Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ea9d99e8-8fba-4e4c-9f46-30f1b3ba9821.roa
File:                     ea9d99e8-8fba-4e4c-9f46-30f1b3ba9821.roa (raw, json)
Hash identifier:          M1KKZkgYT2xZ8wAI9kqwT/6y+yoeRfPQju5bS+2sxRg=
Subject key identifier:   67:58:91:1E:E5:EA:97:10:BF:9E:07:67:79:75:E4:27:E6:01:B9:05
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       789AEFB0398218A110989A73B966DB1D10E4F375
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ea9d99e8-8fba-4e4c-9f46-30f1b3ba9821.roa
Signing time:             Tue 04 Aug 2026 01:51:20 +0000
ROA not before:           Tue 04 Aug 2026 01:51:20 +0000
ROA not after:            Mon 02 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f2e:4000::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:9a:ef:b0:39:82:18:a1:10:98:9a:73:b9:66:db:1d:10:e4:f3:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  4 01:51:20 2026 GMT
            Not After : Nov  2 23:59:59 2026 GMT
        Subject: serialNumber=947396e544e484bb2be65358158e57dc01ccdee8161f6de5614e6871aaa6df4f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:26:60:0f:1e:e1:16:44:c2:2d:63:f4:8a:6b:
                    96:cf:1c:fe:38:15:72:3a:a9:4e:d4:32:52:75:c4:
                    78:c0:b8:f7:9e:34:0e:55:b2:b6:78:4b:8f:15:7e:
                    82:3c:c3:88:1c:1c:09:31:88:33:ac:7c:1c:cd:19:
                    6b:2d:f4:99:25:18:cb:a8:ff:c1:95:fb:43:ba:77:
                    a7:b3:3f:39:55:92:50:ea:ac:63:ba:7a:79:e6:c3:
                    01:9e:67:48:5c:e5:df:19:55:7b:7c:6a:f0:d7:75:
                    a6:5e:89:65:6d:7f:5b:58:fa:04:7b:aa:0e:c5:05:
                    5e:d7:f0:55:f9:97:8d:7b:7d:b7:eb:4e:f6:a3:15:
                    94:0d:4b:48:ba:92:af:18:a0:16:62:8c:0a:a0:84:
                    4f:73:59:34:af:e1:ae:1a:8e:82:a2:09:89:62:44:
                    0a:c9:02:d2:52:3a:03:18:d3:3c:09:90:2d:e7:bb:
                    a8:fe:66:52:e1:cc:cb:ef:d0:ea:bd:d6:d3:fa:6c:
                    d1:99:ed:4b:94:1c:cc:f1:22:41:6e:e3:07:e4:12:
                    4b:ff:f9:c4:d6:d1:2a:9b:40:55:c3:37:66:6d:61:
                    c8:b0:1c:d0:e2:66:7b:a5:2d:a0:45:80:9b:ca:27:
                    d2:99:41:72:87:7a:e8:38:3e:cd:2a:74:aa:85:11:
                    f9:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:58:91:1E:E5:EA:97:10:BF:9E:07:67:79:75:E4:27:E6:01:B9:05
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ea9d99e8-8fba-4e4c-9f46-30f1b3ba9821.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f2e:4000::/37

    Signature Algorithm: sha256WithRSAEncryption
         09:c3:4d:42:40:7b:9e:dc:d8:c1:a3:5a:86:60:d1:ba:15:06:
         5e:19:03:ed:88:08:6f:42:0e:35:d7:f8:b4:97:f3:93:5e:4c:
         69:85:72:1c:fc:b9:3c:4f:81:f5:8f:55:da:f4:7e:42:af:ed:
         ba:c5:71:1b:4f:b5:e5:8d:88:db:a9:14:21:f1:8b:b8:65:d3:
         b4:98:de:22:34:39:3d:df:c0:95:92:6b:11:d6:39:f0:57:30:
         06:ad:47:54:13:a2:02:20:a7:f6:0c:a3:83:64:11:b7:1b:2c:
         ba:71:cb:34:43:ea:ee:28:90:7e:f7:5c:b5:16:b2:7f:21:1d:
         13:af:28:d3:4c:c1:36:e3:a5:74:38:6b:a8:2c:f5:e8:06:d0:
         bb:bf:ee:2b:60:3e:7d:eb:30:43:70:8c:53:91:ee:ea:36:df:
         00:06:0a:da:42:0b:06:9c:3b:12:17:87:40:ee:02:80:7a:94:
         1f:66:bb:45:51:c9:45:ef:df:33:86:66:2a:c7:37:1c:9e:8c:
         a1:e2:62:fe:7c:85:62:f2:0b:e8:c9:e8:00:99:be:d2:b2:e7:
         72:3f:4d:12:e6:a1:50:71:fe:39:43:2e:f6:85:28:f7:ca:d5:
         9f:6d:00:ef:a9:a4:0e:55:80:47:5d:a6:e9:70:76:32:a4:48:
         0b:df:90:c2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Sep 15 11:01:49 2026 by rpki-client