Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb72e7c8-ce6a-4b3e-b119-2bf8ed6b62f8.roa
File:                     eb72e7c8-ce6a-4b3e-b119-2bf8ed6b62f8.roa (raw, json)
Hash identifier:          aT+8dXWmCEcJvqhSC9/ERrFZiiQXjmZxQvkLQpF6mnQ=
Subject key identifier:   82:22:21:15:D7:5A:ED:F7:18:86:90:72:5E:D6:A8:80:C0:A5:82:20
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6C50976D52C4133E766937C8A4B82A4E6DD07A5C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb72e7c8-ce6a-4b3e-b119-2bf8ed6b62f8.roa
Signing time:             Mon 10 Aug 2026 00:41:25 +0000
ROA not before:           Mon 10 Aug 2026 00:41:25 +0000
ROA not after:            Sun 08 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fe8:ec00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:50:97:6d:52:c4:13:3e:76:69:37:c8:a4:b8:2a:4e:6d:d0:7a:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 10 00:41:25 2026 GMT
            Not After : Nov  8 23:59:59 2026 GMT
        Subject: serialNumber=fdc5cba500582ac6a080f5aaf86a099df90c2d9115d6cc6a3fcaf29b6b1ccd81, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e0:4a:9e:86:1d:a7:69:fc:0d:48:79:86:c4:
                    48:c5:84:83:c3:22:6e:50:be:da:bc:24:d6:9e:24:
                    5f:39:b4:19:56:d5:45:02:3a:be:13:da:c1:79:88:
                    f4:f6:a3:b4:91:b9:14:08:9d:b9:b4:cb:6f:a8:36:
                    cb:9a:aa:7a:fe:71:15:8d:27:68:02:9a:b4:80:7e:
                    1f:73:63:b2:b2:20:7b:f7:a3:06:d6:94:b6:0c:4a:
                    d2:b1:a6:9d:00:e2:53:d4:91:61:99:f8:88:e5:5f:
                    3b:90:f8:1c:8e:99:9b:6b:1d:bb:a9:e9:3e:30:6e:
                    6c:96:8a:ef:37:5c:c5:af:40:dd:86:36:bf:18:59:
                    f2:0e:92:60:ad:6a:4f:94:de:4a:5f:1d:ef:96:49:
                    eb:70:e9:ca:c3:e0:d8:c8:96:a4:26:b4:cf:78:03:
                    b8:65:f3:13:e9:d9:90:db:44:b1:b0:77:8a:5c:f2:
                    ce:2d:8d:cf:70:95:79:8e:32:6c:4d:1b:53:cd:f8:
                    2a:69:b5:4f:3e:d4:75:5d:87:8b:39:a6:a6:c3:85:
                    bf:f6:7f:21:13:e7:b8:73:b4:7c:c4:21:52:1d:e2:
                    17:a7:d8:04:b6:dc:98:f6:9b:7f:01:7c:d3:52:7a:
                    ca:b2:bc:e5:2b:b0:90:45:27:cb:f6:3d:29:dc:68:
                    1e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:22:21:15:D7:5A:ED:F7:18:86:90:72:5E:D6:A8:80:C0:A5:82:20
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb72e7c8-ce6a-4b3e-b119-2bf8ed6b62f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fe8:ec00::/40

    Signature Algorithm: sha256WithRSAEncryption
         99:29:d2:84:7e:6a:7e:cb:17:47:7c:b0:9a:4a:c3:38:86:ea:
         17:c6:3f:37:bb:93:98:01:a1:32:a1:7d:70:70:17:fe:35:8c:
         74:03:b4:72:49:cb:92:93:2d:c9:12:9d:11:ad:28:74:18:12:
         4c:4c:c9:be:a2:1a:ff:e1:d3:3c:ac:c8:bf:23:17:b3:2a:d8:
         6f:a4:a1:31:7b:84:8c:9f:a4:41:ac:8b:12:01:4d:d0:1d:1f:
         dd:ff:a3:d3:a4:43:32:f4:c8:43:59:a7:06:3f:05:a8:12:52:
         63:7f:07:46:90:01:c5:b5:4b:ca:8f:6a:eb:04:ac:79:c2:17:
         b0:ca:fe:2f:c9:b8:d2:91:f2:f0:14:99:cf:81:50:1c:1f:5c:
         8f:d2:0f:59:91:72:66:b5:61:d6:a4:77:c7:0a:9c:ec:cb:fb:
         39:cd:eb:56:d1:a0:63:4b:fd:59:0e:31:ca:c9:14:fd:47:49:
         c5:76:54:bd:2b:c7:40:da:35:75:cd:25:d7:54:55:0a:1b:e7:
         24:65:55:13:0d:b3:51:a6:76:35:ee:fb:cb:ae:cf:50:b7:eb:
         76:9d:39:d5:48:44:d0:d7:65:fc:e9:4b:0f:8a:09:ca:d6:94:
         e5:1e:ee:c0:03:ef:52:3b:df:fe:58:28:4b:d1:3c:13:3e:68:
         77:cf:03:e5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Sep 15 12:43:03 2026 by rpki-client