Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8eb4ea03-c241-4953-8f31-27c3b11c5bab.roa
File:                     8eb4ea03-c241-4953-8f31-27c3b11c5bab.roa (raw, json)
Hash identifier:          U/AydfkHaExwnQoH2IeH+1NXC46E9XKk3ftqcq6FyYY=
Subject key identifier:   19:9C:0E:C9:E0:FA:33:5C:E8:31:EA:A6:77:E1:A9:82:F5:DB:83:DA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       70BF1169A4155B55CAF5CAE8EFADC722E5C8997A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8eb4ea03-c241-4953-8f31-27c3b11c5bab.roa
Signing time:             Wed 09 Sep 2026 16:03:41 +0000
ROA not before:           Wed 09 Sep 2026 16:03:41 +0000
ROA not after:            Tue 08 Dec 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f62:1000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:bf:11:69:a4:15:5b:55:ca:f5:ca:e8:ef:ad:c7:22:e5:c8:99:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep  9 16:03:41 2026 GMT
            Not After : Dec  8 23:59:59 2026 GMT
        Subject: serialNumber=f80b08e576666ebabca59e19dfb603e1db6accab5a5e7ca25c1c66429d0248a7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:45:7e:78:4c:31:0c:bb:fd:3f:42:22:16:4b:
                    d8:65:b0:f4:9e:31:2f:ab:9d:b9:55:fc:93:4a:79:
                    f8:4f:96:c4:10:8c:ee:df:8d:e4:cb:60:a7:da:b2:
                    2f:3a:cd:78:e6:08:30:8c:24:76:46:81:3c:db:ac:
                    12:31:7c:a4:2b:8a:3d:27:25:39:3f:ae:ab:55:49:
                    fb:a3:78:0e:89:86:96:a4:3d:d3:49:4b:23:cc:41:
                    e4:fb:0b:c3:6f:34:f6:07:5d:50:65:d3:f7:a0:55:
                    c1:89:72:25:34:50:7d:be:1c:17:9c:4a:a6:4c:85:
                    b7:17:f1:1b:2e:e9:94:76:ed:85:f2:b7:48:82:7c:
                    8c:2e:83:11:05:fe:e9:7f:df:c2:d5:30:9a:d4:9e:
                    93:c3:e7:7e:06:27:1c:b0:68:b2:22:88:25:a8:94:
                    b9:0f:d6:a1:8d:d7:4a:67:cc:85:6b:c7:b8:bb:ce:
                    13:49:ce:2e:18:ee:38:15:57:a5:2d:25:d6:63:e6:
                    b0:eb:79:a8:cc:f0:77:a1:f5:74:93:b3:ee:24:8d:
                    c2:ea:bf:03:32:3a:1e:5b:2d:78:fd:57:b8:23:0a:
                    4f:4b:1e:16:73:3d:21:32:18:97:48:c1:48:6c:0d:
                    50:fb:3e:6b:8a:70:74:86:52:b3:46:5d:63:c7:58:
                    2c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:9C:0E:C9:E0:FA:33:5C:E8:31:EA:A6:77:E1:A9:82:F5:DB:83:DA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8eb4ea03-c241-4953-8f31-27c3b11c5bab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f62:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         7e:c6:32:48:b6:39:92:61:50:bb:d5:f3:74:f2:b0:39:54:a6:
         d0:87:b8:44:88:f1:15:45:c3:7d:88:cb:6b:4c:ec:2c:fb:69:
         14:98:d8:fd:a1:0c:d9:38:18:a4:99:8b:80:fe:7e:15:23:b5:
         b2:b5:b1:24:ef:4c:f0:58:7f:95:8e:41:16:52:52:0f:51:32:
         35:1f:6e:15:09:f4:bd:b0:c3:a2:87:17:e2:49:79:5a:e2:93:
         86:ad:e2:e7:9a:b0:3d:96:5d:20:6c:b6:83:14:fe:b7:be:c1:
         0e:e4:3a:4f:64:92:eb:7e:01:14:8b:b7:9b:9a:38:bb:1e:08:
         23:cc:92:8a:f1:10:74:17:eb:a6:46:d6:67:d9:29:58:59:65:
         6d:70:1a:40:32:bc:d0:7b:f2:4e:52:54:87:d9:b8:1d:95:03:
         ed:89:d1:91:81:81:1d:2e:e0:11:1b:51:93:6a:88:8a:0c:eb:
         05:cb:b4:ed:65:98:5d:31:90:69:41:74:36:3b:07:3b:a8:30:
         09:83:00:af:20:44:b4:92:77:3d:66:cf:77:52:c7:84:a5:8c:
         7b:02:0b:be:4a:59:05:20:b6:59:73:e3:46:98:77:2a:cc:99:
         56:63:b8:fb:97:ae:15:34:6a:58:94:cd:b1:4b:c1:58:93:00:
         2e:7a:67:7d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Sep 15 13:17:10 2026 by rpki-client