Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1796a3ed-7ef4-423e-b33e-96466f4c42be.roa
File:                     1796a3ed-7ef4-423e-b33e-96466f4c42be.roa (raw, json)
Hash identifier:          9rD/Brqj3sr7k/5WJO63/s9QUjHCGm5pzwshWG4m0mA=
Subject key identifier:   6F:9C:20:E8:BD:82:94:3D:05:A2:26:F1:26:63:4C:B4:78:B0:23:83
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2A5E1CEC118BEBF54BAD1891C95910FB0E5FDA2D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1796a3ed-7ef4-423e-b33e-96466f4c42be.roa
Signing time:             Tue 21 Jul 2026 01:00:50 +0000
ROA not before:           Tue 21 Jul 2026 01:00:50 +0000
ROA not after:            Mon 19 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fea:6040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:5e:1c:ec:11:8b:eb:f5:4b:ad:18:91:c9:59:10:fb:0e:5f:da:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 21 01:00:50 2026 GMT
            Not After : Oct 19 23:59:59 2026 GMT
        Subject: serialNumber=96799b8982448fe2b7487ce2f09921389453bc0b9ff73275c310836bb1eeaa66, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ec:2d:f2:78:de:ef:a8:8d:05:73:90:32:79:
                    ac:41:a3:59:c5:ae:20:c9:bc:3d:11:ef:4a:4f:73:
                    81:00:df:09:2f:ef:15:be:bd:2f:45:09:84:0b:bb:
                    0f:e3:05:f2:f9:19:3a:80:6c:bb:19:d2:c0:33:d0:
                    a7:dd:26:0b:0f:5f:1e:52:2e:fb:28:de:a9:76:a3:
                    74:a7:26:c9:ea:e9:b3:16:f6:21:e9:db:49:62:ff:
                    64:e1:40:1a:92:f5:db:fa:87:50:a9:c9:f1:50:d8:
                    07:19:51:45:47:fc:dc:a4:24:b0:62:c3:cc:46:73:
                    29:3e:83:21:6d:b3:51:1c:c7:81:80:f3:c8:fb:64:
                    24:34:86:cc:ae:aa:38:2e:6e:e4:31:38:bf:97:25:
                    1e:53:4c:f5:8f:db:b7:d6:b8:87:1e:7f:53:b1:d9:
                    0d:48:c5:73:e5:57:18:6c:39:33:19:c7:82:68:28:
                    73:1e:72:a7:15:b3:92:50:e7:2d:3f:4f:c0:a8:55:
                    48:40:09:ef:d5:5e:a8:bc:3e:04:91:35:c7:2d:d7:
                    34:c3:ef:8f:51:5b:c8:db:3d:02:2a:68:8f:18:40:
                    6b:b8:5a:8c:f6:09:f3:cc:16:df:79:16:4d:67:f3:
                    ec:b7:ac:dd:53:9f:53:bd:ce:ae:00:b2:7b:ce:20:
                    a6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:9C:20:E8:BD:82:94:3D:05:A2:26:F1:26:63:4C:B4:78:B0:23:83
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1796a3ed-7ef4-423e-b33e-96466f4c42be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fea:6040::/48

    Signature Algorithm: sha256WithRSAEncryption
         20:d2:cb:85:0a:47:19:bd:b4:5e:55:12:ef:a5:f2:0a:93:2b:
         f4:76:1a:a9:c6:8b:05:7b:50:bd:c3:48:e3:1c:10:22:b7:82:
         b9:6a:1c:87:ed:c1:94:c0:90:99:88:a2:48:de:c6:5d:77:95:
         35:5c:1f:8b:e1:c2:d8:26:d1:96:b4:25:bf:3b:3f:ac:ca:6d:
         5f:50:56:81:bd:e9:cf:7f:e1:84:aa:42:2f:2f:97:01:8c:60:
         4c:22:4c:85:23:f4:27:f4:d0:32:67:8e:8f:e2:af:38:16:0b:
         b7:3e:a9:f3:a8:f3:f3:da:6a:53:6e:95:bd:d9:b9:b5:b5:34:
         a3:04:77:45:56:3d:ef:93:c4:fb:a0:d7:57:22:2c:49:32:54:
         dc:be:1a:82:e2:2a:2a:82:8c:9a:cd:69:bc:43:84:65:5b:b9:
         ef:74:84:4d:c9:36:49:6e:fa:6f:6d:2b:c4:89:5a:f5:5b:3c:
         08:e1:26:da:be:8c:5d:3e:97:86:96:47:d2:49:58:e5:6c:a2:
         b3:c7:3f:cd:af:c3:e1:69:c3:ef:4a:17:f4:e2:07:17:06:97:
         54:54:77:c7:69:9b:64:34:2f:79:35:ac:c7:6f:58:9a:d7:c1:
         c2:fe:87:df:58:e4:81:16:d1:64:0d:ba:ea:24:e2:c9:20:4c:
         65:cc:7a:43
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:31:10 2026 by rpki-client