Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98dd07b0-57c5-4d57-a48c-9b2adecccaec.roa
File:                     98dd07b0-57c5-4d57-a48c-9b2adecccaec.roa (raw, json)
Hash identifier:          k42KerBu7vrOu8sPgIGWJDwmoA45pUnS2R8eaxV4GO8=
Subject key identifier:   9C:70:49:19:73:9C:24:B7:E2:36:7E:48:B2:E8:54:82:4B:3F:C3:B5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       280350AFB47D831B8F92FE8608182440A3F7F3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98dd07b0-57c5-4d57-a48c-9b2adecccaec.roa
Signing time:             Mon 03 Aug 2026 02:00:07 +0000
ROA not before:           Mon 03 Aug 2026 02:00:07 +0000
ROA not after:            Sun 01 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f00:5080::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 16 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:03:50:af:b4:7d:83:1b:8f:92:fe:86:08:18:24:40:a3:f7:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  3 02:00:07 2026 GMT
            Not After : Nov  1 23:59:59 2026 GMT
        Subject: serialNumber=9dbdefd478b33f3844c7dce56d76e67d6d69a38b71f5f05113de2e9992f2e6d6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:fa:ee:03:ba:89:2e:d8:f5:a7:20:e3:3d:05:
                    35:3b:6a:8d:c5:fd:15:f8:70:1c:f4:5b:a0:4b:4b:
                    c5:ae:9c:9a:04:f0:82:99:99:77:c6:c4:75:cc:e7:
                    b5:a1:ea:38:cb:8b:f0:2a:68:cc:6d:2a:dd:2b:38:
                    d4:ae:d1:ba:6e:fd:ce:c3:53:69:b9:bd:51:ca:7b:
                    ed:19:f2:6b:25:58:2d:0a:f2:b1:89:35:f7:69:2d:
                    1d:0c:ad:93:e9:a8:87:13:e2:4a:2e:03:4b:94:e3:
                    0b:0c:9e:1c:50:e3:7f:e3:38:25:92:81:ef:5c:35:
                    d6:7d:e3:0b:e1:d7:13:dd:4d:50:5b:00:e1:4d:06:
                    5d:db:08:12:b6:fd:ae:be:d0:46:88:32:a4:f5:5b:
                    eb:0b:38:10:2e:4e:8b:48:c7:8b:a7:3f:c4:bb:31:
                    6f:89:4a:03:37:f6:d5:85:26:05:ff:fd:1a:d4:12:
                    bf:71:bf:a5:51:7f:57:f2:95:b9:da:a1:66:93:38:
                    15:f0:0f:62:44:88:42:c7:c5:ee:22:06:e7:c7:63:
                    d0:c1:f1:fa:e2:8c:ed:99:0d:93:15:eb:32:83:a8:
                    75:0b:a9:d0:56:d6:1f:0f:f8:0c:28:21:5e:56:65:
                    7d:cc:7d:a6:20:35:1c:b9:8c:e1:57:87:ed:aa:4a:
                    cb:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:70:49:19:73:9C:24:B7:E2:36:7E:48:B2:E8:54:82:4B:3F:C3:B5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98dd07b0-57c5-4d57-a48c-9b2adecccaec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f00:5080::/48

    Signature Algorithm: sha256WithRSAEncryption
         7f:41:2c:08:57:85:1a:b6:49:1b:f2:ea:32:a3:29:b3:21:6c:
         50:43:1c:58:6f:9d:d5:45:b6:8b:af:a7:8f:1c:cc:29:fa:14:
         e7:6a:56:f5:bd:52:ef:43:56:43:51:d7:e5:b2:58:9e:21:79:
         8e:a7:90:8f:8e:34:16:50:62:2b:9f:8b:59:1c:b5:3f:3e:07:
         63:f1:c6:6e:62:d0:a9:6f:88:8f:d8:91:f8:88:c0:08:61:29:
         bf:c2:b7:d0:76:5e:9c:9e:72:82:07:08:fe:d2:ec:eb:c7:8a:
         93:dc:82:75:73:0c:08:b3:72:93:b9:ca:3b:5a:7d:2e:56:3c:
         18:f7:69:6a:5d:8e:0f:25:d5:13:69:4b:d8:7e:5b:c7:39:c2:
         e9:06:25:46:39:af:27:a4:81:17:eb:ba:a4:cd:16:41:8e:bf:
         9e:07:67:13:78:d5:e3:b6:f2:41:92:c8:e9:65:2e:86:18:43:
         63:ea:d7:63:20:6b:f0:17:37:a2:5b:14:e7:c5:18:bf:d1:cb:
         81:f1:fb:02:24:dc:ba:53:aa:33:39:03:09:c9:98:32:a9:5e:
         47:98:91:5f:4a:ea:d8:57:69:eb:c4:88:79:3d:a9:75:aa:3b:
         cf:56:12:6d:04:ac:f1:b2:04:03:b3:e9:04:14:61:16:ff:4f:
         23:b8:15:80
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Aug 15 07:43:32 2026 by rpki-client