Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c2c6afd4-768e-4ed4-82e9-013c34669118.roa
File:                     c2c6afd4-768e-4ed4-82e9-013c34669118.roa (raw, json)
Hash identifier:          N7nzByvP4HDRBUOahUxth0JzbaEbHK6r2FGKIa0p7mc=
Subject key identifier:   A6:A0:1C:0E:F6:ED:57:E7:8E:02:83:6B:83:1F:45:B2:4C:CC:25:F5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       795C0B3F7E6DFF7D24F89FB9896976D46A7FC866
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c2c6afd4-768e-4ed4-82e9-013c34669118.roa
Signing time:             Thu 22 Oct 2026 00:30:43 +0000
ROA not before:           Thu 22 Oct 2026 00:30:43 +0000
ROA not after:            Wed 20 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fff:c0c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:5c:0b:3f:7e:6d:ff:7d:24:f8:9f:b9:89:69:76:d4:6a:7f:c8:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 22 00:30:43 2026 GMT
            Not After : Jan 20 23:59:59 2027 GMT
        Subject: serialNumber=a1164a7bdb541ec6b8d9cc3fac5def075bd3657765a0abf77a40ce099d7713ba, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:46:e9:32:98:4a:97:06:8b:8b:ac:74:ee:e6:
                    7d:f1:06:93:00:8b:5b:e7:76:df:b5:03:f3:48:33:
                    04:f7:a1:04:fb:c8:8c:c9:3e:35:36:61:80:c3:81:
                    a6:16:21:91:e8:b2:06:7b:22:54:3d:3f:8b:11:62:
                    d9:ea:5c:55:48:a7:63:b5:f0:8d:6a:4e:e5:f9:b7:
                    72:fb:cb:1a:61:27:90:b4:4e:3e:9a:29:ab:d3:49:
                    7b:a7:90:51:07:a9:7c:9b:68:e1:da:8c:04:81:42:
                    1b:ca:61:1b:09:68:f0:6c:73:45:ec:88:f2:a4:fa:
                    1c:72:04:24:5e:f8:1c:0d:12:fc:dc:5f:ad:4b:de:
                    ad:bb:1f:51:2f:4a:3d:e3:e0:fd:17:f2:56:84:be:
                    a1:b3:8a:43:ab:cf:ec:10:e6:98:39:1f:f1:54:10:
                    1c:53:f9:8e:18:df:40:3d:0a:9f:d3:9d:df:bd:fa:
                    08:d4:eb:03:90:2f:59:2d:7c:27:ad:50:79:da:e9:
                    ee:58:ed:1e:79:ac:dc:b0:b0:8e:89:78:cc:ce:4e:
                    47:c9:7f:eb:06:99:50:d8:4f:f0:a3:bb:ad:0d:1c:
                    d1:fb:c4:d6:7c:ca:e8:ba:8a:85:02:77:f1:ec:28:
                    d2:5c:83:42:5d:c9:91:23:b5:5b:7f:e5:43:63:e0:
                    86:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:A0:1C:0E:F6:ED:57:E7:8E:02:83:6B:83:1F:45:B2:4C:CC:25:F5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c2c6afd4-768e-4ed4-82e9-013c34669118.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fff:c0c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         be:39:e2:ba:e7:21:7c:fa:69:50:07:c5:70:7b:3d:75:ad:6e:
         98:c8:e9:e4:98:a8:4f:42:c5:df:0b:80:37:a0:08:40:b5:33:
         95:9e:f1:4b:ce:07:8b:3d:4b:87:60:ab:4b:91:91:fa:d1:ee:
         3e:e2:e4:79:17:c9:d2:d1:4d:71:7c:15:6d:42:4c:25:87:5e:
         45:5d:45:69:e9:be:84:7f:21:5d:e2:cf:cf:4b:41:af:5a:d4:
         c0:14:80:38:81:7d:3b:88:22:87:58:c4:7e:a4:f3:31:a9:da:
         94:02:12:ae:95:4e:83:f3:a9:9a:5b:03:99:20:46:95:41:bd:
         99:d5:86:e8:8b:bc:4f:74:58:76:7d:10:e2:f1:d6:b5:45:e1:
         06:2f:1f:5d:9b:b4:3c:21:05:6d:a0:a1:7c:7e:1d:36:a4:cc:
         77:81:93:24:af:36:97:72:a8:62:8a:a7:32:b6:77:a3:ff:74:
         5e:e9:c8:fb:80:55:7c:45:99:6a:21:10:08:55:ad:ab:ae:45:
         99:49:e2:17:bc:80:3c:5d:2b:f2:f3:84:1d:de:db:51:45:48:
         f2:dd:40:fd:10:43:43:b3:24:96:72:5c:2e:fb:4d:71:c4:00:
         7b:f2:74:ad:50:c0:93:04:f8:36:8b:57:3c:46:a2:f0:2f:cd:
         15:ce:50:c7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Oct 31 05:22:42 2026 by rpki-client