Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e739315a-de30-4ed8-9dfc-1a8dbc6e51d9.roa
File:                     e739315a-de30-4ed8-9dfc-1a8dbc6e51d9.roa (raw, json)
Hash identifier:          NpNFJ+QGlQBVkRPZHZb5BvbhjRAvpn14vJkcw2v+cSI=
Subject key identifier:   E7:2D:5F:AF:53:04:49:60:1B:BB:7F:30:74:44:C0:2A:6E:11:B8:65
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       361BB235BA750CC24950FCCB6F0EBEA6D8E6C535
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e739315a-de30-4ed8-9dfc-1a8dbc6e51d9.roa
Signing time:             Tue 04 Aug 2026 01:20:04 +0000
ROA not before:           Tue 04 Aug 2026 01:20:04 +0000
ROA not after:            Mon 02 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f25:4800::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:1b:b2:35:ba:75:0c:c2:49:50:fc:cb:6f:0e:be:a6:d8:e6:c5:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  4 01:20:04 2026 GMT
            Not After : Nov  2 23:59:59 2026 GMT
        Subject: serialNumber=63b283e7e2d6b6cb4c79a75cefc785005063b6772cd832eeb0d8002b160f2c7e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0e:c7:f6:11:46:d6:2c:34:13:1f:b3:66:50:
                    0e:2a:2a:1c:fd:4d:12:27:3c:03:a5:c6:7b:2d:13:
                    65:7e:c0:ca:74:ce:f1:08:f0:63:c1:f4:9a:03:4e:
                    14:c3:06:5c:40:6f:60:98:90:67:db:60:06:e8:dd:
                    b2:80:b4:62:fa:fb:cd:50:40:5a:e2:8c:c0:53:a5:
                    41:84:76:a2:0c:e2:46:a9:35:e6:f0:81:8c:ee:b0:
                    1f:17:1a:e1:b1:70:fe:87:cb:51:d9:d9:34:e9:de:
                    29:bb:f9:c8:1a:99:e5:c6:49:eb:0f:68:28:6c:67:
                    52:a9:b8:ff:84:57:00:04:d2:9c:23:0e:3d:ca:95:
                    bd:eb:15:05:69:a0:e6:aa:0b:b9:f7:05:18:42:8d:
                    32:b1:1c:7d:80:5a:a9:59:64:75:06:9a:f9:04:14:
                    88:1d:d3:71:09:78:b3:f8:6a:17:5c:ed:52:3c:dd:
                    ff:f1:c4:d8:ca:05:a9:38:21:16:67:d0:fd:dd:70:
                    ee:6b:81:d1:f2:cd:6d:93:5f:37:dd:ba:f7:44:c6:
                    57:c4:2c:a6:56:4a:99:ee:0d:08:90:56:ea:5c:98:
                    bb:e3:c8:03:29:40:93:69:d8:40:ba:ea:2c:ed:a7:
                    d8:5c:ab:a6:5e:76:ad:03:02:aa:23:51:0f:bf:8f:
                    94:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:2D:5F:AF:53:04:49:60:1B:BB:7F:30:74:44:C0:2A:6E:11:B8:65
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e739315a-de30-4ed8-9dfc-1a8dbc6e51d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f25:4800::/37

    Signature Algorithm: sha256WithRSAEncryption
         3c:e2:4c:87:72:b5:27:fc:60:a3:f3:12:d5:ef:51:10:cd:7e:
         5d:32:cd:f4:2c:c6:e6:a1:2c:4e:9d:3f:ef:30:17:c6:72:48:
         6a:d6:52:ce:1d:19:f7:77:b5:2f:43:39:f2:9e:5f:ad:40:eb:
         cf:77:e6:43:b1:62:ed:7a:f9:28:e4:a1:26:76:a1:d3:23:f7:
         67:a7:22:6f:13:d4:00:3c:c0:75:24:29:c3:c1:b0:f6:19:68:
         47:f2:de:93:5d:18:86:59:9d:6f:10:db:8f:0b:d7:e6:ef:89:
         37:47:24:de:7c:02:db:ab:5f:9f:4e:b3:01:20:33:c4:b9:fb:
         f9:c5:39:49:e4:1b:44:17:56:3b:eb:42:06:7f:53:8b:c2:07:
         5d:54:ad:1a:b2:ed:53:37:73:03:6a:e7:61:df:9d:c9:3b:39:
         f5:38:75:ec:15:bc:11:06:a7:dc:8b:12:70:18:1a:30:57:20:
         e9:60:6b:1e:77:9b:bd:fc:a9:c5:f3:0c:83:5c:f9:a5:c0:e0:
         57:00:c2:72:5a:55:05:15:c7:bf:33:3d:38:23:6e:69:75:61:
         7b:c1:8b:71:38:3b:8e:40:9f:a5:07:cc:48:6b:ba:8d:ff:bd:
         84:5f:d2:88:89:2f:b2:6b:56:37:b1:fe:54:2e:65:09:f0:c4:
         d7:a2:e8:67
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Sep 15 12:46:24 2026 by rpki-client