Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/87977256-cc2f-4320-802e-cc8948496655.roa
File:                     87977256-cc2f-4320-802e-cc8948496655.roa (raw, json)
Hash identifier:          6QFriWPoo10xwG1fXccIvVNZcoAO2LJD9DvYucn1N2k=
Subject key identifier:   7F:BB:B3:21:4C:5D:03:1D:14:C5:E9:84:01:B5:93:4B:FE:E7:69:9A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       504B7872883BB4041E70D56223450A89FE554906
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/87977256-cc2f-4320-802e-cc8948496655.roa
Signing time:             Thu 08 Oct 2026 17:16:22 +0000
ROA not before:           Thu 08 Oct 2026 17:16:22 +0000
ROA not after:            Wed 06 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fe3:5000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:4b:78:72:88:3b:b4:04:1e:70:d5:62:23:45:0a:89:fe:55:49:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  8 17:16:22 2026 GMT
            Not After : Jan  6 23:59:59 2027 GMT
        Subject: serialNumber=76f7b9b8ac290f9603691b65d8907453cf1f7303d4fb3a24a4a80d10b3d63f00, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:16:1b:1f:9d:4e:b6:cf:25:f8:5d:8a:43:0d:
                    28:b2:6f:7b:c7:fb:6d:98:dc:12:de:83:fa:4b:0a:
                    df:73:f9:8e:08:d2:33:7f:bd:84:c1:d2:56:8d:14:
                    e1:9c:7f:43:47:8d:b2:4e:17:ca:ff:ba:ba:47:b7:
                    2c:4a:bd:fd:70:ee:37:bc:6a:2f:4f:1e:08:3c:1b:
                    be:04:e0:05:87:0f:71:ce:ce:6c:df:f4:1c:3b:4b:
                    44:c7:0f:94:f5:eb:4d:f6:0f:a4:7d:04:3f:d0:9a:
                    a8:2f:1a:0c:00:d8:8b:b4:aa:19:a7:6d:02:7b:77:
                    9a:d3:2e:3d:45:65:f8:db:19:51:19:f2:41:ba:f3:
                    58:0c:53:60:f5:82:db:3a:75:32:f4:bb:d9:74:0b:
                    f8:ba:49:22:90:00:df:b0:5b:25:63:2a:30:98:ad:
                    18:f1:02:3b:e2:42:8c:0b:4f:b6:e8:b7:9a:6e:8a:
                    e6:9b:42:05:90:70:ff:02:fc:60:0b:78:90:93:01:
                    13:53:01:16:52:5a:cf:60:8d:cc:8e:94:63:08:e7:
                    0e:f8:32:ec:88:27:d2:4b:a1:12:75:72:64:97:38:
                    e0:9d:08:b3:0b:d8:5a:8f:b2:a5:45:ed:81:1a:a9:
                    e3:6c:9c:5a:27:9a:c9:8f:48:89:03:c4:2a:b2:7c:
                    a7:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:BB:B3:21:4C:5D:03:1D:14:C5:E9:84:01:B5:93:4B:FE:E7:69:9A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/87977256-cc2f-4320-802e-cc8948496655.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fe3:5000::/40

    Signature Algorithm: sha256WithRSAEncryption
         69:5a:50:6e:db:a5:9e:96:2c:bb:38:b2:c7:f7:fb:18:b3:2d:
         15:b1:a9:85:2b:70:a5:c9:b4:6e:7c:a6:a9:0e:69:11:72:9a:
         ef:8a:30:dc:b0:84:75:de:7d:53:c1:08:ee:dc:34:76:7b:8e:
         6f:03:d0:fc:00:a8:1b:de:23:3b:bb:77:33:b4:c7:62:34:84:
         de:6a:6e:9a:8d:13:c4:9b:cf:5a:52:55:08:a4:7b:fa:10:ad:
         6e:96:9c:45:ec:51:15:16:b9:51:e9:12:33:df:32:02:d2:b4:
         a6:60:12:38:d0:7c:b3:97:c6:ca:67:57:04:d7:f0:98:7e:fb:
         49:ea:3f:71:2b:6d:d9:cd:8b:01:c6:5a:53:c4:52:de:e7:6d:
         0e:e3:c9:45:6c:06:79:01:c5:dd:47:0d:1b:b7:1d:c8:ea:d7:
         74:95:be:ec:e7:c0:6c:54:c8:d8:ed:05:7f:27:9b:05:7b:d6:
         de:b4:4d:fa:a5:e2:cf:ad:ca:fd:d3:1a:0f:78:be:02:9d:13:
         9d:bf:93:41:2c:83:28:d5:b8:dd:0e:a5:f3:23:a4:7d:b3:6a:
         d1:89:f3:eb:7e:d2:09:9e:ff:a8:88:b0:5f:98:d7:c3:cb:62:
         9d:02:b0:d2:b2:cd:c1:c1:c2:ab:4c:44:c4:cd:b9:b8:68:4c:
         d3:b6:03:ee
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Nov 4 05:35:47 2026 by rpki-client