Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/84f379a5-7566-4771-9096-e4caa876ae50.roa
File:                     84f379a5-7566-4771-9096-e4caa876ae50.roa (raw, json)
Hash identifier:          MYQA8QkP9W0jqNt7a1sGTZ/Yl9lwa8Dgv+1e8SZj4GM=
Subject key identifier:   D2:11:41:FD:95:34:11:6F:F9:07:87:D1:A9:67:B4:9F:42:59:66:6D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       76279BB4F728570502BAE2828C4CAB4291E26285
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/84f379a5-7566-4771-9096-e4caa876ae50.roa
Signing time:             Fri 23 Oct 2026 02:10:07 +0000
ROA not before:           Fri 23 Oct 2026 02:10:07 +0000
ROA not after:            Thu 21 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f00:7400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:27:9b:b4:f7:28:57:05:02:ba:e2:82:8c:4c:ab:42:91:e2:62:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 23 02:10:07 2026 GMT
            Not After : Jan 21 23:59:59 2027 GMT
        Subject: serialNumber=0806dc70a06c824574773573511fbc02929403a88e4dd11def97f7d53b666900, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:29:10:5e:3b:ff:e5:d0:a8:91:24:c9:6a:21:
                    e4:d9:28:79:39:5c:80:f7:db:82:53:3f:fd:2f:b9:
                    28:16:d0:13:e2:89:9b:9f:1b:74:a5:26:8d:5a:40:
                    04:44:21:e7:0b:60:b4:1a:a5:7f:9e:47:ae:e3:4b:
                    31:77:60:e8:31:79:7f:48:58:72:91:fe:d9:7a:88:
                    ff:86:70:54:d2:de:89:55:c1:27:f2:83:9c:a7:79:
                    29:ff:63:76:64:71:b6:42:86:c9:37:22:76:8b:3b:
                    54:14:36:63:1e:e9:79:7e:fc:54:a4:32:f7:28:28:
                    b9:24:48:25:fc:bd:9d:60:a4:a8:20:1c:33:dd:28:
                    88:92:7a:5c:cf:d2:96:1b:59:fc:31:3c:6f:df:1e:
                    c6:99:89:47:3b:70:85:97:d8:d4:b7:c3:ef:8f:26:
                    3e:0f:9b:e9:05:20:40:f1:af:af:8f:7a:72:b2:ea:
                    de:91:0f:b5:7f:2d:09:b3:6b:a2:f9:1a:1c:d0:4c:
                    b2:2b:86:08:61:1c:45:f5:13:ee:ed:d5:d5:73:9e:
                    fa:25:48:66:7a:ef:f7:74:cb:55:87:50:11:3b:ec:
                    41:48:72:8d:33:90:f4:0d:f5:7a:1e:40:17:b0:56:
                    3e:0c:b5:65:2e:71:7b:9a:1a:46:3f:fc:47:45:3d:
                    cb:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:11:41:FD:95:34:11:6F:F9:07:87:D1:A9:67:B4:9F:42:59:66:6D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/84f379a5-7566-4771-9096-e4caa876ae50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f00:7400::/40

    Signature Algorithm: sha256WithRSAEncryption
         b5:79:4d:15:7a:2e:35:d0:c2:18:c2:ff:7f:ff:07:03:48:5f:
         fc:3c:db:ae:26:b5:67:13:06:37:0b:79:fd:c2:c6:68:aa:26:
         97:58:3d:b8:96:84:6a:73:a8:a9:e3:0a:63:d1:49:e7:f7:63:
         75:e6:c6:46:e4:14:c0:fd:d4:df:27:34:ab:4e:5e:95:32:32:
         12:55:18:2e:21:1f:b6:a5:94:dc:63:f4:e7:14:8f:a2:e0:7c:
         e9:a4:7f:dc:b9:4e:d2:e3:e8:ed:93:dd:e0:6d:35:db:44:74:
         6a:cd:11:97:77:23:de:e1:fa:c5:5b:93:ac:ca:38:a4:8f:d4:
         4f:2d:8b:d9:be:f1:35:eb:cb:c6:b4:d8:ee:9b:ed:ca:ce:48:
         a1:ab:7f:5b:62:8a:3c:49:1d:0a:9d:84:4e:56:07:c6:c0:aa:
         0c:4b:9c:be:a8:90:8b:cc:61:2a:50:9c:d0:39:c2:b5:76:35:
         e3:56:e1:63:ab:dc:45:9f:62:e5:88:d7:5b:4e:49:41:8e:b9:
         b1:6a:2f:b4:71:22:5f:a5:a7:27:33:27:42:52:5a:f1:8c:f6:
         d4:d6:4f:3e:06:63:73:83:b6:fe:f1:bb:39:d9:e8:9c:82:f8:
         7d:bb:5e:ae:4b:d3:0c:1d:12:f6:ad:00:61:11:5c:7f:0f:ff:
         d7:55:c1:ab
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Nov 3 19:22:29 2026 by rpki-client