Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/026d9e0e-e9f3-4245-8184-2f5a17b3204e.roa
File:                     026d9e0e-e9f3-4245-8184-2f5a17b3204e.roa (raw, json)
Hash identifier:          czbVq/wyoFstKz9lf3Gk4Gp1JLREdjng50ugQJliIo4=
Subject key identifier:   24:07:46:AC:FF:3B:1B:BC:30:EA:69:69:1E:12:37:6D:E9:67:64:84
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       62CAA702286031640B8E958A91CA676BBC5F7E49
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/026d9e0e-e9f3-4245-8184-2f5a17b3204e.roa
Signing time:             Mon 20 Jul 2026 00:21:04 +0000
ROA not before:           Mon 20 Jul 2026 00:21:04 +0000
ROA not after:            Sun 18 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f32:e000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:ca:a7:02:28:60:31:64:0b:8e:95:8a:91:ca:67:6b:bc:5f:7e:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 20 00:21:04 2026 GMT
            Not After : Oct 18 23:59:59 2026 GMT
        Subject: serialNumber=c2565ace242a7a2bb3a404840f6c4bcea5fc26d5fe0c9481af7b53cf60243f21, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d7:f1:9d:1b:42:30:3f:ef:9c:ae:cb:60:9c:
                    a4:eb:54:e0:16:b6:b7:7d:00:61:7b:83:2e:84:3e:
                    65:f1:4c:cc:b8:89:b4:02:1c:37:fa:6d:af:db:54:
                    42:32:ed:9c:61:11:93:e1:1d:23:f2:2e:d2:b6:bc:
                    01:1e:33:10:61:f5:34:0f:44:c5:3d:1a:36:9d:3b:
                    41:72:d0:3c:7b:10:ad:83:07:15:44:5b:8b:2a:ac:
                    61:dc:8f:f8:af:21:d1:a1:b6:70:b6:bc:53:f4:e2:
                    16:b6:ce:d7:e7:db:2e:3d:5b:5d:de:71:ad:8f:4b:
                    6b:85:c3:e3:d0:a3:24:09:64:68:2b:80:17:de:61:
                    17:e5:5c:a9:91:8f:9f:1e:67:fe:f5:21:77:7a:59:
                    72:de:e0:f0:5f:d9:c3:c1:f0:4f:33:75:5a:bb:ed:
                    d2:98:2d:3c:70:1c:db:63:9f:16:f2:dd:ff:79:91:
                    00:44:59:ae:3f:10:f3:37:a8:34:a5:00:d9:77:e9:
                    e1:f8:6e:d9:de:ee:64:a8:d3:56:38:92:ac:bd:73:
                    5d:bc:f9:4c:73:be:18:43:7f:55:39:b8:7f:87:4e:
                    aa:55:b9:cd:2c:80:7d:e3:0d:6e:96:d1:33:a8:9c:
                    7b:84:b2:55:ad:c4:87:fd:91:8f:6d:70:62:b0:2b:
                    bd:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:07:46:AC:FF:3B:1B:BC:30:EA:69:69:1E:12:37:6D:E9:67:64:84
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/026d9e0e-e9f3-4245-8184-2f5a17b3204e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f32:e000::/40

    Signature Algorithm: sha256WithRSAEncryption
         90:bf:d1:5b:05:94:59:25:07:71:1a:b4:a7:dc:8f:7e:59:27:
         1a:b5:64:fa:79:64:17:e3:51:b8:ca:f8:a5:d6:22:9b:92:72:
         2b:e7:25:20:19:7b:21:7f:14:1e:f6:28:50:80:4b:c4:e8:7e:
         53:e3:80:6b:90:9b:3f:55:82:40:70:8c:39:0e:52:10:68:f6:
         44:b8:dd:d3:72:96:ee:e4:da:85:94:5c:f7:1c:33:8a:28:4b:
         e4:c1:95:d0:63:b5:bc:25:4b:76:03:bf:ab:ad:7f:89:b0:0c:
         34:f9:ab:a9:4e:cb:5f:84:69:da:1a:1a:b0:b6:18:51:18:a0:
         cf:e4:4b:18:3a:3e:97:a2:5c:15:89:ac:24:af:32:88:01:d4:
         c9:60:15:24:3a:b5:a5:35:78:1b:0c:72:a7:fc:28:9e:18:1d:
         66:6f:52:35:8c:5e:85:b2:4a:5e:2d:a8:75:55:81:80:d2:3b:
         4f:7d:65:0d:4a:de:0a:40:5a:e9:f6:5f:5a:03:3e:90:e4:23:
         20:fa:bf:7a:62:ff:f8:87:ac:69:ad:de:db:99:5e:fd:9e:ee:
         1a:02:e0:52:9e:70:b2:80:3a:e6:f1:3a:b3:db:89:86:f8:c2:
         b6:65:aa:fe:0b:46:be:c8:d8:e9:96:ff:9f:8a:3d:91:24:d9:
         55:cb:29:26
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:48:27 2026 by rpki-client