Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3158624f-2713-4649-b6a7-25d17c953273.roa
File:                     3158624f-2713-4649-b6a7-25d17c953273.roa (raw, json)
Hash identifier:          E7QqjZYWXxvhTrTY3JWuBDGJeOAQx1KkYEXFFrr8Y/g=
Subject key identifier:   28:7C:DF:8C:33:8F:93:EF:04:FD:53:E9:BB:57:B4:3C:EF:62:86:2A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7778729CD521753FF0882F45D10576A7CEFC73BF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3158624f-2713-4649-b6a7-25d17c953273.roa
Signing time:             Sat 18 Jul 2026 00:20:03 +0000
ROA not before:           Sat 18 Jul 2026 00:20:03 +0000
ROA not after:            Fri 16 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f2b:8000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:78:72:9c:d5:21:75:3f:f0:88:2f:45:d1:05:76:a7:ce:fc:73:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 18 00:20:03 2026 GMT
            Not After : Oct 16 23:59:59 2026 GMT
        Subject: serialNumber=7ed3720b1d95711671ae340b06325bc18e031417e6a9edd63baa1ddf9334d158, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:6b:52:2f:ba:4f:bb:58:bf:99:b0:0c:f6:34:
                    78:2c:df:a5:a0:85:f3:02:7f:1c:c4:84:31:0e:ca:
                    25:11:52:b3:69:8b:8b:ea:09:ca:2a:64:06:2d:98:
                    4d:c2:07:28:d0:ce:b3:38:99:be:d5:ff:01:1b:86:
                    13:1b:da:d3:1f:d5:f2:8e:b9:cb:62:0e:c9:4b:37:
                    a5:e5:e4:0f:c4:34:53:d7:00:d4:65:df:6d:16:05:
                    29:d7:58:27:48:d8:0e:c6:a1:f1:7d:c0:14:e4:c9:
                    f6:da:29:de:93:b8:4d:ff:71:15:6b:94:f0:86:db:
                    90:4c:b2:12:a7:8a:5d:61:bf:50:e6:87:8f:94:aa:
                    3f:76:e1:6c:61:e2:52:97:21:c6:33:b1:25:ab:f8:
                    35:a3:a6:4f:79:6a:93:a6:2f:d9:9e:08:eb:bb:41:
                    73:77:32:68:79:bc:88:2d:e8:48:b8:f3:ec:a0:fa:
                    b2:29:e2:f1:5c:39:48:4c:38:f8:c6:32:d0:5e:e3:
                    72:17:53:84:fa:cb:6f:eb:7e:cc:9f:2c:74:bf:87:
                    24:50:c9:02:69:80:21:77:e3:66:43:d4:8b:e0:df:
                    0f:b3:26:03:cd:86:c2:3e:64:50:3a:40:81:d5:74:
                    59:64:24:f1:2a:79:81:84:4b:c5:33:1a:d5:3c:02:
                    eb:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:7C:DF:8C:33:8F:93:EF:04:FD:53:E9:BB:57:B4:3C:EF:62:86:2A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3158624f-2713-4649-b6a7-25d17c953273.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f2b:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         cb:6d:bd:19:11:48:76:9a:72:55:1b:02:38:e7:fc:7b:f2:86:
         14:89:53:7e:10:4c:d7:ec:68:d6:9f:95:17:7b:dd:6f:80:68:
         ef:f3:10:56:82:83:32:93:c1:ab:b5:9c:9e:54:64:04:f0:96:
         80:15:98:e2:f1:9b:1b:98:aa:9a:03:8f:27:c6:63:d0:f8:df:
         d0:8f:65:f8:9b:8a:39:27:2e:dc:b7:85:1c:66:ff:28:18:98:
         bb:95:8d:be:68:02:c7:91:ae:07:ba:35:90:a8:3c:59:6e:66:
         88:4c:d4:79:51:7f:8b:57:94:cd:c2:20:f8:ac:94:15:90:1e:
         e4:e8:37:4c:f3:85:0a:88:6e:66:d8:70:bd:48:0e:ce:c9:8b:
         23:7c:52:c1:34:e4:24:22:2c:79:de:27:85:90:7a:f4:76:39:
         c3:46:a6:86:8d:30:77:a4:3b:df:69:50:d5:89:31:d2:c8:e9:
         75:73:20:85:8e:86:6c:71:c7:db:f2:9c:92:39:26:b7:89:78:
         6f:d3:ed:24:96:f1:f7:7f:8a:04:15:59:96:41:92:ce:31:4d:
         0d:45:08:cd:95:64:82:c1:bd:ec:fe:5c:0f:f4:ee:5c:1a:70:
         18:cc:a1:0e:88:15:d1:91:bb:0d:8b:2d:53:99:30:d0:6e:df:
         85:82:c2:d8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:45:20 2026 by rpki-client