Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/36fcc0e3-3bcf-4c84-8a81-72aebbe36fc9.roa
File:                     36fcc0e3-3bcf-4c84-8a81-72aebbe36fc9.roa (raw, json)
Hash identifier:          zI0ow6MLElJquaCf+QhOoUtczBac9PyQuopXMdKO6bo=
Subject key identifier:   01:4C:BB:9B:99:AB:C5:27:73:8A:0C:ED:AF:27:FF:31:CF:04:B5:A1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       010D197A93BEFA75E178C0FBEBE446072CF4CAD5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/36fcc0e3-3bcf-4c84-8a81-72aebbe36fc9.roa
Signing time:             Tue 21 Jul 2026 00:51:17 +0000
ROA not before:           Tue 21 Jul 2026 00:51:17 +0000
ROA not after:            Mon 19 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff3:10c0::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:19:7a:93:be:fa:75:e1:78:c0:fb:eb:e4:46:07:2c:f4:ca:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 21 00:51:17 2026 GMT
            Not After : Oct 19 23:59:59 2026 GMT
        Subject: serialNumber=07a67e91fdbaa8de8061deb54b7e365a86b0d222f6b63ebe4c62d4f164b1a7fd, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c4:06:16:1c:ff:fc:fb:e3:db:4c:02:ea:63:
                    19:b5:99:cf:c2:6a:56:db:b3:73:14:96:a1:67:ae:
                    c1:67:96:63:81:87:c3:b3:89:0c:b3:c6:2c:2b:a4:
                    57:7f:c8:2f:8c:41:46:92:3a:04:ca:7c:8e:9c:a4:
                    eb:ff:5e:0b:c6:f5:5c:6c:06:bd:7b:5c:f8:8a:1e:
                    a6:0f:65:e7:96:d1:2c:50:83:40:c8:9a:da:68:a2:
                    7f:b5:16:84:b0:4f:c9:fd:4b:d9:bc:6b:f4:d8:4b:
                    ba:53:a2:cd:b6:86:f7:7e:7f:63:b0:58:e9:f3:e2:
                    d1:23:ed:0b:68:19:7f:6f:76:71:91:00:47:71:b5:
                    4c:95:71:c0:09:2c:80:ef:37:28:6c:78:ae:b5:79:
                    9e:3d:9c:53:d4:8f:43:74:38:77:0e:7c:0b:32:29:
                    f3:5c:d9:86:82:82:4a:3a:c4:bd:d4:6d:9e:0b:a9:
                    32:42:43:bd:77:4f:9d:2f:09:90:44:d9:0b:21:9b:
                    25:11:03:2a:85:a9:73:f5:32:0d:92:68:f3:c7:8d:
                    5b:f0:bf:18:77:35:48:0f:8e:4c:c4:d0:6a:f6:62:
                    b2:f9:7c:55:51:a3:95:0d:f7:18:2b:a5:03:1a:3c:
                    bf:e6:27:a7:ee:47:39:11:65:44:b6:75:c2:96:b6:
                    58:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:4C:BB:9B:99:AB:C5:27:73:8A:0C:ED:AF:27:FF:31:CF:04:B5:A1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/36fcc0e3-3bcf-4c84-8a81-72aebbe36fc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff3:10c0::/46

    Signature Algorithm: sha256WithRSAEncryption
         69:fe:4d:2c:3f:14:af:c0:33:e0:a7:8b:a1:01:43:60:11:c2:
         04:3e:43:de:df:6c:40:af:46:57:27:45:a2:4c:ca:e0:3b:c0:
         3d:45:b0:27:38:b5:8e:84:bb:96:50:92:43:e0:56:2b:48:7c:
         34:71:7e:ae:8b:0c:16:3e:7b:62:49:de:53:96:13:72:77:d7:
         c5:e9:51:b9:1a:2f:c2:67:c9:7f:31:b4:8d:f8:7e:bb:19:8c:
         b7:56:31:1b:5f:cf:fc:ca:b8:21:b4:84:a8:4d:9d:59:9c:3c:
         f4:e0:1e:45:c1:0b:bb:c2:94:d8:69:19:b6:57:6b:32:ad:74:
         90:ae:e8:a4:a8:1c:af:0b:bd:02:1f:57:44:7a:3b:7c:73:b1:
         2e:74:8f:6e:b4:25:9b:e9:b4:1c:ef:66:0d:42:25:5e:76:89:
         54:84:f0:12:42:50:e7:47:e1:85:92:ef:b4:49:e0:90:58:8b:
         76:57:b1:8b:b9:ce:66:a0:16:cf:aa:7a:05:76:14:8b:82:36:
         39:32:8b:a8:94:d0:d2:d1:01:2b:3a:ec:04:7a:17:2a:78:7c:
         b6:9a:cd:02:e4:d7:8f:94:28:4e:1b:09:9e:29:70:32:7e:4b:
         25:80:04:1f:5f:c9:05:13:c9:dd:16:aa:1f:84:c5:82:0a:6e:
         73:0b:0c:bf
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:48:37 2026 by rpki-client