Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aed1b077-e785-48ca-9897-668f3b060200.roa
File:                     aed1b077-e785-48ca-9897-668f3b060200.roa (raw, json)
Hash identifier:          RLNBc3mFSCr9dzW1V7lMrabbmCoIkRZqSoJ7+gtYGWk=
Subject key identifier:   3F:3E:97:7C:F6:24:99:E9:B7:6A:1B:6A:13:AF:A3:30:4C:8E:D9:A7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       193DB44B6D849829FFD59798F4048D6DC32687BB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aed1b077-e785-48ca-9897-668f3b060200.roa
Signing time:             Fri 09 Oct 2026 01:11:43 +0000
ROA not before:           Fri 09 Oct 2026 01:11:43 +0000
ROA not after:            Thu 07 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff3:e080::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:3d:b4:4b:6d:84:98:29:ff:d5:97:98:f4:04:8d:6d:c3:26:87:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  9 01:11:43 2026 GMT
            Not After : Jan  7 23:59:59 2027 GMT
        Subject: serialNumber=9856adf83e23cc14f7b6fe9b49c33e753d705dd16bce35efedd3c8d260db4f07, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f7:d7:dc:4c:d4:93:6f:35:77:cb:f1:9a:cc:
                    79:b6:8c:c4:67:39:13:ec:5c:5c:1a:94:58:03:e3:
                    17:c4:8f:1f:11:a4:ff:1d:17:e0:67:eb:13:b8:f5:
                    21:98:84:c3:1d:d8:f7:2a:24:1b:bc:08:96:1e:b3:
                    68:91:2c:f8:20:a5:83:c6:7e:86:d0:26:81:91:98:
                    d4:b5:cf:04:af:b5:3a:bb:c7:06:21:ff:1c:fe:01:
                    65:56:ad:c3:8b:33:37:63:3e:62:e9:46:84:26:64:
                    ab:09:dc:1c:cc:63:46:fc:5e:6a:c2:33:35:2c:c6:
                    8f:b6:76:73:02:74:80:57:a4:60:2e:56:b6:55:39:
                    37:57:4e:c7:e6:67:cd:4c:73:da:12:86:99:dd:42:
                    a8:0e:20:75:c6:26:1c:37:5b:d9:16:de:b4:57:8b:
                    27:e3:87:d4:db:4f:70:82:55:8b:e7:62:44:9d:5f:
                    e7:1e:12:92:8b:57:8d:cc:ce:e7:f1:be:e5:b9:6c:
                    9d:6a:6f:18:f1:4f:67:10:3d:b5:f8:95:46:f6:cb:
                    18:ee:44:ed:85:87:3b:11:2d:31:de:5e:8e:53:25:
                    e5:be:11:cf:60:8b:93:15:d8:1b:d5:42:2f:34:e8:
                    b2:d1:ff:83:a8:2e:58:be:69:b4:11:54:e8:87:62:
                    89:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:3E:97:7C:F6:24:99:E9:B7:6A:1B:6A:13:AF:A3:30:4C:8E:D9:A7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aed1b077-e785-48ca-9897-668f3b060200.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff3:e080::/46

    Signature Algorithm: sha256WithRSAEncryption
         c0:7d:5a:11:fc:fd:75:42:26:04:c7:15:25:b0:18:9a:81:fe:
         14:cd:4d:8f:6d:6d:24:b3:66:f1:30:7a:f6:13:a7:27:9f:85:
         83:6c:96:32:b1:5b:ef:16:58:d8:f0:d0:d5:79:84:2c:2e:81:
         91:a9:84:76:17:da:8d:9a:d3:99:ca:fc:d2:a9:93:17:af:67:
         13:35:22:f8:e1:92:07:a3:9f:eb:ce:3d:d5:1e:df:48:bb:6a:
         3f:4c:34:bf:ca:81:86:98:61:71:14:73:7a:03:8f:c6:44:2f:
         b7:2c:c8:01:1c:5c:e4:03:16:a1:57:a0:c7:55:4f:ce:d6:f1:
         e6:1e:90:88:ac:bd:d8:de:85:38:32:c8:80:61:a8:a9:9d:6b:
         a5:9e:cd:12:34:8b:fd:cb:de:9c:5f:3a:d0:44:b1:b6:25:52:
         2c:d2:7b:34:fe:24:dd:a2:76:cb:a0:7a:88:5f:96:92:6e:7d:
         5f:a6:a4:14:89:c5:83:75:31:b6:d5:b7:94:d2:13:a5:94:94:
         0d:2a:95:93:e3:d2:43:cb:1c:02:00:20:ef:00:fc:d4:8d:f2:
         97:22:2a:a8:85:12:de:7b:84:29:96:83:a1:c5:e1:84:c0:c9:
         7a:fd:fc:c9:59:df:8b:29:00:eb:9f:58:44:0a:3a:fa:b2:3f:
         0b:e5:a2:45
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Nov 2 21:08:10 2026 by rpki-client