Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8420826-a4f4-4292-a458-ce267ddf8415.roa
File:                     c8420826-a4f4-4292-a458-ce267ddf8415.roa (raw, json)
Hash identifier:          w4t4YLGE1tQUghRNV6Y+WX6CI5d7WUBEFp4HsRYgNyw=
Subject key identifier:   5C:93:AC:32:E0:51:61:91:F8:2A:5A:47:FF:2C:20:2B:8F:BD:2B:1D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7F4F0852B5AA345F14EF3EE462B0D7EEC6EE1551
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8420826-a4f4-4292-a458-ce267ddf8415.roa
Signing time:             Mon 03 Aug 2026 01:30:47 +0000
ROA not before:           Mon 03 Aug 2026 01:30:47 +0000
ROA not after:            Sun 01 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f38:6080::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 16 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:4f:08:52:b5:aa:34:5f:14:ef:3e:e4:62:b0:d7:ee:c6:ee:15:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  3 01:30:47 2026 GMT
            Not After : Nov  1 23:59:59 2026 GMT
        Subject: serialNumber=ee39a9aa21af768e086bac762c66bbdbc522927900faeb36bdd61ae5ce34232f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b4:aa:e5:fd:d4:4b:fd:9f:d6:8d:2f:ff:4b:
                    d6:58:33:ba:78:59:ff:ce:25:96:be:d3:84:5d:fd:
                    28:ca:68:d5:b2:67:54:fb:23:d9:c8:88:12:19:35:
                    43:4d:15:ef:9f:5b:4c:44:25:36:e5:c8:1a:a5:8a:
                    ca:2c:5e:30:f7:92:a2:fb:05:d0:a4:ca:dc:e3:7d:
                    dd:45:d2:29:73:94:2b:cd:cf:59:67:53:97:b9:50:
                    b4:10:5a:90:ea:f8:e4:50:88:5b:af:b9:1b:cb:93:
                    ec:6d:d0:ed:7f:01:73:2c:0f:ff:0d:7d:8b:76:fd:
                    77:6a:6b:37:40:bd:d2:19:a6:74:cb:49:6d:58:c2:
                    2d:dd:29:a5:c1:b1:be:ea:95:a6:c8:de:3a:23:f9:
                    4f:54:80:0c:f3:8c:87:85:90:6f:36:73:bd:ab:92:
                    ce:3d:cf:5b:66:80:30:14:5d:54:88:42:f3:0e:ab:
                    68:c8:45:ad:03:e6:07:d7:1b:74:6b:d1:6f:e6:60:
                    53:75:9b:45:b4:69:82:1b:05:f3:d9:92:dd:66:2b:
                    fd:b8:9a:34:5f:5e:90:70:4e:2d:a6:da:a3:eb:b7:
                    d2:49:b7:84:2b:5e:8e:d4:46:0b:46:d9:19:f6:40:
                    28:24:57:ed:b3:78:da:40:a4:77:57:b2:5e:fa:46:
                    89:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:93:AC:32:E0:51:61:91:F8:2A:5A:47:FF:2C:20:2B:8F:BD:2B:1D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8420826-a4f4-4292-a458-ce267ddf8415.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f38:6080::/48

    Signature Algorithm: sha256WithRSAEncryption
         a8:7a:17:17:68:e2:72:95:88:38:a5:e9:b0:42:de:8f:cf:15:
         50:07:5f:d9:ec:2e:5d:69:33:16:36:0d:ea:9d:81:ac:e9:72:
         2f:7f:43:05:08:ed:ac:05:7c:ea:4f:62:df:27:56:d0:27:14:
         0a:fb:2f:ad:0c:e2:eb:59:3c:77:b2:a4:ba:34:bd:e5:c1:1c:
         9a:b0:2a:90:39:ca:61:5a:af:54:42:40:a3:70:0b:1a:28:59:
         9d:d5:b9:e3:ff:74:c6:71:d3:4e:fc:54:7d:12:78:14:25:a5:
         70:6f:05:bd:e7:f5:cb:46:77:67:61:10:61:20:59:4d:4c:f3:
         bf:2e:dc:ed:61:f5:57:8d:23:8a:45:22:25:38:4d:f1:61:e2:
         85:fc:b5:0b:2b:76:17:04:f5:02:cb:02:5d:7e:e2:b5:f6:6e:
         ec:bd:fc:ce:95:19:24:b2:a7:38:0f:49:29:58:d0:93:1a:2b:
         f3:d9:5d:27:07:d3:c4:14:5a:35:cf:fa:cf:05:fc:49:49:87:
         3e:70:83:36:13:a1:7d:bc:f9:a9:4a:7f:db:31:b8:ed:3e:af:
         04:6a:c1:6f:40:0c:d9:48:0b:ec:5a:bd:eb:14:16:08:20:b8:
         4d:08:00:91:ba:71:83:16:58:0c:4b:db:db:ac:c0:45:d3:1d:
         3b:1e:73:05
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Aug 15 07:44:59 2026 by rpki-client