Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/90fafbf0-04d7-4302-b960-fa85ba431769.roa
File:                     90fafbf0-04d7-4302-b960-fa85ba431769.roa (raw, json)
Hash identifier:          OSUmI8jJAgDZVD0D0afI0ZNbIfzBa7zsOqAl8IieGrc=
Subject key identifier:   48:12:09:67:9A:25:CE:59:A3:F7:0E:CC:73:2E:1F:FA:CC:4A:34:CB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       11A6D78A4DA0068C2271A64E53D3788C71DD90E5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/90fafbf0-04d7-4302-b960-fa85ba431769.roa
Signing time:             Thu 29 Oct 2026 00:20:30 +0000
ROA not before:           Thu 29 Oct 2026 00:20:30 +0000
ROA not after:            Wed 27 Jan 2027 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1fe8:8090::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:a6:d7:8a:4d:a0:06:8c:22:71:a6:4e:53:d3:78:8c:71:dd:90:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 29 00:20:30 2026 GMT
            Not After : Jan 27 23:59:59 2027 GMT
        Subject: serialNumber=f640ae5b8b6933c1e1b1c27a6f462b018608e02ad39458b5a2f22ede1a1d2625, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a7:08:a9:e3:ab:a2:2a:02:e1:dd:e3:29:9e:
                    05:e3:73:15:0e:30:22:20:b8:85:32:fc:84:c2:e6:
                    83:95:eb:eb:5d:7f:61:27:cd:95:ab:9f:3b:54:09:
                    c6:c1:69:c5:a4:e4:48:de:be:c6:cb:be:8a:2e:77:
                    16:4f:f9:a3:57:22:39:48:cf:a5:75:6d:52:ed:9a:
                    93:57:c9:aa:59:dc:50:e0:35:30:c3:31:0f:a1:76:
                    1d:6e:1c:00:7c:cc:43:87:bd:cf:d8:ee:5a:6f:6d:
                    b2:0b:f8:b1:52:39:24:df:18:57:2f:4a:74:de:d6:
                    21:0d:07:6d:65:04:da:ca:18:a9:9d:c3:1b:79:aa:
                    5f:88:4e:4c:7f:74:b7:7c:27:39:2c:bd:a0:79:ea:
                    a6:f8:15:b1:59:c5:55:90:67:4b:a0:c0:f6:5f:e3:
                    db:d0:01:b0:a5:e5:81:0a:6d:bc:e4:31:29:7b:4c:
                    15:62:0c:61:54:c3:ed:5f:4b:76:64:62:74:98:0d:
                    9b:06:3e:d1:97:cd:18:51:cb:f4:e1:7a:58:d8:33:
                    50:09:7d:ce:c6:78:a9:e7:00:79:e2:55:fe:af:f3:
                    22:38:80:42:67:44:4d:6a:57:62:c1:77:cc:2b:ef:
                    95:ba:a8:7d:52:9e:39:7b:fc:3e:75:83:61:25:5c:
                    8c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:12:09:67:9A:25:CE:59:A3:F7:0E:CC:73:2E:1F:FA:CC:4A:34:CB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/90fafbf0-04d7-4302-b960-fa85ba431769.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fe8:8090::/48

    Signature Algorithm: sha256WithRSAEncryption
         7f:1f:54:fa:db:c7:9a:b4:4f:03:88:e5:6d:a5:d4:be:4f:4c:
         d6:bc:a5:47:12:19:32:76:95:47:60:62:0c:1b:4d:3c:0e:05:
         d9:f9:dd:00:08:8b:7b:c8:1b:63:e6:9a:c6:8c:2c:62:a8:c5:
         7b:03:4e:86:ef:9f:17:91:b2:af:dc:ba:01:b1:91:e2:97:78:
         d9:44:31:47:46:15:e6:97:f6:fb:98:f2:66:c4:ad:31:de:a0:
         59:29:c1:5d:91:29:58:4b:74:67:f0:f6:73:2d:9b:b3:9a:19:
         9d:b6:a4:9b:f9:7c:ff:55:28:37:d6:4f:af:ee:58:a4:0f:3c:
         67:7d:6b:df:df:55:53:94:4f:7f:7b:6d:fb:ae:35:82:bc:89:
         5d:5f:bf:98:e8:3c:89:b1:d9:43:8d:94:d6:0b:2c:d3:f4:8f:
         44:08:93:28:d6:7a:12:b1:9c:db:17:01:3e:9f:ca:33:df:dd:
         27:21:bd:21:4c:ab:a0:5e:5d:36:e7:74:d9:37:89:6b:65:8e:
         71:30:6d:ad:85:5e:cd:d5:ee:32:cd:c5:f6:08:c9:dc:9f:c0:
         27:23:da:73:3f:6c:7d:55:63:03:b1:d9:fd:c6:65:1f:6d:1a:
         25:3b:51:16:59:e0:6b:fd:3e:4f:f9:8c:e9:ce:69:b6:43:3e:
         ae:c7:0d:63
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Nov 3 01:26:53 2026 by rpki-client