Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3e3e8f5-d3ad-4328-8f52-753d24d5dc89.roa
File:                     a3e3e8f5-d3ad-4328-8f52-753d24d5dc89.roa (raw, json)
Hash identifier:          1GOLRqL/NdDONPwW8kcd2P4A45G+HDrI951MlElDGDw=
Subject key identifier:   8B:4E:65:8C:BD:BF:D5:D4:E2:D5:B5:4C:0A:BB:01:C5:E3:98:46:75
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4D23A4B60499A02E54BBD219A7E641321A916CAF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3e3e8f5-d3ad-4328-8f52-753d24d5dc89.roa
Signing time:             Fri 23 Oct 2026 01:30:16 +0000
ROA not before:           Fri 23 Oct 2026 01:30:16 +0000
ROA not after:            Thu 21 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f1a:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:23:a4:b6:04:99:a0:2e:54:bb:d2:19:a7:e6:41:32:1a:91:6c:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 23 01:30:16 2026 GMT
            Not After : Jan 21 23:59:59 2027 GMT
        Subject: serialNumber=d46f70abecf603cf4f61bb5df56305859945a79bb434acfd70b0413fb65ff5ef, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e4:d3:34:9a:a0:95:1e:24:f5:38:43:ea:21:
                    66:af:b7:f5:e1:19:d4:6c:6e:78:d9:c1:ef:41:c2:
                    1d:de:9d:17:dd:04:5f:8a:d5:9a:ea:9e:b4:53:2c:
                    23:8b:02:ef:68:b9:dc:f2:18:15:42:1e:9f:15:cd:
                    5b:d0:6b:2f:66:e0:bd:0e:2a:d1:37:4b:23:3c:aa:
                    ec:bc:e2:e2:d9:12:ef:ac:fa:2b:50:f8:39:84:19:
                    40:82:75:ae:24:c2:49:2f:d0:d6:93:3d:d0:5f:32:
                    a7:de:0e:84:a5:0d:e6:73:11:eb:3c:22:93:81:2a:
                    26:f2:fc:07:33:ae:9e:49:1d:ea:39:b5:90:96:8c:
                    10:c7:da:96:f8:f6:5a:07:b4:fd:25:7f:8b:19:37:
                    e1:a1:0d:a4:fc:71:1a:bf:55:e1:86:27:a6:d4:6b:
                    4e:f8:6d:dc:8b:76:55:25:95:d6:b2:6b:dd:59:a6:
                    50:e6:4a:0f:7b:de:c1:19:e9:ff:63:50:4f:6c:b7:
                    15:b8:5a:c8:ca:e6:cf:76:91:3a:e3:2a:b9:98:2a:
                    e5:03:ea:2e:68:51:8a:cb:47:93:11:1c:3b:c9:c6:
                    83:b1:1c:55:d8:25:38:d4:6c:35:d8:85:66:3f:33:
                    a3:23:32:a8:bf:9d:f2:40:cc:51:b3:5e:b0:4b:95:
                    d4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:4E:65:8C:BD:BF:D5:D4:E2:D5:B5:4C:0A:BB:01:C5:E3:98:46:75
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3e3e8f5-d3ad-4328-8f52-753d24d5dc89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f1a:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         56:c9:9a:a1:d5:09:5d:5f:08:e3:78:4b:9e:b9:6a:84:af:86:
         9b:3e:15:03:33:30:c9:69:e9:5d:df:4d:86:59:07:3f:17:94:
         f2:c1:8d:91:df:4b:fb:f3:4b:58:45:03:5d:d9:09:80:2b:8b:
         49:5e:98:c7:83:02:b1:e8:1d:04:04:c3:65:72:3d:c7:43:ee:
         3e:91:20:0e:44:df:fa:2a:c5:5d:b2:f4:66:0b:b8:58:b8:39:
         cb:cb:60:e9:41:fd:67:0d:27:81:ba:ea:df:32:f5:58:55:1d:
         59:af:14:07:61:e6:1f:0b:27:3e:4b:0a:f9:fd:4c:cc:1c:50:
         79:99:8d:81:de:8b:5b:ea:b7:94:3f:bf:8c:c3:5e:82:19:b6:
         71:fb:01:af:22:1e:6e:1e:50:59:63:dd:4b:f7:bc:95:b3:e6:
         87:fc:1a:87:23:79:a2:5d:14:5d:a9:a2:8e:0b:1a:c5:06:f5:
         9b:79:fb:45:d1:5f:a3:14:24:92:27:8e:ce:96:b6:24:29:50:
         70:7b:35:24:70:b8:cd:69:a8:6e:17:14:af:b3:84:41:a6:8d:
         7a:21:3c:7c:1c:23:0b:6d:3c:e8:54:73:17:cd:5f:d8:bc:ab:
         7f:77:32:10:73:63:69:4d:24:99:45:41:c3:1f:bb:8c:0d:87:
         d9:ce:57:6e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Nov 3 19:21:56 2026 by rpki-client