Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88e587d9-8e06-45b7-b934-26b4ec796dde.roa
File:                     88e587d9-8e06-45b7-b934-26b4ec796dde.roa (raw, json)
Hash identifier:          0a1O1AofqV7BWPA//VhvYsRgfIqKT9Pe0DCLckE+0xo=
Subject key identifier:   9A:B0:3B:1C:C3:15:2C:A1:6C:9E:5A:83:D3:5E:67:2C:96:F1:21:B0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5F2F7BE2ECA830D14FDE7C57BA9B30FB5D5C9595
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88e587d9-8e06-45b7-b934-26b4ec796dde.roa
Signing time:             Mon 03 Aug 2026 00:10:06 +0000
ROA not before:           Mon 03 Aug 2026 00:10:06 +0000
ROA not after:            Sun 01 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff2:5040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:2f:7b:e2:ec:a8:30:d1:4f:de:7c:57:ba:9b:30:fb:5d:5c:95:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  3 00:10:06 2026 GMT
            Not After : Nov  1 23:59:59 2026 GMT
        Subject: serialNumber=f51bfeb8bd3b0b65b145b8b39af9627be2a295a584a91e8a3553f8c45300d4fe, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f0:9c:32:f9:a7:a0:b2:75:43:7c:77:4d:b8:
                    8a:91:dc:7a:7c:d2:3d:6d:e4:ff:d1:b9:4d:0a:d1:
                    94:47:d3:50:19:f5:e2:41:71:33:04:f2:5a:d7:08:
                    9f:ff:91:94:42:65:f3:9a:47:8d:29:02:ed:fb:cc:
                    17:d6:fe:21:05:05:9f:63:13:22:b3:7f:9d:88:d8:
                    50:29:a4:68:cf:82:3d:e7:bd:99:5a:dc:d9:d1:cd:
                    37:0a:e9:da:31:b1:61:cb:80:07:96:d4:c7:9b:8c:
                    9e:03:b9:6f:20:ce:cc:84:c1:8e:6a:c3:89:29:cd:
                    9b:3e:93:c0:dc:7f:9d:65:83:f9:64:2f:33:71:a8:
                    45:d1:2f:43:fc:bc:89:20:df:9f:94:c0:dd:a9:74:
                    ce:cc:c8:69:8a:06:a9:77:d0:de:49:5a:3d:53:84:
                    10:0d:8f:74:08:70:cf:b8:7c:98:0f:0a:f7:cc:5a:
                    df:63:03:9b:f6:44:bd:68:7c:fd:70:bf:41:4e:f0:
                    2c:a6:fd:a2:91:8e:83:1a:86:da:80:39:eb:bf:62:
                    0f:6f:15:8b:03:5a:32:20:6d:e3:04:84:2e:c7:d7:
                    1d:02:83:6a:c5:6d:21:ca:12:66:64:e4:26:d1:f0:
                    a9:de:f9:c4:ec:17:f3:7b:57:8c:bf:3a:0b:bf:2f:
                    cd:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:B0:3B:1C:C3:15:2C:A1:6C:9E:5A:83:D3:5E:67:2C:96:F1:21:B0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88e587d9-8e06-45b7-b934-26b4ec796dde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff2:5040::/48

    Signature Algorithm: sha256WithRSAEncryption
         2a:fd:07:b0:42:16:dd:b9:ad:70:b3:5f:dc:b3:6c:d4:f8:55:
         5c:db:ec:cb:4c:17:5b:a6:e4:bf:0a:2d:e7:db:41:73:c3:81:
         5e:bc:b1:b9:49:56:4f:22:9c:1e:c0:65:50:53:61:b3:ab:32:
         b0:04:5c:77:98:b8:d4:33:92:23:4e:46:a8:8b:07:8b:1f:7b:
         1f:8f:5b:63:b0:4c:66:af:1d:1f:72:32:89:ad:3b:99:9f:db:
         e1:b2:35:c8:a0:9a:4c:84:9e:fe:ef:d7:c4:69:64:fe:b8:bd:
         9b:d8:62:f6:36:8e:a1:8d:0c:aa:4c:42:65:f8:0b:2a:c6:6b:
         ce:21:ea:5c:1b:4d:2b:75:ac:81:b4:c8:4f:45:50:14:79:d8:
         3d:db:56:b8:32:39:64:13:7f:51:ef:7f:8c:87:74:1d:1c:5f:
         23:a3:e0:e7:4d:29:70:4a:2f:9b:d6:29:79:00:87:57:83:87:
         86:cf:82:4c:ee:25:56:ed:12:2b:50:71:82:50:d5:70:ee:62:
         07:b2:4b:ee:42:25:e5:b4:2e:d8:06:1d:8f:a7:cb:d0:44:b3:
         53:43:04:d3:86:bc:03:48:49:34:b0:c4:2e:2a:6c:0e:8b:e8:
         50:79:fc:b9:57:e4:7e:66:e8:bf:b0:83:d4:d2:17:41:b6:a4:
         b9:95:41:ab
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Aug 3 05:40:16 2026 by rpki-client