Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d16323a6-1daa-4972-8271-04fee1ea157d.roa
File:                     d16323a6-1daa-4972-8271-04fee1ea157d.roa (raw, json)
Hash identifier:          OHh7Hj7qFzVz9vmpA7ZgkXZBvmfTOMlRlpmKlKUKNHQ=
Subject key identifier:   4F:BF:16:6D:C0:7E:55:21:72:DD:BD:C5:76:A6:52:3B:71:BB:C1:47
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       704A11353B0B35A0F1E2BC1D11339359FBA7E634
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d16323a6-1daa-4972-8271-04fee1ea157d.roa
Signing time:             Thu 08 Oct 2026 00:51:06 +0000
ROA not before:           Thu 08 Oct 2026 00:51:06 +0000
ROA not after:            Wed 06 Jan 2027 23:59:59 +0000
asID:                     8987
IP address blocks:        2600:1f68:2000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 25 Oct 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:4a:11:35:3b:0b:35:a0:f1:e2:bc:1d:11:33:93:59:fb:a7:e6:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  8 00:51:06 2026 GMT
            Not After : Jan  6 23:59:59 2027 GMT
        Subject: serialNumber=7594f1a15a7b1cbaa03cad37f275bf5c8c7c9577dd6801c9728ba6e4d2b83873, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c7:62:5b:eb:0b:91:14:58:d3:c3:b8:56:e7:
                    04:d8:29:ff:dc:16:9e:c7:05:db:9f:dc:25:38:2f:
                    0d:59:fb:1a:60:80:58:98:69:48:59:60:a6:26:39:
                    78:f7:15:6c:42:34:93:92:5c:62:0f:7f:70:1c:2a:
                    d8:39:85:79:4d:10:e0:ec:d0:26:2e:e4:08:9f:5f:
                    7d:58:93:f8:ec:16:a8:2d:ca:d0:f6:5d:7d:dc:a3:
                    51:63:26:0f:a0:46:2c:3d:d2:bc:3d:c3:0b:8e:fc:
                    19:5c:e4:76:59:76:5a:f5:4c:80:5e:0b:8a:b5:f1:
                    fe:cb:be:e5:3c:7e:bc:ba:98:78:b5:9d:bc:27:a9:
                    0d:2c:fb:af:d3:6a:20:4e:a1:9d:99:7e:b5:13:8d:
                    ab:17:db:e7:5c:04:a3:c0:00:64:b7:9f:f0:f0:76:
                    e1:cf:29:fe:5f:da:c5:d8:19:95:7b:9d:84:9e:1e:
                    f3:ed:7d:c4:61:5e:88:99:3b:93:44:ae:f0:8a:5f:
                    e0:8d:fe:9b:e1:c9:19:6e:d0:f6:7d:ff:4f:25:53:
                    33:bd:57:a2:02:0b:4f:5c:40:ec:17:58:ec:64:b6:
                    e6:ce:52:19:d0:76:8a:5f:a3:47:42:2e:be:83:56:
                    da:52:3a:6c:fb:07:cc:72:9f:df:2d:15:d3:d2:f0:
                    ae:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:BF:16:6D:C0:7E:55:21:72:DD:BD:C5:76:A6:52:3B:71:BB:C1:47
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d16323a6-1daa-4972-8271-04fee1ea157d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f68:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         ba:01:be:64:e1:96:6a:ac:ed:e0:23:d6:8a:11:a6:8a:67:12:
         0b:43:e1:2e:e8:5b:6f:af:f5:f5:4c:6e:6b:e1:c7:01:0b:1c:
         95:c2:69:50:3b:db:90:7a:9f:f6:91:be:4c:92:68:c0:3f:da:
         c7:b0:8f:31:75:18:dc:51:7a:58:47:53:5c:4b:02:a0:80:c1:
         fb:89:4a:8e:b3:73:5b:2b:b7:f7:04:db:39:7f:cd:f4:0e:88:
         b4:33:0f:57:bc:91:ad:4e:38:68:1a:61:1e:6f:e3:d3:9e:b7:
         9d:c9:58:5f:c6:b8:19:90:5b:eb:60:f3:7a:aa:3f:2e:3c:fd:
         e4:c6:2d:ef:d9:0c:52:c9:20:7c:64:0c:48:a8:0b:26:e3:43:
         3e:4e:78:1d:60:b8:15:5a:16:3a:41:f6:f8:3f:26:96:ff:7c:
         c7:66:70:08:a8:45:5d:73:8e:8e:0d:e7:c4:b1:dd:f3:ad:bf:
         0e:a2:4a:56:44:99:4b:0d:b4:f7:58:85:77:58:54:f8:14:6a:
         3f:3b:e6:b4:4d:62:a9:fe:94:f2:34:63:08:92:4e:e1:57:be:
         d3:e9:9b:aa:98:e9:30:09:0b:a2:31:8d:95:d4:16:ed:59:05:
         d8:0d:54:40:ad:31:c9:e6:9e:01:49:4e:36:34:0f:50:ee:47:
         3e:ff:f1:61
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Oct 24 12:02:58 2026 by rpki-client