Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b078bf04-c396-4161-952e-02c299904d0f.roa
File:                     b078bf04-c396-4161-952e-02c299904d0f.roa (raw, json)
Hash identifier:          c9J8EkmBkGTWdztZNRJC6XPyL4dPY1r8RhfxVF73RJE=
Subject key identifier:   F4:76:57:1E:90:8F:34:27:0F:F0:39:08:D2:4F:57:19:76:C2:72:06
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       57926D5CE55D2A88E476E7DF9F6E0AECE4B3381A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b078bf04-c396-4161-952e-02c299904d0f.roa
Signing time:             Fri 31 Jul 2026 00:30:13 +0000
ROA not before:           Fri 31 Jul 2026 00:30:13 +0000
ROA not after:            Thu 29 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fec:1400::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 16 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:92:6d:5c:e5:5d:2a:88:e4:76:e7:df:9f:6e:0a:ec:e4:b3:38:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 31 00:30:13 2026 GMT
            Not After : Oct 29 23:59:59 2026 GMT
        Subject: serialNumber=70eb9718a7595e691b9b77d14ee5b25f24010f2b30f01f76010f4666c773770b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a7:79:17:1b:6c:e3:ba:e7:ea:60:0d:35:f7:
                    b0:30:9b:b3:cc:b8:60:98:fa:82:9a:90:e6:b0:ab:
                    6f:74:f8:b8:2d:5a:aa:f6:9a:08:aa:e9:50:39:1f:
                    e1:d3:9f:68:61:87:36:ab:24:bb:0f:2e:8b:44:e0:
                    04:b0:d9:b5:69:e1:19:24:66:54:ee:57:56:a2:3d:
                    28:8e:7c:c1:5e:51:55:ba:f0:de:6e:4d:c9:88:66:
                    37:d0:f6:98:3f:30:f9:33:20:f5:9a:02:78:f0:8e:
                    e6:04:3c:89:c4:bd:68:29:97:36:28:d8:d7:e3:58:
                    a4:a5:eb:9e:5d:08:b7:14:45:3a:d7:32:db:02:b5:
                    02:a7:70:98:e4:d7:a0:0b:3b:00:1d:40:d6:46:cc:
                    ed:49:71:ed:7e:65:49:52:87:d4:ac:01:d2:1f:07:
                    70:db:df:79:4e:b4:d4:44:34:f0:1e:a3:ee:1b:0a:
                    19:99:d0:4c:28:e9:39:db:93:19:6d:e7:7d:a9:74:
                    07:60:b0:ea:7e:8f:ac:de:c6:8a:af:a7:b3:7c:c5:
                    30:c2:3a:7c:fa:54:0c:02:b5:d2:a5:f3:e0:97:3d:
                    a4:1e:c7:ec:53:15:9c:15:0f:0a:a2:b7:59:f1:ea:
                    e9:ad:ff:f4:ea:bb:6b:34:af:a9:89:10:6f:04:d2:
                    37:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:76:57:1E:90:8F:34:27:0F:F0:39:08:D2:4F:57:19:76:C2:72:06
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b078bf04-c396-4161-952e-02c299904d0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fec:1400::/48

    Signature Algorithm: sha256WithRSAEncryption
         c7:78:30:6e:9e:a7:ef:b7:78:db:b9:13:8f:7f:db:e5:fb:6a:
         61:b1:b9:d9:df:7d:6f:8c:81:a3:9e:15:50:e4:ba:44:6e:13:
         23:fc:28:08:78:c9:2f:9b:f9:d5:8c:df:3c:9c:26:7e:57:cb:
         8c:8c:2a:22:37:12:72:03:1d:07:97:3b:ae:b7:fa:c5:16:3a:
         47:1b:10:de:c6:fb:ea:28:ef:1b:8b:e3:05:56:c6:1f:5b:e1:
         95:b1:8d:61:e8:4d:b9:8d:6b:ef:64:de:df:6d:f4:20:e5:8d:
         ff:25:6a:03:5c:8f:69:46:b4:2f:fd:b1:25:2a:fa:93:a6:53:
         df:d4:4f:e1:cc:da:f1:11:f8:7e:9b:11:39:e8:e3:03:37:fd:
         f8:b4:51:05:ab:e8:78:0e:4e:ae:9d:30:e1:ed:be:37:b4:6d:
         dc:d1:60:bd:48:20:e9:eb:92:31:98:9e:9a:fe:98:78:bb:30:
         b8:4a:80:d7:e5:c3:c8:59:cb:cc:07:54:bf:6a:1a:44:4f:65:
         7e:d5:97:0a:56:d1:bd:fc:c8:30:1c:7e:63:43:5f:98:56:31:
         ac:03:bd:c8:11:e2:47:bc:8f:ab:08:85:62:b7:34:55:53:60:
         3e:a9:84:0b:c4:e0:24:79:0d:f7:36:80:fc:e4:b2:8c:4d:f5:
         cb:07:0a:62
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Aug 15 07:44:16 2026 by rpki-client