Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ac4e6d04-48cc-46b4-a930-17ab9b41fcf3.roa
File:                     ac4e6d04-48cc-46b4-a930-17ab9b41fcf3.roa (raw, json)
Hash identifier:          06hkIgDQIt3owADtV6iVbm0Xtpzd4w1zzhk/PEbnU/o=
Subject key identifier:   18:35:72:E3:F8:99:79:5C:18:94:E1:F3:67:80:E5:B6:FB:FF:8D:53
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       77983AC9724E983418498B5AA9F58A3D231E96C4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ac4e6d04-48cc-46b4-a930-17ab9b41fcf3.roa
Signing time:             Fri 09 Oct 2026 01:07:29 +0000
ROA not before:           Fri 09 Oct 2026 01:07:29 +0000
ROA not after:            Thu 07 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff3:4080::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:98:3a:c9:72:4e:98:34:18:49:8b:5a:a9:f5:8a:3d:23:1e:96:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  9 01:07:29 2026 GMT
            Not After : Jan  7 23:59:59 2027 GMT
        Subject: serialNumber=992cbd363fd0a1cbdbdfd070fb13a16531e04bd13ebed0f0b3ded1d646609494, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ec:29:87:42:7c:d4:1c:a1:9f:d6:3e:f6:82:
                    eb:22:48:0b:9a:bc:61:76:9d:d1:21:d7:ce:05:b6:
                    e7:48:fc:44:c4:c9:c6:9d:a1:a9:57:55:33:ab:4c:
                    ba:7d:a7:d9:a6:e2:30:fe:9d:32:ea:fa:61:88:bb:
                    b8:c9:1a:fd:ac:d4:bc:28:6d:e4:10:5e:e2:73:8c:
                    7e:91:38:b0:5d:d1:fe:b8:ca:3c:34:33:92:8c:8a:
                    a7:a2:22:37:54:1c:34:12:92:64:d2:c8:cb:df:57:
                    31:55:a9:5e:82:bf:e4:a6:b9:fb:33:cc:68:5c:0a:
                    e1:a4:87:ee:4f:d6:96:0e:0f:9e:de:80:0b:00:f9:
                    18:c2:52:10:57:f7:8c:3c:80:4e:52:96:6d:be:12:
                    66:9c:50:72:bd:cf:b6:54:b6:32:b2:af:bd:dd:85:
                    25:a6:45:1a:ea:0e:5d:a4:ce:e2:a4:db:39:c7:46:
                    b0:3d:0a:36:2a:a7:d9:cb:8f:88:78:de:13:1f:8b:
                    45:ae:11:6c:d4:4b:16:51:e0:e3:16:7e:4e:0f:05:
                    23:f1:05:5f:b1:ab:c6:f4:e6:3f:33:32:a2:d8:4f:
                    d7:71:1d:05:f0:2d:11:27:e5:27:85:7f:a8:da:0d:
                    9e:12:7b:f6:16:8c:29:3c:1b:9c:6c:6c:75:74:d6:
                    cc:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:35:72:E3:F8:99:79:5C:18:94:E1:F3:67:80:E5:B6:FB:FF:8D:53
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ac4e6d04-48cc-46b4-a930-17ab9b41fcf3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff3:4080::/46

    Signature Algorithm: sha256WithRSAEncryption
         7e:13:6c:d2:45:40:0d:48:8e:8e:8b:2e:cf:fd:fe:15:cf:0a:
         83:d9:ce:69:c5:5b:63:34:33:b7:61:cb:13:55:e3:a6:bb:d1:
         cd:e1:e4:66:04:35:a0:8b:c0:42:93:f0:ba:a4:8f:f7:ab:28:
         cd:d4:ed:af:e5:92:60:31:ad:75:34:41:5e:4c:d6:34:57:45:
         af:11:75:d4:ec:2d:b5:16:83:a7:0c:92:59:39:83:47:58:ce:
         4b:b3:c9:97:02:97:88:9a:9f:9f:52:f7:be:c3:c6:d5:31:98:
         6d:18:d6:d8:e8:53:b6:fc:ad:83:66:ac:07:3b:97:42:79:1c:
         12:df:a8:32:11:b9:21:db:37:c8:34:07:11:d5:c0:81:0c:26:
         78:80:1c:d4:a7:4e:eb:88:01:1d:c7:fa:e7:cc:0d:38:f3:67:
         4d:9c:6b:86:a7:b1:30:b7:40:f0:5d:ae:4e:82:ec:8b:4c:4a:
         3a:62:6d:29:aa:74:69:f7:db:59:26:e3:06:7c:46:26:45:a4:
         dc:1f:cb:52:0b:b6:20:76:3c:81:ab:5d:db:66:f3:94:cd:f7:
         d5:5a:9b:79:52:9a:9d:86:85:b8:99:9d:4b:e9:29:f4:44:ee:
         21:ce:d2:aa:8f:aa:d4:fb:00:b4:a0:52:ea:52:3d:5e:30:d7:
         68:db:81:21
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Oct 31 22:48:48 2026 by rpki-client