Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3850c479-4d9d-4ed3-a0ac-ffb91dd85878.roa
File:                     3850c479-4d9d-4ed3-a0ac-ffb91dd85878.roa (raw, json)
Hash identifier:          xXv9tj1UVWtI6YSKkKjn5UuKK4rMiJWdeciLFsG0AsQ=
Subject key identifier:   A7:88:F3:58:EF:3A:D5:FD:13:4B:57:E9:D3:E0:FC:70:E4:C9:BB:C2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       64F952D20C38E1AD8E76ABED3C6A9470838820FC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3850c479-4d9d-4ed3-a0ac-ffb91dd85878.roa
Signing time:             Mon 20 Jul 2026 00:51:12 +0000
ROA not before:           Mon 20 Jul 2026 00:51:12 +0000
ROA not after:            Sun 18 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f1e:c400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:f9:52:d2:0c:38:e1:ad:8e:76:ab:ed:3c:6a:94:70:83:88:20:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 20 00:51:12 2026 GMT
            Not After : Oct 18 23:59:59 2026 GMT
        Subject: serialNumber=30da6a6ce0982a2a342ab7d36b97afe98107e10c1b887ab97e85b123c481e9a6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:25:d2:c8:76:d9:f5:17:af:70:76:f4:7d:7a:
                    68:88:a9:c5:65:ab:b9:3d:4a:38:70:c0:13:7a:23:
                    d5:f9:4e:2c:a3:4d:6a:8c:aa:c8:f0:da:a3:ff:b8:
                    7a:0c:6a:a7:5d:4d:90:f5:7b:7b:fe:31:a2:f4:18:
                    be:b5:33:90:c0:b6:67:21:cf:91:45:63:26:d3:6c:
                    61:57:87:95:7d:25:49:19:aa:d8:57:d0:e8:91:53:
                    e5:dd:4b:2a:41:72:62:78:f6:3f:3a:47:19:f4:76:
                    a1:99:ab:65:5e:c2:ae:d3:f1:2c:ce:94:c9:60:bb:
                    37:5b:b7:22:4c:78:bc:12:de:f2:98:1a:ed:6a:6e:
                    43:98:73:8f:5b:fc:32:a0:55:47:a7:2a:33:c0:1d:
                    ec:32:d1:a6:55:88:78:d0:22:e1:59:cb:e6:4e:82:
                    a8:2c:f0:2e:65:2f:5d:20:fe:9f:c6:ce:d0:22:bd:
                    c0:bd:5b:6e:6c:00:63:3e:24:78:60:a3:f4:25:ab:
                    eb:ee:4c:24:b7:c9:f2:2b:f8:de:13:34:89:73:d8:
                    8b:43:9a:a2:ec:38:03:1d:d0:52:98:e0:27:dc:80:
                    24:37:38:8f:72:c9:59:ac:9c:10:87:7f:67:70:43:
                    e9:0b:77:bc:d8:f3:49:1a:d5:0a:e3:3b:31:b2:44:
                    1c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:88:F3:58:EF:3A:D5:FD:13:4B:57:E9:D3:E0:FC:70:E4:C9:BB:C2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3850c479-4d9d-4ed3-a0ac-ffb91dd85878.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f1e:c400::/38

    Signature Algorithm: sha256WithRSAEncryption
         94:71:b5:3a:08:20:fd:67:30:35:40:b9:4a:f1:91:29:e1:21:
         5f:6f:fb:4c:e1:f9:74:8f:00:ae:cd:8b:d6:d6:30:e6:b5:33:
         09:53:11:ce:a3:f7:3d:e5:10:c9:2e:ee:1f:f1:c5:0d:95:33:
         e9:4f:71:40:76:13:e1:ed:64:5d:38:ba:c8:62:78:53:6e:7f:
         5d:b2:20:7b:8b:75:a7:4a:44:c7:31:93:7d:5d:1d:27:bb:47:
         bf:57:22:4b:1a:9d:51:1d:0f:c4:c3:8e:df:4c:5d:19:a6:87:
         ee:74:29:e7:0a:57:ab:a7:cb:e8:67:ac:30:7a:d2:c1:1c:6a:
         77:9f:93:48:42:57:64:6f:d7:f7:7d:e6:fb:bc:07:4d:db:9e:
         d9:fc:b2:f9:2c:e4:8c:6a:d0:76:22:9b:d0:6f:8c:2a:1e:77:
         93:cb:a1:54:a6:d6:d0:18:b5:4a:e4:36:da:ac:c6:1a:1e:b6:
         b6:07:59:51:a1:9e:ed:45:a1:07:eb:f1:5c:09:63:50:96:ba:
         58:28:1d:ee:9b:fb:39:a0:bb:16:7d:cb:c9:c5:8c:ca:4a:64:
         f8:38:53:56:03:03:bd:11:a3:61:01:ea:17:b4:8c:d9:e1:99:
         bf:aa:6b:03:20:fb:6f:46:3c:58:86:76:bc:5b:75:db:91:b6:
         dd:db:54:70
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:15:35 2026 by rpki-client