Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e8bc2db2-830f-4ee0-b40f-d00b9daa13a3.roa
File:                     e8bc2db2-830f-4ee0-b40f-d00b9daa13a3.roa (raw, json)
Hash identifier:          4OVBFqV9fH1/t1Rs1KCQ2wROMbSqCc+CwTri1+bZFDg=
Subject key identifier:   14:3B:8E:A8:25:E3:40:86:82:A4:5B:72:FD:F7:46:A0:78:9D:46:12
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7B512896F6F3E381247422EE4D7C1BBB5ECE28B7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e8bc2db2-830f-4ee0-b40f-d00b9daa13a3.roa
Signing time:             Tue 04 Aug 2026 02:11:12 +0000
ROA not before:           Tue 04 Aug 2026 02:11:12 +0000
ROA not after:            Mon 02 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f16:400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:51:28:96:f6:f3:e3:81:24:74:22:ee:4d:7c:1b:bb:5e:ce:28:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  4 02:11:12 2026 GMT
            Not After : Nov  2 23:59:59 2026 GMT
        Subject: serialNumber=82fe60c70f29f86201a23c99a2e330c9aedd3bf4b0a96f36125ca43c1c9763c8, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e7:0b:d3:17:af:b7:78:e4:66:79:3f:8e:94:
                    0c:c1:59:16:ce:f4:21:5b:21:22:13:80:9f:0d:5e:
                    3d:c3:ca:e0:01:35:40:55:db:6b:c3:5c:e3:70:69:
                    4f:1a:6c:2d:9d:30:7f:38:9d:ce:db:e1:a6:8c:52:
                    73:12:a2:82:7f:b3:e3:00:21:3b:8a:91:ab:17:5f:
                    3b:1b:29:79:07:c0:f0:41:bc:9f:87:23:c2:a7:ea:
                    7c:53:e5:3c:48:0c:ed:4b:00:d9:49:96:cb:4d:b6:
                    a6:74:3c:a1:e3:e5:ee:27:07:9c:0a:90:7f:f8:76:
                    90:3b:97:48:12:90:8a:f7:23:0a:ae:34:57:9f:be:
                    ab:68:cf:51:e5:88:82:fc:bb:b2:09:9a:b3:45:1f:
                    94:fb:ac:01:68:7d:32:f5:4c:36:b8:b4:6d:bd:90:
                    a6:7d:e5:c1:e6:a1:0d:c9:d1:a4:f9:f3:0b:64:58:
                    44:ff:61:43:20:71:c6:07:ae:e7:71:42:56:c3:85:
                    d6:a7:74:31:da:17:6c:d8:83:f1:bb:cc:b7:ce:09:
                    8b:f3:9c:53:49:08:28:31:76:20:fb:4b:dd:4a:d6:
                    fa:52:f0:82:60:ce:c2:f9:1a:f0:40:45:03:13:c6:
                    61:8f:75:bb:d7:c5:e7:da:7f:79:97:c4:d0:c0:27:
                    0d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:3B:8E:A8:25:E3:40:86:82:A4:5B:72:FD:F7:46:A0:78:9D:46:12
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e8bc2db2-830f-4ee0-b40f-d00b9daa13a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f16:400::/38

    Signature Algorithm: sha256WithRSAEncryption
         5e:38:25:33:9f:8f:23:f0:c9:2c:68:56:55:c8:df:2d:87:de:
         52:58:2c:c7:8f:5c:75:74:1b:f0:17:c2:ff:73:4c:03:b7:19:
         12:12:a6:d2:0f:68:76:f9:d8:38:3b:99:c5:3c:c2:b8:db:2c:
         51:18:c3:be:72:99:12:3b:02:9b:97:07:28:9d:50:b0:0e:b1:
         68:9b:04:ef:b1:8f:2b:cb:34:c1:6c:5f:76:00:2c:c7:70:cf:
         13:88:fe:f0:56:8d:61:4f:0a:30:67:91:eb:3b:61:3c:e4:c4:
         f2:5d:97:d0:45:f7:95:c8:54:db:96:8f:08:0f:b9:3a:e6:ba:
         a9:f4:3f:51:d8:a7:26:09:cc:bf:87:82:f0:f4:e3:41:12:3a:
         f0:c2:77:91:64:35:38:fe:7b:b3:df:17:ab:7c:6a:c2:a4:53:
         0d:a3:6f:cd:e8:b3:ff:dc:7c:80:73:5b:49:36:b7:2e:d9:8e:
         25:28:71:61:74:a6:31:ab:ee:17:0a:2a:11:a7:ae:eb:77:7a:
         ad:f4:f1:5f:ee:e7:ae:14:58:c4:91:65:29:0a:d0:07:12:a7:
         8e:21:a3:0b:74:9b:42:1c:30:60:80:33:e6:7e:9c:3d:fa:a5:
         f4:a5:5a:bf:8f:02:27:39:73:9e:1a:3b:36:c6:24:6d:be:1d:
         d2:bc:89:f3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Sep 15 12:10:19 2026 by rpki-client