Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a8cb4895-a4d5-4bf4-9695-6dc4ca2584c8.roa
File:                     a8cb4895-a4d5-4bf4-9695-6dc4ca2584c8.roa (raw, json)
Hash identifier:          gXy0V9L/5l31p/3ytfkaJyTPdzXHRStuBqSN4Ztck1Q=
Subject key identifier:   53:41:30:77:E5:DE:57:5B:17:39:DD:2C:F6:20:DD:10:8D:8E:46:80
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3C2FB36C76BFE77C9A48B3FF3FE2851F75B37A97
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a8cb4895-a4d5-4bf4-9695-6dc4ca2584c8.roa
Signing time:             Fri 07 Aug 2026 00:00:13 +0000
ROA not before:           Fri 07 Aug 2026 00:00:13 +0000
ROA not after:            Thu 05 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f10:8000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:2f:b3:6c:76:bf:e7:7c:9a:48:b3:ff:3f:e2:85:1f:75:b3:7a:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  7 00:00:13 2026 GMT
            Not After : Nov  5 23:59:59 2026 GMT
        Subject: serialNumber=8dd04e7bd8e507265e0390e62da7652b0ce24f0994775413517030441f209dbf, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:46:45:81:d1:61:8d:5c:c9:32:23:7d:73:11:
                    03:b4:d7:f4:aa:cb:c9:2d:71:e4:31:e8:59:cc:b1:
                    6f:78:3d:9a:03:32:fb:a2:79:8c:2c:06:a7:00:c4:
                    61:c5:b4:f7:88:42:22:56:f4:49:f2:d6:5e:a5:65:
                    56:99:89:d7:30:26:a3:c5:0f:aa:3d:96:26:e1:27:
                    d4:aa:9e:47:3d:4b:80:61:ce:cc:53:a0:07:46:73:
                    58:f8:8d:fd:51:27:17:bf:e3:88:41:92:8b:71:0b:
                    f6:5e:a2:cd:b3:79:e1:e5:67:78:2e:e0:ed:35:df:
                    3a:7f:50:b7:11:dd:f5:a0:f5:bd:c4:ff:01:f3:3c:
                    9b:06:83:4b:f5:7a:a5:9d:76:c9:30:eb:63:a9:35:
                    5f:0c:ac:e8:46:d7:bf:e1:92:98:87:5d:fb:ee:32:
                    ea:4e:04:2c:48:d1:50:61:e9:b1:3e:67:93:cc:30:
                    88:9d:29:dc:f1:c4:92:db:40:c8:4e:d0:c1:7b:74:
                    82:07:0d:66:43:f7:ce:93:3e:e3:49:22:32:5c:3e:
                    a0:b6:74:03:98:c5:40:b4:34:cb:ba:19:70:2d:ed:
                    03:76:03:e3:e2:9e:08:20:76:33:30:07:cf:72:30:
                    29:00:8e:c6:5f:d6:cd:39:b5:01:10:f0:dc:0b:d1:
                    a1:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:41:30:77:E5:DE:57:5B:17:39:DD:2C:F6:20:DD:10:8D:8E:46:80
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a8cb4895-a4d5-4bf4-9695-6dc4ca2584c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f10:8000::/38

    Signature Algorithm: sha256WithRSAEncryption
         77:6f:9f:a6:a7:c6:fe:6d:86:b6:85:14:c9:57:cc:09:42:87:
         f2:60:51:ff:a4:2a:32:7c:c0:dd:1b:27:1e:00:6d:00:cd:82:
         f5:75:5b:bb:15:d8:d8:94:e2:ad:da:e5:3f:25:dd:47:66:f1:
         26:d8:3d:ca:13:bc:72:80:6c:92:61:da:68:33:02:2d:d6:30:
         34:94:a8:da:14:02:9e:7a:61:68:68:8a:58:f3:87:14:e5:40:
         b8:4d:d3:39:6e:8c:b1:a0:41:02:63:3b:8e:2e:55:2b:b6:da:
         f4:0d:25:24:17:42:d4:4b:10:c7:46:0a:e2:94:19:16:18:4d:
         e2:f1:df:68:cc:bc:a5:a8:49:11:e6:b0:9e:d9:02:5e:19:12:
         12:70:ad:2e:42:e2:76:36:3b:03:35:b3:2c:36:2f:d5:1f:28:
         c7:3f:9b:e0:1b:8a:56:b9:c6:e7:ec:7c:ff:ac:fb:07:44:cd:
         71:5b:5e:59:b6:34:a0:93:2a:16:0a:46:5c:28:75:fb:4f:cc:
         aa:be:5b:f1:d0:de:0c:ff:9d:bf:6f:9f:2b:42:8b:f1:de:2a:
         4c:9e:ab:4a:ba:83:d3:37:04:f5:a3:71:87:21:77:85:40:5a:
         34:b5:a6:63:34:2e:04:90:84:b0:70:b1:cc:47:5c:95:36:1d:
         ab:69:8b:d5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Sep 17 19:18:05 2026 by rpki-client