Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/90cb9f18-98a9-4354-a931-48787d7e4d67.roa
File:                     90cb9f18-98a9-4354-a931-48787d7e4d67.roa (raw, json)
Hash identifier:          Bm7fyp/28kjR3fVVIsgXWqFKSTY2tEJ9BTgXRq+VfgY=
Subject key identifier:   F5:A4:89:10:13:5A:F0:93:6A:BF:CA:61:16:4E:F5:56:F4:7A:86:DC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6CA31BC3764E4CA02CBF9CFCC5670869F93AD32F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/90cb9f18-98a9-4354-a931-48787d7e4d67.roa
Signing time:             Wed 09 Sep 2026 16:03:46 +0000
ROA not before:           Wed 09 Sep 2026 16:03:46 +0000
ROA not after:            Tue 08 Dec 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f68:c200::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:a3:1b:c3:76:4e:4c:a0:2c:bf:9c:fc:c5:67:08:69:f9:3a:d3:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep  9 16:03:46 2026 GMT
            Not After : Dec  8 23:59:59 2026 GMT
        Subject: serialNumber=28bc2e25120e8c4d77565dd2129ec4eb437c98508f770ca131faf4196886b2ea, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:99:6c:b7:c8:1c:7f:dd:6b:28:db:9e:12:69:
                    b6:be:88:79:08:07:1b:bd:27:c9:70:6a:02:58:d9:
                    b2:2c:25:d1:5c:0f:c1:a7:98:98:23:b7:cc:45:2a:
                    b2:4a:67:b7:75:dd:32:eb:97:5a:44:80:8d:50:34:
                    03:f7:dd:6b:3a:ea:b1:32:08:86:8c:e1:a8:7e:ae:
                    20:5d:76:a7:9b:68:0a:c6:d2:95:ef:89:4a:dd:c5:
                    3c:ab:64:74:32:60:54:a4:76:7d:3f:8a:e7:a9:25:
                    1f:c5:cc:3f:52:69:08:a4:9a:8d:00:04:1b:14:e9:
                    de:ab:5f:80:b7:ee:5c:95:32:1a:37:7f:7c:a4:5f:
                    7a:bf:88:d3:b5:4e:f0:f5:b3:13:27:0a:48:9b:31:
                    45:ba:21:35:9b:41:bc:d0:f4:db:8c:54:29:10:50:
                    aa:b4:2f:0e:9e:04:29:68:88:b6:ff:f6:d9:a5:97:
                    b5:e6:0a:06:8b:78:f6:f3:3f:44:60:47:42:1b:02:
                    53:5c:c3:e3:55:a9:2d:31:67:91:8e:db:3d:8c:f2:
                    b9:51:9a:91:35:d6:8f:b7:46:c4:9f:ce:f7:47:06:
                    a1:00:d2:1f:5c:30:76:f9:6a:04:72:a0:07:40:03:
                    1c:72:57:04:e5:ce:a2:80:f1:ee:8f:51:22:c8:bf:
                    b4:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:A4:89:10:13:5A:F0:93:6A:BF:CA:61:16:4E:F5:56:F4:7A:86:DC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/90cb9f18-98a9-4354-a931-48787d7e4d67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f68:c200::/40

    Signature Algorithm: sha256WithRSAEncryption
         ae:51:4a:03:61:9f:b0:5f:3c:75:ec:8e:32:d5:52:b0:7c:8e:
         cf:40:57:3d:69:f3:18:08:1b:dc:33:d2:b9:39:5b:2a:79:e4:
         ff:88:73:6a:ad:22:38:21:cc:7e:ab:1f:f7:01:a6:42:ed:07:
         b5:16:76:8f:b4:c3:c6:29:db:1b:d9:ec:4e:49:3c:79:80:f5:
         6c:15:49:a7:f2:67:b1:18:24:90:c1:7d:a7:ae:6d:55:1c:ad:
         13:27:cf:48:a2:e9:53:ea:76:84:3a:80:03:b6:21:f9:52:90:
         2c:2e:16:f5:70:61:50:e0:79:c6:07:28:05:29:ba:f8:2d:1b:
         6f:6b:1c:21:47:3c:23:3b:f7:a0:f1:59:06:12:4a:9d:18:cd:
         49:9d:03:7f:7a:85:51:98:c3:da:3e:8f:44:12:35:3d:1f:0a:
         e7:f7:1f:dd:d7:11:8a:c5:39:62:34:e9:5f:b9:db:a0:a7:31:
         80:3f:61:78:53:12:42:97:36:42:9d:92:f5:56:c6:b8:fc:8c:
         5c:15:7b:0f:98:41:97:c0:06:11:13:a0:6e:da:aa:95:9a:6d:
         6c:ee:c4:ab:da:9a:4e:eb:2c:c6:0f:38:8b:e1:de:51:f8:46:
         14:36:08:51:fa:69:88:f6:00:90:61:21:b9:a7:54:13:bf:c1:
         c8:2f:1b:0a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Sep 15 12:43:34 2026 by rpki-client