Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ff5c6ef7-2939-4c2d-9e40-79bb7585ba4b.roa
File:                     ff5c6ef7-2939-4c2d-9e40-79bb7585ba4b.roa (raw, json)
Hash identifier:          rpLk92ycDZpmSsUucB4wQyqPpk3fwxJ1Hm6S1n5U6IQ=
Subject key identifier:   43:5B:73:58:01:FD:0C:CC:6E:3D:D3:16:6D:ED:1E:C2:18:5A:43:9A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3E51C70FD9EBE1205C859A1775EC66F0B0111A90
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ff5c6ef7-2939-4c2d-9e40-79bb7585ba4b.roa
Signing time:             Thu 10 Sep 2026 00:20:46 +0000
ROA not before:           Thu 10 Sep 2026 00:20:46 +0000
ROA not after:            Wed 09 Dec 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff3:3400::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:51:c7:0f:d9:eb:e1:20:5c:85:9a:17:75:ec:66:f0:b0:11:1a:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 10 00:20:46 2026 GMT
            Not After : Dec  9 23:59:59 2026 GMT
        Subject: serialNumber=c4e65b6bcb1fa012c3f72e9b423358fde3f2e72b57d82cdb5de282d8f9b42e9f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:7f:db:60:ed:8a:bd:c4:11:b0:b7:12:5c:f9:
                    82:11:4a:89:89:a0:16:82:78:b5:52:81:a3:3a:d5:
                    a5:5f:7b:1f:48:c9:11:41:7b:bd:13:f9:be:dd:fe:
                    fe:5c:b6:70:b2:14:c6:39:39:dd:22:85:41:39:26:
                    b1:e5:44:1e:de:fa:d7:eb:4d:9f:a4:f7:20:bb:63:
                    89:1f:d4:9b:a1:18:0c:42:ea:b3:52:9d:e4:b4:4f:
                    ee:a6:3b:30:3c:26:4a:92:38:fa:78:37:dd:46:45:
                    65:b9:95:59:86:88:93:88:bd:e1:be:7a:fd:95:79:
                    00:a2:91:a4:8a:96:1a:30:78:d1:41:26:80:6d:80:
                    a0:40:85:4e:7c:78:d6:3d:a5:16:01:2f:88:b7:59:
                    e1:50:40:78:8e:f3:8a:bf:c4:08:da:1a:51:bd:a4:
                    12:95:82:d3:28:75:54:59:b1:de:53:ea:cd:3e:4e:
                    bb:e9:69:ed:6f:df:c2:71:64:be:82:4b:8e:17:d7:
                    1e:8e:76:ca:7b:27:cc:4c:dd:c4:37:9f:ec:9d:ec:
                    37:4a:40:a2:ab:4d:b3:8d:90:21:a1:18:dd:7d:7d:
                    c1:d4:30:24:ce:4c:a8:d2:82:dd:b1:61:c5:ce:f3:
                    ed:88:1d:3b:ac:e6:4f:ee:b5:82:7f:cb:97:8a:57:
                    b7:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:5B:73:58:01:FD:0C:CC:6E:3D:D3:16:6D:ED:1E:C2:18:5A:43:9A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ff5c6ef7-2939-4c2d-9e40-79bb7585ba4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff3:3400::/40

    Signature Algorithm: sha256WithRSAEncryption
         62:34:0c:f4:2a:ec:ae:c3:ca:7f:44:b6:0d:45:95:ec:8b:18:
         5f:c6:d3:0d:a3:ff:5a:23:3b:6d:32:15:24:23:d8:b6:48:6b:
         21:46:9d:cf:36:63:8d:3c:19:19:5b:85:95:ff:89:eb:54:46:
         92:68:18:68:b5:41:0d:93:e0:fc:b7:d1:62:6a:2a:37:8a:1d:
         9c:30:b5:e6:fa:46:7d:5c:f1:c4:da:f0:fc:b7:bb:07:ba:77:
         05:d3:ab:9b:03:9d:9c:98:c3:5f:f1:3e:54:03:1c:ee:6b:12:
         db:8f:f6:39:2f:94:19:66:75:fa:d4:6e:1e:57:5d:f5:03:05:
         b9:df:cf:03:74:d0:01:45:34:17:8d:e9:84:ba:99:44:c2:75:
         2d:69:a6:ac:c4:6e:e0:cc:62:b4:75:ff:80:31:7e:ad:e9:78:
         b8:98:9d:7d:12:42:77:7a:46:15:0b:5b:e0:9a:93:50:01:3a:
         0f:4b:eb:dd:98:c2:45:40:1d:e0:dc:60:fb:49:9f:09:ac:db:
         ab:fe:fe:d9:5c:3c:7d:d9:da:d3:da:2a:95:3c:69:ce:cb:5e:
         67:4b:43:67:8d:b6:39:1e:b8:64:e2:a4:03:7a:f7:fc:62:00:
         7e:74:02:85:30:f8:90:72:d1:c7:3c:92:0b:01:53:f6:67:c5:
         dc:7b:9d:5e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Sep 15 13:20:51 2026 by rpki-client