Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0330ffc3-82c7-46fb-b3d9-d918bfc7c3f1.roa
File:                     0330ffc3-82c7-46fb-b3d9-d918bfc7c3f1.roa (raw, json)
Hash identifier:          Mc+ncUJu/9t3sXof0ZCh2aw5WwKjQt5XtoqPnL3j4w4=
Subject key identifier:   5B:83:DC:48:F3:06:C4:C9:8F:3D:06:EB:C5:1A:08:F6:EB:E6:86:3F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       62A45A4A06221C1CD6B80E9E026E238A0C807F7E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0330ffc3-82c7-46fb-b3d9-d918bfc7c3f1.roa
Signing time:             Fri 24 Jul 2026 00:30:57 +0000
ROA not before:           Fri 24 Jul 2026 00:30:57 +0000
ROA not after:            Thu 22 Oct 2026 23:59:59 +0000
asID:                     8987
IP address blocks:        2600:1ff4:5000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:a4:5a:4a:06:22:1c:1c:d6:b8:0e:9e:02:6e:23:8a:0c:80:7f:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 24 00:30:57 2026 GMT
            Not After : Oct 22 23:59:59 2026 GMT
        Subject: serialNumber=da3a3e070cd882b1dff108c96d7800bab74c1f17c3fc4dc007ceaaf6ac17eeb6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a9:2e:4a:0a:c5:bf:3e:f4:a5:82:4b:5b:59:
                    77:f0:2d:e6:34:b0:83:73:15:40:d4:a2:b2:95:c8:
                    65:9b:44:0c:4d:c7:99:6b:5f:9e:a0:cd:81:b4:95:
                    29:84:8b:93:76:10:e7:e6:ee:5f:08:a0:03:5a:ce:
                    5b:07:0b:62:f7:39:52:4b:4f:c9:da:fb:48:3b:dc:
                    e6:4c:42:28:14:04:af:48:b2:7e:ea:74:3d:9c:76:
                    bc:66:14:29:47:c3:30:87:51:ae:8a:3c:68:84:a2:
                    87:96:43:e3:5a:ef:e0:0e:1b:a1:93:f3:fe:1e:30:
                    c5:e3:b7:8d:9a:4f:3b:51:7f:66:9a:f8:24:20:72:
                    4e:9d:00:93:94:99:2c:83:f1:85:b6:ff:53:57:eb:
                    d9:e6:e1:92:13:94:7e:17:05:a9:72:bd:2a:10:fd:
                    d1:07:e8:1a:13:96:b2:3e:72:3b:29:70:f4:cc:ef:
                    86:84:d4:05:46:c6:8f:df:b3:e4:52:3b:ed:53:20:
                    ea:59:12:28:41:19:3d:00:3b:26:b7:7b:08:e6:ff:
                    b0:25:31:69:a4:2d:ac:86:df:68:30:ae:2f:d2:8e:
                    f3:70:8a:f4:45:b6:ae:79:1d:cd:66:77:b9:16:0d:
                    8d:8c:51:23:fe:a1:d5:4b:6c:99:9c:c2:db:00:66:
                    88:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:83:DC:48:F3:06:C4:C9:8F:3D:06:EB:C5:1A:08:F6:EB:E6:86:3F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0330ffc3-82c7-46fb-b3d9-d918bfc7c3f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff4:5000::/40

    Signature Algorithm: sha256WithRSAEncryption
         c6:cd:f2:24:55:15:b3:e4:36:80:a3:39:2c:cf:f8:e5:b1:ef:
         a2:47:fd:1d:e1:29:c1:8b:35:a4:98:67:8d:07:d3:8b:44:90:
         56:57:84:4d:f0:74:78:0e:d5:73:82:83:35:a6:88:9d:ec:ec:
         50:79:36:6e:bd:f0:69:71:fd:62:16:11:37:12:94:ce:fe:c1:
         53:bc:6a:e5:03:e7:85:f0:3e:9a:88:d7:0f:cc:a6:f7:27:56:
         e4:70:db:29:b8:c3:e5:d9:db:be:ac:94:3c:78:43:47:38:10:
         0c:c9:56:f3:cc:d0:46:5d:14:36:fb:01:f5:a2:4c:23:bb:41:
         76:95:96:bb:9a:79:52:38:09:e9:9a:e0:4a:9e:05:a5:bb:0d:
         4c:3a:24:c3:2f:74:24:0b:7b:97:fc:b4:11:bc:05:bc:30:c0:
         8f:84:7a:74:f3:71:cb:cb:3b:fa:14:5b:28:45:cb:99:83:2e:
         75:07:02:3f:bf:63:79:be:61:13:6e:13:30:f5:c2:39:2e:54:
         d7:b2:54:d0:ea:bd:96:7e:e6:fc:d1:3c:7b:f3:1c:20:44:3c:
         a0:7a:6b:3f:ea:25:22:dd:fe:74:cd:3b:f6:b6:62:29:99:08:
         88:6d:d5:78:26:5d:6d:eb:8d:00:9c:6d:d9:1a:f1:33:5a:ee:
         f5:10:5a:fc
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:36:43 2026 by rpki-client