Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f13c765a-2620-4adf-afc8-71c523da0fe2.roa
File:                     f13c765a-2620-4adf-afc8-71c523da0fe2.roa (raw, json)
Hash identifier:          M4FKmvTW2K3S+dt0E08oK0VNPEoWfBGrLDRg26eGvcg=
Subject key identifier:   93:B1:87:2A:81:85:88:07:8E:0E:39:20:36:6B:EB:D2:29:9E:82:73
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       37547C1E56AE083E38109D27B7B02A126A61D365
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f13c765a-2620-4adf-afc8-71c523da0fe2.roa
Signing time:             Fri 31 Jul 2026 01:31:18 +0000
ROA not before:           Fri 31 Jul 2026 01:31:18 +0000
ROA not after:            Thu 29 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff7::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:54:7c:1e:56:ae:08:3e:38:10:9d:27:b7:b0:2a:12:6a:61:d3:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 31 01:31:18 2026 GMT
            Not After : Oct 29 23:59:59 2026 GMT
        Subject: serialNumber=76c16f52381ab38724c7440430137c44cc3e3304c44bc1f2c5492be47a3f6681, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:09:6b:29:3e:7e:f7:2a:e4:e3:02:e6:96:18:
                    a7:ce:56:22:7a:d3:eb:c3:27:99:d9:91:33:eb:14:
                    77:3e:d7:2d:91:9b:14:26:7e:af:88:35:6b:f5:be:
                    b0:4b:21:d5:37:f2:ef:af:ac:27:27:07:2a:28:1d:
                    37:0f:7d:f1:dc:68:52:ec:53:8d:4a:b9:e7:68:bc:
                    e5:4c:02:12:a8:69:bc:17:3f:28:13:c6:3d:ee:9f:
                    f2:82:fd:2c:fc:64:79:33:4a:3f:51:6b:d5:fc:d7:
                    60:10:7e:eb:78:04:be:b7:14:3f:00:04:c6:0b:0d:
                    8f:d5:f0:c9:08:32:58:2d:2f:d2:87:cc:83:2f:5d:
                    b2:45:42:5d:57:6c:9c:bc:29:2f:2e:b0:12:34:36:
                    f4:93:0f:e7:69:4a:3f:30:e6:f7:8a:55:ce:dd:fe:
                    a4:18:fe:23:fc:d0:83:2f:ad:16:36:f0:a0:41:1d:
                    37:78:05:7c:51:9e:c9:16:06:c1:11:d6:0b:99:a2:
                    6b:ab:bd:5d:4a:dd:b6:88:af:ea:c6:cc:f9:10:d7:
                    4f:bc:e2:98:92:76:f9:13:10:d9:f3:02:ff:53:7c:
                    aa:b5:80:9f:76:83:c1:ab:3b:e4:8d:50:04:62:41:
                    95:47:95:58:9c:1a:c6:f5:10:49:43:ae:80:ba:5e:
                    1e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:B1:87:2A:81:85:88:07:8E:0E:39:20:36:6B:EB:D2:29:9E:82:73
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f13c765a-2620-4adf-afc8-71c523da0fe2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff7::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:ef:6c:e7:9b:a4:9f:fe:2c:a2:a9:ee:c4:c0:c9:d5:ce:df:
         d9:0c:3f:d6:22:f4:af:9a:3e:6e:40:f8:2f:1b:70:46:ec:ab:
         ba:ce:06:d6:32:b8:1b:6d:38:5d:a3:d7:47:b3:a2:f7:09:1f:
         2d:c4:9d:16:19:c5:1f:30:18:52:d2:20:8c:cf:30:8a:52:f9:
         43:a0:9e:cc:35:ec:d5:83:53:89:6d:14:1c:da:90:69:dc:92:
         5c:0c:de:32:59:c2:68:57:38:27:80:0f:81:83:06:49:84:7c:
         7b:16:d4:78:c0:2d:91:36:c3:1a:05:e0:1e:bf:54:db:60:bc:
         5c:ae:e7:f3:4b:57:55:7e:24:44:f9:95:52:2e:fd:78:81:50:
         7f:f8:3c:49:88:b0:03:37:4f:f3:b7:86:84:26:70:d9:59:58:
         31:98:f5:b1:8c:4e:00:7e:4a:05:07:70:13:4c:0a:ee:1c:3f:
         9d:69:ad:37:99:c2:52:3f:60:ab:b2:ab:f0:56:28:89:86:5a:
         5d:88:60:48:02:c9:64:1a:24:75:48:d6:57:ce:8d:28:f9:ad:
         e0:88:db:de:b2:a0:24:1b:38:22:16:de:ee:0f:1d:6b:1e:62:
         12:e8:3a:29:06:e0:6e:27:7c:6b:67:62:6f:e8:a4:f0:ad:c0:
         15:1c:3f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 13:22:27 2026 by rpki-client