Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ea2fb706-8b77-4488-b0ea-c676dbbf7655.roa
File:                     ea2fb706-8b77-4488-b0ea-c676dbbf7655.roa (raw, json)
Hash identifier:          q+tGo1tjjGnWhC+9XVHvPP6CDJe0iDQ4S7xU54mmfDU=
Subject key identifier:   41:55:D8:2F:D2:6C:4D:24:C1:83:A8:0D:A4:E5:0D:74:5F:E1:3D:D1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       78A838B6FCDDC92F40C25699332CBD230977033A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ea2fb706-8b77-4488-b0ea-c676dbbf7655.roa
Signing time:             Wed 19 Aug 2026 00:40:48 +0000
ROA not before:           Wed 19 Aug 2026 00:40:48 +0000
ROA not after:            Tue 17 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fba:8000::/39 maxlen: 39
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:a8:38:b6:fc:dd:c9:2f:40:c2:56:99:33:2c:bd:23:09:77:03:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 19 00:40:48 2026 GMT
            Not After : Nov 17 23:59:59 2026 GMT
        Subject: serialNumber=202e18ee3a4cba1ecc30d52279aab88f4d2d481d9f325b0bfa5284b7ab74f27e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d2:46:c8:e0:fb:f7:73:48:88:2b:95:ff:9e:
                    69:4a:6b:7d:a6:be:b3:1a:5f:00:e2:69:72:6a:f3:
                    f4:cb:8c:65:c2:e8:bc:f0:fd:8b:49:d0:95:d6:2d:
                    85:94:1d:68:4a:ec:60:36:7a:ab:d1:5c:b1:24:60:
                    3b:d2:3a:91:56:68:81:83:a2:8a:6e:a0:9f:25:88:
                    06:30:b2:4d:65:cd:83:69:51:be:da:01:f6:ff:ec:
                    b9:30:25:12:de:8c:45:73:a4:fe:10:7f:c4:5e:29:
                    e9:fb:b1:d5:78:96:4c:ae:e9:48:e4:ac:ec:1b:39:
                    02:c2:8e:09:5b:cf:9d:5a:81:9a:c7:df:8c:9b:17:
                    ce:52:fd:58:fe:68:e9:d0:f6:30:c3:e8:f4:fe:12:
                    33:87:d7:f1:1e:8c:43:47:56:1f:be:58:28:31:ae:
                    94:aa:3b:d8:60:73:cc:25:4f:0e:33:c1:5c:7b:c7:
                    ee:23:5e:6f:8d:30:be:ca:8f:96:1a:f3:97:e8:82:
                    4b:70:a5:cb:99:1b:dc:06:d0:aa:7e:97:49:f5:41:
                    fe:de:33:12:98:95:1c:d1:f5:bf:25:fd:b3:8d:17:
                    c4:05:13:01:13:ba:b1:83:15:e4:2f:87:62:16:c7:
                    60:f0:35:ce:03:05:e8:97:88:40:51:a1:11:a8:0e:
                    39:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:55:D8:2F:D2:6C:4D:24:C1:83:A8:0D:A4:E5:0D:74:5F:E1:3D:D1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ea2fb706-8b77-4488-b0ea-c676dbbf7655.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fba:8000::/39

    Signature Algorithm: sha256WithRSAEncryption
         74:90:c8:7f:59:bb:1c:1d:be:44:1d:2b:ce:f5:e8:1f:98:d3:
         d7:83:93:6c:ac:53:18:c5:38:03:84:27:35:a2:b9:0b:14:74:
         5c:ae:0b:8e:c6:cb:82:71:ee:b2:2e:88:ba:77:a0:98:4f:e8:
         9b:dd:7b:6a:78:17:2a:69:e8:2d:d2:2d:e8:f5:78:bf:c1:42:
         f5:9a:64:b9:c2:33:b9:81:da:3f:c4:ab:f4:5c:d4:fb:11:aa:
         d7:07:1d:20:6b:3d:fe:06:5f:27:01:f8:13:98:89:c7:ec:28:
         7a:0d:f3:f0:89:75:f8:28:7d:f0:d5:45:6f:79:d4:6a:03:d1:
         c4:85:34:92:04:85:22:5f:fa:10:77:ae:61:5c:fc:ef:dd:90:
         9c:0e:ba:2b:59:40:db:1b:66:15:f1:9a:27:03:a6:08:78:8c:
         9a:a8:d8:65:47:83:f0:d6:5f:33:0f:1d:78:e9:a5:cc:40:d5:
         4d:f0:62:de:4c:53:8e:31:74:a6:d7:e6:10:ae:27:70:24:24:
         1b:9d:a2:ec:26:e2:c1:3d:10:68:17:28:7b:e0:c0:09:c7:24:
         79:ac:29:b5:e9:f6:42:a4:db:6e:e7:4e:99:b6:cb:a6:c3:24:
         7e:65:f1:b7:c1:5b:32:34:dd:a8:83:bc:af:33:66:f3:56:7f:
         aa:57:53:65
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Sep 15 12:10:30 2026 by rpki-client