Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b395dc86-1b36-4467-9052-5f1e6560d976.roa
File:                     b395dc86-1b36-4467-9052-5f1e6560d976.roa (raw, json)
Hash identifier:          sSi/jBuHhMfsMfedxfiZd2HTQ3Hc2v7JQ0oubuE6ygY=
Subject key identifier:   FE:8F:43:CB:71:7F:E3:0C:9D:43:0E:36:AD:3F:3B:42:48:27:03:EE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3C9D627FBBC100B9CA7BB7F8CC189361C9CD81E1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b395dc86-1b36-4467-9052-5f1e6560d976.roa
Signing time:             Tue 04 Aug 2026 00:31:32 +0000
ROA not before:           Tue 04 Aug 2026 00:31:32 +0000
ROA not after:            Mon 02 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f18:8000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 16 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:9d:62:7f:bb:c1:00:b9:ca:7b:b7:f8:cc:18:93:61:c9:cd:81:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  4 00:31:32 2026 GMT
            Not After : Nov  2 23:59:59 2026 GMT
        Subject: serialNumber=eb94332c21c77c0d34eda2aec2415477c83832493264893cef83ef16e6ad918c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:41:96:af:f8:85:86:3e:28:ff:86:35:35:0e:
                    e7:e4:84:31:86:94:e8:64:c4:3f:b4:79:4a:ed:5f:
                    e5:d3:64:05:44:5a:bb:2e:85:3b:44:0e:7e:de:12:
                    95:70:34:14:2d:1b:1b:41:8d:d2:29:f5:cb:4a:eb:
                    7f:2f:90:53:3f:7b:6f:74:9c:8b:64:b9:64:f3:b2:
                    d7:28:d4:9c:30:bd:47:ee:4e:d8:75:3d:9e:6b:63:
                    3e:50:99:72:47:63:35:37:46:f2:c0:36:09:06:e6:
                    5f:af:67:99:36:46:35:09:e1:59:b6:bf:d8:43:33:
                    49:bc:58:3e:a0:8d:52:52:91:14:ec:bf:e3:56:dd:
                    4c:83:17:04:d5:36:b4:29:27:bb:ca:df:ea:9e:80:
                    ad:db:66:1d:60:ad:43:ee:38:80:6c:b9:2e:0a:8c:
                    46:cd:5c:fc:17:3e:f2:00:50:36:b4:94:f9:e0:5d:
                    82:d3:c6:be:a9:40:11:59:d9:a6:96:f9:ef:f0:d5:
                    05:d7:28:47:03:e9:08:91:bf:59:1a:d3:28:fc:b4:
                    a8:9e:aa:87:29:cb:23:f3:a0:71:9d:8d:8f:73:69:
                    0b:fb:71:7d:eb:74:26:8c:d4:43:c2:1a:16:62:9b:
                    0f:7f:1f:98:85:2f:21:11:36:25:9e:5a:41:4c:be:
                    7a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:8F:43:CB:71:7F:E3:0C:9D:43:0E:36:AD:3F:3B:42:48:27:03:EE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b395dc86-1b36-4467-9052-5f1e6560d976.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f18:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         63:66:f7:39:dc:af:b2:01:ac:8b:ca:75:bd:f5:e5:e5:72:50:
         7b:e5:f9:98:d9:0f:34:b5:3d:1a:e1:71:db:cb:72:bd:e1:99:
         e8:b4:8d:0e:f0:3d:df:4d:91:fe:60:91:f7:2b:5b:a3:88:c5:
         f8:64:27:60:8a:c2:cf:19:8a:9e:11:ee:60:42:d2:24:dc:8f:
         c0:26:b0:11:3e:97:6d:71:64:bb:bb:fd:f7:50:20:79:96:6c:
         cf:ae:01:a0:bb:f3:7e:fb:75:2d:41:22:6f:b6:81:97:f5:3e:
         0a:d5:2e:50:1d:ed:3d:c9:bc:48:ef:42:e5:68:4e:fd:fc:5c:
         f7:b0:c0:d0:b8:3b:42:ce:68:4d:ec:cc:f8:38:3c:d1:c9:a2:
         63:d3:d8:54:1e:07:30:b9:76:d4:9e:12:bd:75:3e:e3:40:8f:
         e7:40:64:89:63:fb:fc:85:27:b7:69:77:15:0d:22:22:fb:e6:
         aa:d1:3b:d2:51:e1:74:e8:7f:e9:10:b7:94:24:db:29:22:81:
         d1:8e:36:9a:88:0c:72:02:e3:56:e2:ea:2b:d9:ae:1f:83:56:
         43:e3:50:d6:ce:7e:96:65:f0:0b:2c:aa:3e:f5:7a:c0:58:26:
         f8:19:36:9a:69:49:a3:4c:55:bd:8d:87:b8:27:2e:97:c8:49:
         58:31:49:e4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Aug 15 07:44:14 2026 by rpki-client