Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1babd71-0375-46e5-9fa3-1e46d231571f.roa
File:                     c1babd71-0375-46e5-9fa3-1e46d231571f.roa (raw, json)
Hash identifier:          PTpl9pmOyVhys5ieW95yzsU8+fRWZvxa8C08ORVh6CA=
Subject key identifier:   BD:23:4E:EE:A8:3F:83:53:5B:79:55:7C:C0:9F:21:83:27:B5:20:16
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3646F1BF9F23A575539503EDA97CFC1FF741F293
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1babd71-0375-46e5-9fa3-1e46d231571f.roa
Signing time:             Mon 03 Aug 2026 00:30:12 +0000
ROA not before:           Mon 03 Aug 2026 00:30:12 +0000
ROA not after:            Sun 01 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f00:2080::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:46:f1:bf:9f:23:a5:75:53:95:03:ed:a9:7c:fc:1f:f7:41:f2:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  3 00:30:12 2026 GMT
            Not After : Nov  1 23:59:59 2026 GMT
        Subject: serialNumber=7e0f75d15ee6b9a31e3bbb8a57d64a0019f9d2cdfb68ab9dc7cf0c52b97893db, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:71:f8:3e:d8:51:80:30:4a:40:33:1d:a7:09:
                    00:90:2c:b0:2e:88:25:5f:d6:d7:9a:4d:10:46:91:
                    d5:6e:fb:23:f1:b6:ef:d7:87:dc:6d:9b:fc:be:7c:
                    c8:0e:70:3c:81:80:99:f7:32:27:aa:0a:0a:d5:52:
                    7c:a3:a8:df:28:7a:51:cd:7f:6a:d2:d9:78:b1:8e:
                    cf:59:ff:78:dd:46:96:1a:e6:52:eb:78:44:ce:3b:
                    da:84:6e:b1:42:01:f2:b5:5f:63:5b:9f:e2:4b:71:
                    a3:75:b7:66:89:14:82:bf:05:f3:40:0b:58:30:6a:
                    71:87:7c:0d:1c:be:66:d2:43:30:2a:98:4e:69:af:
                    00:df:54:02:2d:6e:48:d9:20:d4:7e:98:48:f7:1d:
                    78:07:3a:5e:b5:15:24:69:e2:27:df:bf:62:3f:9c:
                    57:19:b5:34:d0:c6:3b:4b:92:36:08:16:d1:00:06:
                    f2:89:61:4c:6c:aa:c0:c1:ad:b3:62:14:a2:7e:32:
                    ad:b3:9d:dd:7d:87:1d:80:6f:66:dc:f5:43:aa:32:
                    99:49:e8:cf:06:d6:bd:00:b1:35:d2:86:01:b3:56:
                    37:fe:81:a1:61:51:5d:6a:7f:39:22:84:6d:b2:c5:
                    a7:0f:e5:d3:55:40:07:2d:8c:7f:90:f0:4b:79:1d:
                    42:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:23:4E:EE:A8:3F:83:53:5B:79:55:7C:C0:9F:21:83:27:B5:20:16
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1babd71-0375-46e5-9fa3-1e46d231571f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f00:2080::/48

    Signature Algorithm: sha256WithRSAEncryption
         2c:22:7d:ea:7c:5f:e4:62:fd:a6:b6:bb:53:44:53:3b:0a:aa:
         77:92:1e:65:36:91:06:ce:95:ab:72:e8:3f:57:b5:c2:e8:5e:
         e5:72:0d:5f:9a:3d:db:83:87:0f:66:23:8d:a1:9e:f8:1e:e8:
         85:d7:8e:19:67:36:28:d6:94:7f:a0:a1:83:0d:70:69:ce:90:
         49:97:8a:fa:84:f8:3f:1f:b5:2a:a8:f3:a7:05:8f:1c:15:de:
         28:b3:af:bc:29:37:60:70:a2:73:ba:8d:7f:35:3b:f1:d8:50:
         e0:ec:b8:ab:c3:66:5e:f1:ed:31:37:8c:c6:d2:ef:9b:6f:06:
         f5:8e:b8:40:ff:76:65:1c:ac:c5:7a:90:6e:ed:fa:0b:dc:ae:
         f7:dc:41:5c:1a:67:01:21:52:e6:98:81:35:8b:e1:cd:fe:0f:
         87:9e:b4:3c:8f:af:69:54:4a:ef:d9:94:1c:09:9a:55:df:67:
         0c:d7:a6:b9:60:35:40:7b:47:56:68:d0:a7:66:a3:92:0a:00:
         f4:21:cd:45:d5:d6:46:a8:84:e3:c7:9f:94:23:68:3f:91:e4:
         e2:9a:16:76:08:ad:6a:ea:e2:d4:26:d6:e8:2b:d5:4f:8b:25:
         19:d5:05:98:50:c8:3b:6b:84:14:45:b4:12:7e:82:4a:d1:5c:
         50:88:42:b4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Aug 3 05:40:35 2026 by rpki-client