b0:82:9a:3d:7c:42:
                    b0:5d:72:ff:10:26:1f:c4:06:88:27:ef:d7:9f:7b:
                    af:c6:ee:2c:d8:a7:2d:f3:0f:1f:05:2f:e3:2b:03:
                    aa:ad:d4:1a:2f:de:45:5a:86:2d:66:5a:bb:e7:8d:
                    91:2a:e6:17:b6:3d:48:d8:69:31:09:05:55:d5:ec:
                    29:80:69:59:4e:35:3c:e8:47:e6:9a:70:e2:76:28:
                    48:05:bf:ed:e8:31:c9:35:1c:29:0a:b7:57:b0:f9:
                    c8:02:ad:d5:94:a4:bb:bf:09:bd:75:94:50:30:12:
                    fb:97:9e:2a:ae:66:7e:ae:f1:86:ec:e4:ed:3e:a1:
                    f9:af:a3:c7:fd:fa:f9:cf:5d:29:14:2b:74:15:b2:
                    af:16:4c:71:2b:f1:55:25:e6:f3:a3:2f:36:cb:49:
                    81:b2:1c:d7:fa:e6:63:f6:9d:cd:8b:3e:db:f0:1e:
                    71:e8:a2:0f:20:4f:3b:ae:c4:d0:0f:74:07:94:6f:
                    f3:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:FC:CA:B9:9A:CE:4E:A6:42:10:6B:C8:6D:E4:4B:2B:50:47:38:9C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83fa861d-7e2c-44c3-8500-ad1f6d0c3da0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fff:80d0::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:94:2d:85:93:5f:86:35:a0:07:6f:5b:47:95:1e:78:76:0c:
         2d:42:38:2c:d6:ce:29:82:14:12:aa:dd:6b:33:09:55:0f:77:
         72:11:93:58:3c:41:46:5d:90:39:d8:8e:34:da:c7:c5:9e:75:
         0b:29:95:b9:ad:1d:ea:de:9c:2b:e2:55:5e:01:08:f4:0e:3f:
         f7:ac:b8:22:16:b0:58:04:49:08:3e:bf:df:ad:d1:73:d3:b4:
         d8:dd:78:04:cb:ef:ec:40:a7:70:14:7c:0a:0b:94:48:57:b0:
         51:d3:ee:21:22:dd:51:d9:70:5e:45:e5:4e:7b:e4:4e:b2:a9:
         69:4a:03:88:83:50:dc:d7:07:2c:2b:90:9b:f1:28:37:bd:ed:
         c0:49:db:19:69:32:d7:ad:53:cc:19:3d:c1:f9:78:85:3c:f2:
         84:81:b1:4e:c2:f8:39:c7:eb:31:b8:74:9e:da:4c:1b:0e:db:
         04:f4:81:2c:c9:5f:09:ec:7b:78:47:3f:95:d6:c9:dd:ae:46:
         62:e0:49:df:54:c2:95:64:e5:e7:02:58:8b:9a:a7:36:c6:65:
         94:07:c4:73:42:df:23:ae:60:8d:8f:ea:7d:53:fd:dc:70:5e:
         0d:a1:0c:39:58:04:d5:64:1d:a3:ed:f3:98:dd:eb:79:0b:23:
         67:83:a6:65
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 4 05:39:38 2026 by rpki-client