Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/abdcdb22-6b90-4b2b-b537-e8807eb684a8.roa
File:                     abdcdb22-6b90-4b2b-b537-e8807eb684a8.roa (raw, json)
Hash identifier:          6wAClPPiinfBxm4i5cv+eA9h+5eeXfzBI7WPs0XH+kk=
Subject key identifier:   24:BD:EA:94:88:4F:9A:D4:BA:CC:46:37:64:70:9E:EF:9D:67:2D:18
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       218E62F6E326F16694473D96FA66F7AD87E3140F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/abdcdb22-6b90-4b2b-b537-e8807eb684a8.roa
Signing time:             Tue 04 Aug 2026 01:00:08 +0000
ROA not before:           Tue 04 Aug 2026 01:00:08 +0000
ROA not after:            Mon 02 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f18::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 16 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:8e:62:f6:e3:26:f1:66:94:47:3d:96:fa:66:f7:ad:87:e3:14:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  4 01:00:08 2026 GMT
            Not After : Nov  2 23:59:59 2026 GMT
        Subject: serialNumber=0c8fb68bd5ce19e3384a3703b3e3fd9a76305e519a96215b078aa7896b16a9f0, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f1:e4:07:20:3a:93:c3:06:86:89:29:8b:98:
                    39:57:8b:08:88:17:76:9e:1a:d7:44:a2:e8:c7:ca:
                    35:94:41:3c:35:9d:70:c7:87:b0:72:83:e3:89:82:
                    1c:26:62:3d:31:e2:80:bb:e9:4b:bf:e7:9a:69:56:
                    87:0d:2e:0a:f2:eb:20:74:24:d3:5a:ef:b2:9e:5f:
                    84:56:be:73:c3:7f:c5:a7:f0:2e:43:81:24:eb:1c:
                    ac:ab:44:e6:8d:65:f8:bf:44:c0:4b:2a:bd:6d:2b:
                    89:e4:9b:3d:2e:c6:be:d1:d2:dc:f1:af:e5:2b:bc:
                    e9:8b:50:8a:93:d7:aa:4a:6e:1d:bd:18:41:a1:18:
                    a6:fa:bf:39:a5:87:62:46:cd:7b:26:e7:61:e3:23:
                    b5:0d:1f:8c:c3:7e:ac:11:6f:b4:24:fc:d6:ba:73:
                    c4:7a:db:97:85:9f:d7:55:76:7c:f3:1f:55:17:98:
                    29:ca:a8:8c:a7:f2:37:cd:2e:1e:e9:37:a9:93:eb:
                    09:04:ee:e8:3d:7b:cf:f1:62:18:b2:61:28:3b:b5:
                    8e:1a:e2:1d:b2:33:18:8c:e6:e4:32:1f:b8:3b:6c:
                    4a:99:92:e5:37:b4:a8:f2:dc:cb:99:d3:e5:a6:2d:
                    c4:36:80:f3:3b:1b:e6:3d:9f:dc:71:9c:7b:0e:38:
                    c5:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:BD:EA:94:88:4F:9A:D4:BA:CC:46:37:64:70:9E:EF:9D:67:2D:18
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/abdcdb22-6b90-4b2b-b537-e8807eb684a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f18::/33

    Signature Algorithm: sha256WithRSAEncryption
         c2:38:a1:ef:70:cc:a8:ed:20:03:60:10:3a:98:96:2c:96:d5:
         51:cf:7c:2b:f5:b4:d6:c4:8b:6f:38:6a:34:2f:89:32:14:54:
         2c:a0:92:5d:21:7b:ba:ea:7d:9a:2e:5a:95:65:aa:e1:7b:cd:
         65:89:81:76:e5:51:f2:cf:e1:e5:30:31:41:09:fd:94:58:74:
         69:e9:c7:81:f0:c7:fb:96:b6:11:22:03:ef:fd:77:79:60:3c:
         70:6d:e7:58:8b:b5:f2:53:cf:39:fb:d0:7e:44:6c:e3:01:c7:
         2e:11:14:2a:1d:f4:b8:f8:6b:88:43:84:cd:c1:22:25:23:f8:
         4e:76:ff:7a:39:21:80:86:2e:ea:f6:e7:c0:8b:c1:b3:42:7b:
         06:f4:ab:13:17:d8:af:d3:34:2e:86:68:e6:c8:92:28:fc:0d:
         28:b8:3a:8e:cc:da:72:22:7a:37:11:e1:0b:7f:a0:85:88:55:
         8f:e3:51:50:e3:2e:98:39:b7:88:b9:25:29:d1:16:36:ab:cd:
         f5:e8:c2:3c:7e:83:6d:e3:36:62:70:7f:4d:dd:18:6f:15:1a:
         36:11:47:96:d7:55:3a:f5:c3:42:78:f4:01:6e:17:3b:0a:eb:
         c5:a0:e3:e3:0f:c9:47:8d:fe:2b:a8:d4:ad:a5:c8:50:a3:a7:
         c7:9a:59:2d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Aug 15 07:43:38 2026 by rpki-client