Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8f7700a2-6a4d-4cc9-9b7d-83aa88a7d298.roa
File:                     8f7700a2-6a4d-4cc9-9b7d-83aa88a7d298.roa (raw, json)
Hash identifier:          iOxulr3Fg29Yi8vxxZJUgkP/OgWHoUXdh1pqM04Qu4E=
Subject key identifier:   9F:E5:C7:EE:E5:FC:33:3D:A9:6D:91:9E:98:9A:B8:C4:60:EF:BC:90
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       32131D8188DB38731D43F5BF8BE7770723DEDC02
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8f7700a2-6a4d-4cc9-9b7d-83aa88a7d298.roa
Signing time:             Thu 22 Oct 2026 02:07:15 +0000
ROA not before:           Thu 22 Oct 2026 02:07:15 +0000
ROA not after:            Wed 20 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f38:34c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:13:1d:81:88:db:38:73:1d:43:f5:bf:8b:e7:77:07:23:de:dc:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 22 02:07:15 2026 GMT
            Not After : Jan 20 23:59:59 2027 GMT
        Subject: serialNumber=5610b2f1b7c62471f8d7d2b7dbf2655d8b6957bbb3381bb0f6128e75ab4cc0e2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:3b:40:34:75:7c:a4:ad:bd:c2:f2:ba:ad:a0:
                    1a:9e:5a:87:97:5d:9e:31:2b:47:9c:45:4e:22:ed:
                    8e:24:9f:d5:e7:f2:2e:e7:3a:26:c5:0c:36:f6:2b:
                    75:38:8c:bf:df:d5:9e:da:04:15:94:5f:42:65:f5:
                    25:86:a8:ad:55:d0:5d:f9:ef:82:c6:35:b7:91:42:
                    e6:1f:67:27:8f:25:73:8e:1c:7a:e0:ea:e8:e3:17:
                    73:e2:97:e8:61:d6:b2:02:78:4f:fc:f8:82:70:80:
                    e1:61:f3:32:b3:75:33:62:4c:c9:f4:ad:22:2d:53:
                    22:7b:56:35:fa:71:ec:a5:50:69:02:a7:22:b4:26:
                    d0:e3:e1:2a:18:e2:26:34:82:49:c5:64:10:a6:83:
                    f4:2a:cf:b6:24:da:eb:92:68:b5:ef:85:a4:7e:3e:
                    7d:f7:4f:c7:3f:fe:c2:91:1f:83:33:b7:58:c0:6d:
                    ec:9c:30:f9:00:4c:05:62:ba:a9:d7:f3:37:03:b5:
                    ac:2f:7a:08:15:e0:8c:11:2e:fe:ff:ee:71:bf:09:
                    54:e4:95:3e:ff:c3:bb:6d:93:bd:ab:60:8e:3d:b5:
                    c8:d1:08:22:37:84:41:cb:3d:10:79:f0:54:ba:16:
                    00:58:1b:f3:db:83:62:57:07:0d:8e:4a:ad:39:9b:
                    90:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:E5:C7:EE:E5:FC:33:3D:A9:6D:91:9E:98:9A:B8:C4:60:EF:BC:90
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8f7700a2-6a4d-4cc9-9b7d-83aa88a7d298.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f38:34c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         b1:e9:14:23:b4:b0:0e:60:07:94:a5:01:20:d1:fa:ce:fe:d9:
         d4:31:48:fb:19:34:d5:5d:50:c4:34:a2:f6:37:05:5d:a3:37:
         a7:a5:33:60:b5:1d:09:f9:b7:fd:d1:4c:79:17:0b:91:2c:ea:
         ca:4f:c3:19:ef:52:85:ea:b9:21:c9:07:13:75:05:8f:76:49:
         9d:78:2b:cf:53:86:ab:0c:ce:54:05:a7:6d:0a:0b:cd:3e:e1:
         ff:81:d7:55:79:2e:e2:c2:89:43:f5:cd:7c:aa:b8:74:19:cb:
         fe:3f:3a:a1:a2:4f:f8:54:a9:d9:4e:4d:61:b3:5d:13:45:97:
         f2:99:df:79:ff:1d:4a:05:47:cb:23:6c:f6:d9:8b:9f:cb:fb:
         fc:46:32:56:2c:4e:ab:7a:8e:75:cf:59:78:93:37:f9:e4:d6:
         49:3f:ab:f6:06:23:8f:86:2b:38:19:55:6a:26:62:47:2f:58:
         41:64:07:9a:e9:82:c1:14:cf:69:06:63:cc:b0:02:5b:3e:2d:
         c5:03:8c:98:f5:98:92:72:60:5e:c3:bf:d8:2e:db:ad:f1:13:
         05:6d:61:49:43:c8:09:42:b4:ed:13:47:ec:2d:15:14:61:e6:
         a8:fd:fc:a9:a3:a6:62:d6:3a:69:7c:1d:c6:cc:1a:be:b9:be:
         47:d7:f7:b7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Nov 2 21:05:59 2026 by rpki-client