Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bb8c9e80-1e18-4a6b-affa-830051cf34f2.roa
File:                     bb8c9e80-1e18-4a6b-affa-830051cf34f2.roa (raw, json)
Hash identifier:          VmKBfHQ5LtZcZoil2GEmUaOARVovIxOrNCSP7HSPWDw=
Subject key identifier:   BC:E8:8F:49:5F:B3:BA:B3:DD:52:FB:08:38:43:35:C7:D8:15:E2:07
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       37636F0F7FDEA925DDFBE030FA27FD4D921A05F3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bb8c9e80-1e18-4a6b-affa-830051cf34f2.roa
Signing time:             Mon 03 Aug 2026 00:51:06 +0000
ROA not before:           Mon 03 Aug 2026 00:51:06 +0000
ROA not after:            Sun 01 Nov 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f00:80b0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:63:6f:0f:7f:de:a9:25:dd:fb:e0:30:fa:27:fd:4d:92:1a:05:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  3 00:51:06 2026 GMT
            Not After : Nov  1 23:59:59 2026 GMT
        Subject: serialNumber=82b55ba6a9a0d1e1e3de25e08184aaccba5e05ed3edb7f0ac054a5d6c2399571, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8f:93:6f:cf:22:5c:99:fa:7e:60:8d:df:a4:
                    c7:b2:20:f4:d8:15:35:af:92:d4:3f:5b:05:bb:86:
                    55:4d:6e:50:03:90:10:8b:37:4b:20:cd:18:f3:cb:
                    de:ca:31:b5:45:e4:ed:ff:1c:07:99:5e:9c:86:93:
                    79:10:80:b8:81:18:e0:3a:a1:a1:e2:18:27:06:7e:
                    cb:22:7f:13:82:de:d3:f4:4c:7e:32:c2:05:45:04:
                    bc:e7:56:79:0c:e4:4a:72:f1:87:c9:15:12:4f:04:
                    38:50:9b:1d:14:ec:09:30:4e:f8:0c:7b:15:75:c1:
                    cb:6c:29:12:f3:a8:43:fb:84:a4:f5:74:2e:a9:2b:
                    9f:b3:c5:77:69:bb:43:f1:ce:3d:f3:23:fa:5d:98:
                    41:ce:39:d5:1b:a2:78:d1:e2:f4:31:ad:32:49:b2:
                    9c:17:59:4d:00:99:69:08:d9:45:39:e8:35:77:41:
                    17:ba:64:5a:64:df:91:6a:8e:b9:3b:77:86:76:10:
                    ef:6d:01:2c:5a:d4:fe:6e:3d:78:1a:0a:1e:ab:bd:
                    8f:da:04:ad:ae:53:fc:54:3f:5a:09:54:73:fe:30:
                    a2:98:42:fd:c2:9f:f9:1c:33:04:01:95:ec:35:47:
                    80:86:7a:10:5b:c2:2b:4a:cd:0f:34:37:b1:cf:a6:
                    b8:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:E8:8F:49:5F:B3:BA:B3:DD:52:FB:08:38:43:35:C7:D8:15:E2:07
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bb8c9e80-1e18-4a6b-affa-830051cf34f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f00:80b0::/48

    Signature Algorithm: sha256WithRSAEncryption
         80:a7:3d:be:ec:f3:9a:91:76:b1:7b:05:62:71:62:5b:61:43:
         4f:f1:3b:29:45:f0:cd:62:16:c5:54:9c:03:7b:46:79:96:db:
         cf:4d:48:cc:34:53:5c:f0:77:53:90:41:17:f5:0c:62:ea:40:
         1c:71:77:db:06:c1:2b:9f:ae:53:73:b0:bd:91:f4:3e:3e:3b:
         9e:d4:d0:bf:a8:c1:54:be:a4:f5:73:34:3d:5c:29:8f:ca:6e:
         c5:1e:67:3d:c4:ae:42:29:ea:1b:7f:03:87:ff:73:7a:b5:85:
         63:ad:f0:30:e6:19:04:fd:f8:29:85:7d:ad:ad:86:0b:14:39:
         60:91:d7:5d:f2:34:b5:e3:f5:90:da:7b:9b:f7:e2:10:55:26:
         ae:eb:ff:29:e0:b8:a1:fb:fd:da:36:20:cd:53:f5:7e:b4:c1:
         a3:38:b2:7d:3d:9f:f3:70:67:9a:cd:ff:a9:de:0e:9d:28:27:
         3d:16:fb:39:1a:f9:c6:e6:62:7c:93:76:ee:d3:bf:08:df:1d:
         e0:d9:53:8b:ec:8e:33:11:78:b5:b1:81:6f:e0:e7:19:fe:e6:
         56:c8:c8:0e:9c:e0:0c:38:47:c6:c9:ed:5d:35:8b:aa:29:2e:
         4c:67:db:b3:ed:bb:41:ba:cb:29:6a:da:2b:f2:80:8c:f9:31:
         6f:81:09:ad
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Aug 3 05:41:28 2026 by rpki-client