Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b4f34d1c-bc06-4901-81c6-6d407c939083.roa
File:                     b4f34d1c-bc06-4901-81c6-6d407c939083.roa (raw, json)
Hash identifier:          wfnq2nsfHMdvpUVR+uSBNWqItAFeg/4h7StJQxVrxmo=
Subject key identifier:   01:7B:AA:FB:CE:EA:29:AB:73:A5:5F:1F:36:C4:37:BD:84:7E:EC:A1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2753B72F346D5DC316CEF5309248B07EF1805118
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b4f34d1c-bc06-4901-81c6-6d407c939083.roa
Signing time:             Mon 03 Aug 2026 02:00:09 +0000
ROA not before:           Mon 03 Aug 2026 02:00:09 +0000
ROA not after:            Sun 01 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fff:40c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:53:b7:2f:34:6d:5d:c3:16:ce:f5:30:92:48:b0:7e:f1:80:51:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  3 02:00:09 2026 GMT
            Not After : Nov  1 23:59:59 2026 GMT
        Subject: serialNumber=646196b4459b43ef48dd06e62b23542935ee0b8c71d3aab01a5208be547ac83e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b5:eb:43:8c:2e:17:e7:fd:0e:a3:c4:ae:1f:
                    95:ae:1d:6c:c9:b2:2c:8e:c0:25:7b:56:86:45:fa:
                    c9:3f:c6:5e:83:fe:52:bd:94:07:f6:81:e1:c0:a6:
                    68:94:cf:ac:c0:d2:16:cd:bc:c9:de:93:a5:40:29:
                    f2:54:a1:17:4b:c0:1c:5c:d3:bc:d0:06:7c:f5:a7:
                    5f:05:ec:51:a1:43:1e:f1:b2:af:da:56:b3:31:d6:
                    2d:e6:a0:db:97:c7:9a:57:d0:8b:53:cc:54:65:a9:
                    b2:fd:cf:56:7c:76:1f:08:b6:c9:56:70:2a:d6:75:
                    3e:23:84:46:15:bd:91:d1:e2:2f:96:57:ba:40:a7:
                    4c:94:0c:71:47:94:e2:39:8a:3a:be:6a:f7:41:e7:
                    f1:86:c3:27:8b:77:b5:bc:a7:01:9e:a7:81:de:c2:
                    88:8d:11:a0:fb:9d:b8:dd:8b:57:c2:47:aa:0e:d2:
                    dc:df:76:52:c7:9d:79:55:a7:f0:b8:a0:7f:d2:8e:
                    ab:19:a9:d6:44:4c:fa:1b:e5:7e:c6:35:a0:78:3f:
                    39:98:12:44:b0:3a:a6:6c:ee:9b:8e:81:e1:02:4d:
                    ae:62:31:94:bf:c8:dd:29:da:9d:f0:a0:d5:1e:54:
                    cf:56:11:dc:64:9a:8f:82:4b:40:66:5a:6b:1e:7f:
                    57:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:7B:AA:FB:CE:EA:29:AB:73:A5:5F:1F:36:C4:37:BD:84:7E:EC:A1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b4f34d1c-bc06-4901-81c6-6d407c939083.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fff:40c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:b5:54:bc:42:be:25:a7:f7:bc:27:b8:be:40:2f:f9:6e:21:
         68:c1:a8:a5:ba:19:b1:ae:1d:bb:6b:61:87:81:4a:f4:24:29:
         1f:b7:5b:91:bc:dc:34:de:a4:50:04:8b:0f:7f:a0:df:2f:e8:
         54:c7:78:d9:c7:e7:0f:2c:85:ef:02:dd:5a:92:5f:32:f8:19:
         6f:36:bd:f1:59:c0:71:13:07:9b:46:67:75:de:44:0a:4f:a8:
         39:32:fe:ca:f9:75:84:36:4e:ee:b8:50:e2:3f:e7:8d:cb:2b:
         0f:fc:ba:77:c6:8e:07:08:57:5e:ed:65:4f:5c:db:fa:c6:33:
         44:8c:95:28:78:66:6d:94:6d:95:5d:4c:fc:8c:79:f5:1d:f0:
         36:33:be:ba:b7:95:05:c9:99:90:c5:62:16:d1:67:1a:75:22:
         0a:d3:b2:5e:2e:bc:8f:43:97:0c:c0:78:cf:1a:05:4d:fa:7f:
         b4:5d:aa:40:18:90:cd:e7:1e:10:6a:98:c9:72:b3:4e:69:6d:
         1c:29:30:9f:9d:aa:b3:41:3f:e8:73:f1:a6:e3:d2:0a:e3:76:
         00:bd:fa:fd:c0:a7:0c:cd:0e:11:b2:99:46:46:21:e8:29:3b:
         68:06:04:b0:89:37:04:30:4c:2a:1f:63:35:f5:88:72:19:f6:
         66:11:8e:5d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Aug 3 05:44:35 2026 by rpki-client