Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bf7f3c9b-89c0-4589-b30d-a3112c021c5b.roa
File:                     bf7f3c9b-89c0-4589-b30d-a3112c021c5b.roa (raw, json)
Hash identifier:          J9S6ZvJunlVQMpZUfztwHU/4LFMBsPD4Px2MXsTIaxQ=
Subject key identifier:   73:9E:F5:DE:7D:4F:09:D6:23:97:A4:57:BF:63:26:C8:F1:8C:CC:9D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5892FD57E20DEBBE8628FD9ED8106B245DD2FDDE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bf7f3c9b-89c0-4589-b30d-a3112c021c5b.roa
Signing time:             Tue 04 Aug 2026 02:01:12 +0000
ROA not before:           Tue 04 Aug 2026 02:01:12 +0000
ROA not after:            Mon 02 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f22:4000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:92:fd:57:e2:0d:eb:be:86:28:fd:9e:d8:10:6b:24:5d:d2:fd:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  4 02:01:12 2026 GMT
            Not After : Nov  2 23:59:59 2026 GMT
        Subject: serialNumber=982e3f2aeae182b5642a2a9f9d8ee7329fca0fcf333b8987767407aca370c483, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9e:ee:94:d2:7a:5e:cd:a8:47:eb:59:fa:2b:
                    86:0b:2c:dc:ee:f6:ea:0b:ef:a1:aa:b0:b1:b4:1d:
                    72:08:ce:85:78:50:f7:6f:c4:56:fe:2d:e5:a1:7c:
                    6d:cb:83:fb:b8:6a:c9:e2:6f:9f:b8:7f:58:9b:00:
                    c4:e4:17:a8:aa:f6:a3:d9:dc:cd:c7:20:3f:b6:c2:
                    fd:25:96:a8:c3:ea:54:42:9e:79:83:fd:23:d3:be:
                    8e:6e:fe:44:fd:38:6a:d4:32:9f:71:14:02:5d:e0:
                    53:d2:de:e3:02:eb:f1:2f:d5:fa:6a:5e:bc:97:85:
                    fb:e8:33:52:37:d0:2c:2c:ac:55:60:ae:ec:1d:a1:
                    1f:3b:02:5b:05:5c:e3:05:96:9b:34:cf:e2:36:d7:
                    98:29:a4:b2:ad:ee:69:23:c8:54:08:ba:85:75:52:
                    61:5f:34:97:2b:86:e0:12:d5:45:8b:85:8b:e1:34:
                    84:35:93:79:24:18:d4:0f:3f:4a:45:0c:db:f7:5a:
                    77:6c:cb:86:3b:49:5e:f8:fe:d9:c3:22:b2:e6:3b:
                    25:44:c3:94:13:10:79:55:19:68:20:8b:96:f8:28:
                    79:c5:89:a1:50:5a:86:97:60:c0:f7:92:a3:de:e0:
                    5a:ff:91:d4:f1:56:de:84:7e:06:57:50:39:18:09:
                    82:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:9E:F5:DE:7D:4F:09:D6:23:97:A4:57:BF:63:26:C8:F1:8C:CC:9D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bf7f3c9b-89c0-4589-b30d-a3112c021c5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f22:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         90:28:42:b9:ef:96:e5:07:f2:1d:8a:8b:06:8d:df:fd:95:6b:
         16:a2:3f:7d:6c:26:12:af:60:50:38:21:9e:0f:d5:56:6d:c0:
         55:63:b5:12:4b:31:ba:21:a9:df:54:6e:d1:1e:55:05:15:79:
         07:6a:b5:87:26:f4:ca:07:57:16:3d:0c:72:46:6e:9b:21:1d:
         ae:f1:e3:e3:95:da:69:ff:37:63:e8:87:c3:69:e7:6e:02:20:
         98:b3:74:a6:83:da:56:bb:1a:49:00:21:b1:c7:f0:ed:61:b6:
         f5:45:ef:31:39:1e:6f:e6:b4:75:4e:4d:85:69:ee:fa:33:8f:
         96:40:8d:0a:85:38:10:d6:9d:6b:9d:b3:05:b8:d2:55:81:9c:
         5c:57:55:53:6b:dd:ef:2e:87:e2:5e:1f:3f:c7:aa:b8:a5:37:
         65:06:21:a6:8b:38:c3:a0:8f:99:5a:99:fa:3b:9d:31:d6:e8:
         ea:65:61:b2:99:e7:07:db:ba:5a:05:75:c5:5f:68:5f:54:9b:
         7b:bc:18:15:96:a1:dd:b0:17:63:76:0c:5e:e7:29:ac:8d:d0:
         79:f4:c3:4e:07:12:32:c6:c9:d8:81:ae:22:d6:d1:09:81:9f:
         c5:24:5d:7e:8a:37:53:83:a1:5b:b6:05:5a:74:d3:60:f8:88:
         f9:e5:96:31
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Sep 17 18:43:12 2026 by rpki-client