Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94788050-cbf5-4a1f-a1c2-e2405bfe46b7.roa
File:                     94788050-cbf5-4a1f-a1c2-e2405bfe46b7.roa (raw, json)
Hash identifier:          5zYYn45cuNEoQyzjFfbCW58iGP6hF3OdjG2AOp3KrF8=
Subject key identifier:   05:74:6F:B0:8D:9B:84:A1:49:67:3F:5E:91:39:B4:91:30:38:61:E6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2D0833E872B626A285D9188B0C002D03CBED3EAB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94788050-cbf5-4a1f-a1c2-e2405bfe46b7.roa
Signing time:             Mon 03 Aug 2026 01:11:51 +0000
ROA not before:           Mon 03 Aug 2026 01:11:51 +0000
ROA not after:            Sun 01 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff6:81fe::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:08:33:e8:72:b6:26:a2:85:d9:18:8b:0c:00:2d:03:cb:ed:3e:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  3 01:11:51 2026 GMT
            Not After : Nov  1 23:59:59 2026 GMT
        Subject: serialNumber=43569fe32889fbd8b1614f250df76af46cb61ca39a8b2975368065dc269304c9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:cb:bb:72:7c:a9:92:87:85:f5:d4:24:a8:9a:
                    c9:12:56:c5:12:54:59:53:19:08:63:99:34:9f:61:
                    a2:4c:a3:be:c5:62:7c:a0:4e:71:2a:30:3a:d6:9d:
                    c7:a1:da:ab:da:0d:88:50:d7:1a:62:5f:f7:d7:bd:
                    20:c1:e0:cc:23:55:be:d3:8f:e3:c6:3e:40:69:b5:
                    21:41:65:d1:6a:a0:f2:34:1d:f5:96:66:d7:21:13:
                    bb:53:d9:8b:89:68:6b:07:92:08:c3:f4:be:49:05:
                    56:f2:f7:78:f4:ce:d4:72:28:18:70:58:03:28:02:
                    f6:dd:6e:32:af:4d:68:3d:1d:f9:82:fa:1f:87:9e:
                    19:b4:30:f3:1f:30:f3:fc:d9:26:75:4b:f4:25:9f:
                    07:28:6d:f9:79:2b:ca:35:06:c7:ca:5f:d8:10:d1:
                    66:7b:18:21:2a:f3:33:78:8c:94:e1:37:71:76:79:
                    d2:d3:17:4a:01:7d:b4:ce:7f:f3:20:4f:72:8f:8f:
                    a3:30:b1:5d:e6:c2:b3:d3:db:ac:0e:0d:23:dd:3d:
                    78:84:f1:d7:30:46:a2:f7:99:1e:78:75:12:77:6b:
                    32:e1:3c:bd:60:22:7d:7f:9a:94:0d:24:12:2a:7f:
                    79:fa:bd:64:8a:b3:68:f1:b0:84:cf:7a:c3:90:4b:
                    ad:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:74:6F:B0:8D:9B:84:A1:49:67:3F:5E:91:39:B4:91:30:38:61:E6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94788050-cbf5-4a1f-a1c2-e2405bfe46b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff6:81fe::/48

    Signature Algorithm: sha256WithRSAEncryption
         85:0a:3d:b8:c9:6a:36:76:a8:7e:bc:83:eb:f4:cb:0d:43:e4:
         fe:1e:3a:ef:53:05:9b:3f:33:c8:22:79:39:79:0f:dc:72:a8:
         72:1d:a2:3e:e2:a3:ba:34:9e:2b:e0:b4:19:94:28:c4:48:34:
         89:bf:28:38:d7:b7:f4:8d:58:c9:6f:a5:ec:8a:9e:ef:71:f5:
         e4:43:1d:f8:e3:2f:f5:e0:1a:22:ed:1d:a7:a9:79:07:44:cb:
         1f:67:25:b2:cc:e5:5f:db:d0:7d:ab:c0:a6:8b:17:4b:61:be:
         60:7f:c4:84:82:9b:05:12:cf:51:fe:55:5e:f8:47:19:eb:57:
         2c:d1:8a:90:94:92:14:9c:6e:82:3c:7d:de:6e:63:ba:cd:48:
         6c:76:dc:d2:f2:b2:e8:1c:3d:fe:c1:33:ff:5a:19:cf:b8:c9:
         ee:30:37:d6:d7:66:4b:fb:57:33:a1:13:62:76:ab:b8:e9:ac:
         7b:ec:af:26:00:06:89:a1:ad:7b:57:94:9e:79:04:24:1e:ef:
         44:88:36:ab:2f:16:ab:ab:ec:99:e6:fd:90:2c:39:91:5a:9c:
         ec:2e:c9:99:f9:2e:c1:c8:0d:b3:55:8d:48:7d:01:31:1e:b2:
         45:ef:82:16:8a:6f:85:93:b0:22:ca:9c:3a:bb:d9:be:bb:b3:
         a3:5e:aa:a5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Aug 3 05:37:41 2026 by rpki-client