Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e183c748-6356-4034-b5c1-3c442aa910a3.roa
File:                     e183c748-6356-4034-b5c1-3c442aa910a3.roa (raw, json)
Hash identifier:          Hl+DQalNh+GL8wGtpk0i6I7FGdY/Pk8uq2qv0Ond7XE=
Subject key identifier:   EC:29:77:1C:66:3F:07:6B:86:39:BC:EF:69:94:F0:6F:DC:FF:64:80
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       707378919F0F5732F12B77D04BF7D1D2476C85EA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e183c748-6356-4034-b5c1-3c442aa910a3.roa
Signing time:             Wed 19 Aug 2026 00:40:10 +0000
ROA not before:           Wed 19 Aug 2026 00:40:10 +0000
ROA not after:            Tue 17 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fe9:5000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:73:78:91:9f:0f:57:32:f1:2b:77:d0:4b:f7:d1:d2:47:6c:85:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 19 00:40:10 2026 GMT
            Not After : Nov 17 23:59:59 2026 GMT
        Subject: serialNumber=29e384f35f53febae0c1432eeb9c0f92b7e20645751c394e628793719c31782b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:33:2a:74:65:d0:1d:7b:d6:ba:b5:c1:b3:74:
                    56:9d:85:b4:a3:02:b7:97:11:ea:ac:1f:ee:3a:f4:
                    85:b5:fe:7d:9b:89:79:db:3e:46:01:87:ce:4c:80:
                    a3:f6:d1:50:14:51:cc:9f:4f:e8:11:66:3c:47:96:
                    78:b7:a5:00:c7:79:ae:33:78:65:46:ab:78:43:6a:
                    00:51:9f:fe:de:4a:18:a0:b6:ac:34:6d:f8:6d:ca:
                    83:c4:cf:dc:7a:7f:e1:cd:88:0e:d9:64:ab:fb:3c:
                    ab:cc:02:27:dc:e2:d6:58:fe:0f:59:a5:0b:ff:6e:
                    46:64:f3:d1:b3:7d:eb:07:0a:7b:b2:69:62:db:7d:
                    68:2f:57:72:2c:27:64:96:14:fd:68:33:11:93:05:
                    41:3b:14:1a:cf:cd:71:4b:44:58:c9:7b:7b:cc:fe:
                    f2:9c:d2:5d:39:c9:d5:ad:48:a0:21:0c:e8:96:6d:
                    2e:cd:aa:02:5c:ce:43:ec:c1:8d:8a:62:e5:6b:69:
                    28:e6:d5:94:9d:22:bf:70:76:fd:40:12:11:05:52:
                    fb:72:98:f3:15:84:f9:0b:7b:73:b0:61:75:3c:38:
                    a9:61:39:6a:eb:7a:12:64:b1:4d:5a:d3:f4:9a:80:
                    87:60:70:f1:d6:95:51:3a:6d:b0:96:e0:c7:aa:03:
                    46:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:29:77:1C:66:3F:07:6B:86:39:BC:EF:69:94:F0:6F:DC:FF:64:80
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e183c748-6356-4034-b5c1-3c442aa910a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fe9:5000::/40

    Signature Algorithm: sha256WithRSAEncryption
         33:f4:2d:0c:e7:32:86:a8:ef:30:40:da:00:1a:72:81:1f:e0:
         20:44:a2:97:fa:06:ff:92:3d:25:59:ea:a2:d4:f4:1a:21:51:
         3e:72:78:eb:23:8d:73:4f:7d:c6:30:03:a2:8b:93:45:e7:73:
         19:0c:5a:b7:da:ae:a7:50:03:e9:b4:86:7b:a3:b9:4f:d6:ea:
         5c:50:c2:3a:f8:1a:db:b3:11:12:12:c0:b5:88:b3:f5:22:14:
         f2:79:24:ef:a8:13:4b:f9:58:0a:6d:da:85:85:ec:4e:58:f5:
         1b:66:b1:a7:9a:f2:46:31:0b:af:e0:58:de:9c:0f:f2:2f:7b:
         3d:a7:87:a8:58:28:d9:d8:dc:ee:77:d1:65:b7:72:6d:6b:73:
         be:dc:32:04:ec:0b:98:ee:86:23:1f:36:e2:92:46:1e:ac:1e:
         3b:fa:82:17:07:00:42:23:54:b4:df:ec:bb:1a:21:cf:a4:c2:
         09:76:5e:35:3e:31:11:73:16:3b:63:20:1a:46:33:9c:4e:35:
         5a:9a:61:c5:e3:24:8f:71:98:2f:04:51:bf:53:86:ef:e0:e9:
         44:64:2a:50:21:c2:aa:e8:d8:4d:a7:c1:24:56:b6:32:e3:7f:
         81:24:a7:c8:df:db:de:fc:0e:7c:09:44:8a:25:b9:29:f2:cf:
         4d:7e:fb:66
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Sep 15 13:27:03 2026 by rpki-client