Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/992a7387-7db9-45e3-bd7c-29f363cc0079.roa
File:                     992a7387-7db9-45e3-bd7c-29f363cc0079.roa (raw, json)
Hash identifier:          FciaIdIqQua5OaTLmLhAL/wKhIUV6GljoR/h6IyT4mw=
Subject key identifier:   BF:0A:BA:BC:86:06:DE:12:B1:EE:32:14:13:91:35:EE:9E:FC:2E:78
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4FDA9AA4D1CE09B5E2B079F42C759F3CC0574405
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/992a7387-7db9-45e3-bd7c-29f363cc0079.roa
Signing time:             Fri 09 Oct 2026 01:10:31 +0000
ROA not before:           Fri 09 Oct 2026 01:10:31 +0000
ROA not after:            Thu 07 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fea:8050::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:da:9a:a4:d1:ce:09:b5:e2:b0:79:f4:2c:75:9f:3c:c0:57:44:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  9 01:10:31 2026 GMT
            Not After : Jan  7 23:59:59 2027 GMT
        Subject: serialNumber=c3858e25bc65dc8f8d2fc106bcaaf4710c11062147ef940b1d474922991aa729, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:db:7b:50:7c:e2:f7:ce:db:c7:5f:6f:cf:98:
                    dc:2f:bc:96:8e:fd:5f:f9:fd:4c:57:27:01:87:d3:
                    11:8d:73:25:22:eb:ec:6b:29:9a:db:79:1f:26:5d:
                    5f:73:7e:ec:d0:f3:f6:f7:88:26:33:9d:fb:7c:9a:
                    35:bb:eb:ed:e3:8d:bb:eb:f7:cd:06:ac:c0:cd:30:
                    cd:06:d4:9f:0c:e1:8b:53:7e:fd:80:23:fd:56:d1:
                    e0:bb:6e:59:db:78:19:89:af:d7:7c:38:c7:cb:43:
                    25:99:cc:a6:02:66:e2:13:56:c7:1f:ec:e8:2f:5e:
                    d1:d6:c8:e3:f7:29:84:1d:f3:cf:0f:b7:f7:d2:3f:
                    95:fc:e5:2e:1b:de:6c:ed:11:4f:94:f1:b7:27:94:
                    d2:ba:f0:e6:de:e6:99:41:f1:de:38:1f:89:a1:dc:
                    7c:09:19:ce:91:68:02:64:ac:e0:f4:a0:ce:67:f7:
                    ea:eb:4a:ba:52:e5:81:e0:3e:76:49:17:bf:3a:6c:
                    8b:fc:d3:d4:85:90:ad:6a:49:a9:84:a8:e8:d7:f2:
                    6f:63:b6:54:4d:75:0a:5b:19:53:59:8c:7e:ce:25:
                    4b:27:ff:25:56:04:b3:1c:cb:33:e7:c0:b1:47:6f:
                    92:1e:de:9e:07:21:4c:ec:3b:c9:3a:c1:a8:91:e9:
                    d4:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:0A:BA:BC:86:06:DE:12:B1:EE:32:14:13:91:35:EE:9E:FC:2E:78
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/992a7387-7db9-45e3-bd7c-29f363cc0079.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fea:8050::/48

    Signature Algorithm: sha256WithRSAEncryption
         a7:54:87:c5:52:7e:57:7a:9f:dd:c3:28:ae:3b:c1:ce:2b:5d:
         1b:cf:8c:8e:fc:07:05:32:6d:cf:9b:87:a2:61:f3:ef:84:6a:
         d3:51:73:9b:72:ed:10:81:fa:2d:e7:3b:94:b3:41:de:b9:e9:
         79:5a:74:3b:d5:b5:46:7f:a8:ae:73:48:a6:81:8c:cd:3b:dc:
         7b:04:5d:20:16:e7:ee:ec:67:4f:b9:93:5a:7c:41:2b:31:bd:
         89:3a:a6:ab:9d:f9:22:ab:9d:57:e7:d3:42:7d:51:f5:2e:12:
         00:d7:95:b0:74:1d:26:56:46:19:2a:d3:f7:fb:dc:18:db:6d:
         0a:76:38:c1:4c:13:70:d8:3d:cd:95:02:ff:52:0e:83:f0:23:
         95:42:e0:19:5c:c7:82:77:0f:1c:b8:93:f4:d6:8a:40:6f:0c:
         4e:be:ba:4e:fe:5c:fd:27:04:ed:9a:62:09:e9:74:5f:ca:08:
         00:0a:a8:de:7f:31:ac:49:de:e4:ec:48:21:c7:b3:4b:22:0b:
         b7:7b:2a:a8:b2:18:82:8b:37:41:bf:3b:3c:50:d6:ff:e4:c4:
         2b:e7:bd:6c:b3:e0:b8:8c:f8:d7:06:99:8a:58:32:22:23:bb:
         90:03:b9:82:e2:49:1d:08:9d:61:00:5e:17:87:5b:d7:05:ca:
         1b:70:d9:07
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Nov 2 23:20:55 2026 by rpki-client