Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a9c8a5b-1079-49bc-993b-528e05bd4a24.roa
File:                     4a9c8a5b-1079-49bc-993b-528e05bd4a24.roa (raw, json)
Hash identifier:          af+qxJnEy5YawjZfzK01fmWuR4X2EtJhAhbvmXDQoUQ=
Subject key identifier:   C6:B3:74:85:6B:E0:8E:C1:EA:C4:A3:6C:7A:7A:04:8F:DB:30:7F:53
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       083B93E4805994FDC284B5B054C12CBC99A0855B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a9c8a5b-1079-49bc-993b-528e05bd4a24.roa
Signing time:             Tue 21 Jul 2026 00:50:03 +0000
ROA not before:           Tue 21 Jul 2026 00:50:03 +0000
ROA not after:            Mon 19 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff2:8000::/39 maxlen: 39
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:3b:93:e4:80:59:94:fd:c2:84:b5:b0:54:c1:2c:bc:99:a0:85:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 21 00:50:03 2026 GMT
            Not After : Oct 19 23:59:59 2026 GMT
        Subject: serialNumber=3188b2b43d307c4dad56c52f1db4cbad3d921bc34ffbaa1e243c579ed8a14a92, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:82:5b:74:1e:bc:eb:f0:da:e8:5a:0d:2e:4e:
                    e3:1b:bb:47:ef:8f:d6:b3:57:65:59:0e:f3:1b:b8:
                    91:c5:65:8e:65:ca:3d:0e:8c:40:f6:b1:9e:5b:1d:
                    0d:99:f5:22:02:57:be:d1:89:8f:7f:ed:53:5b:0c:
                    49:b6:b6:fb:5f:e2:76:1f:8d:34:3d:a1:8f:ae:ea:
                    92:b2:8d:04:1a:7c:43:d9:55:a7:5a:4b:8f:97:85:
                    d5:76:7a:eb:9b:60:98:00:d8:2f:02:cf:08:76:15:
                    d9:b2:ac:ff:76:56:a7:f7:b4:7d:c6:60:46:80:29:
                    5a:7d:50:8d:c1:2f:c1:84:35:fd:2d:e7:68:52:e0:
                    50:dc:15:74:df:30:d4:c3:2c:fb:ce:bf:28:70:59:
                    e3:6f:7d:14:88:89:b7:f4:1b:88:ad:2f:4e:a3:a4:
                    26:a6:f9:61:c6:a2:2d:15:d8:0b:2f:05:b8:79:ec:
                    f4:19:8b:49:9e:85:e9:86:79:c3:54:2f:49:2a:8c:
                    76:bd:1f:17:18:9e:bf:d1:d9:8a:3d:9d:2e:3a:1c:
                    3c:71:fd:44:0e:dd:43:0d:99:bc:91:75:6f:33:b0:
                    5b:15:54:c3:6a:a0:16:f8:dc:8d:0c:88:87:9a:f6:
                    0c:ec:2f:98:79:b6:14:7d:71:dd:16:20:1c:e6:23:
                    82:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:B3:74:85:6B:E0:8E:C1:EA:C4:A3:6C:7A:7A:04:8F:DB:30:7F:53
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a9c8a5b-1079-49bc-993b-528e05bd4a24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff2:8000::/39

    Signature Algorithm: sha256WithRSAEncryption
         8e:cd:fa:f1:32:b0:6e:1b:5e:ff:21:db:fb:d8:4f:05:1e:db:
         ef:5d:a5:9c:45:f7:b2:2d:8b:fb:d4:18:d9:c9:a1:df:52:0b:
         25:c4:cf:fe:fe:b1:49:88:fc:91:ff:78:8d:02:11:92:ea:92:
         87:35:bb:ed:8c:cd:65:69:d7:75:bc:a0:77:82:c8:f0:ad:7c:
         5b:50:5b:07:ca:b8:57:94:07:1c:5f:4f:d6:47:17:77:d6:48:
         9f:2a:d6:e0:76:aa:08:ca:8a:2f:f6:f7:67:20:40:73:71:d5:
         c5:6f:f8:b3:d7:f9:0c:97:e2:4e:bc:94:6f:d9:64:47:97:c7:
         b4:7f:77:b9:3b:c9:c3:8b:1a:bd:70:ad:59:e0:4d:28:cc:77:
         96:03:d5:0a:fc:f8:3c:28:d5:9e:48:38:e9:2b:24:83:31:a5:
         31:e4:d5:b7:b3:b1:86:61:cb:f0:94:b8:fe:9b:09:fd:20:8c:
         60:4b:a9:4e:99:63:a4:df:67:4f:8a:97:7e:6a:e6:54:19:b3:
         c5:3a:65:ac:33:fa:e5:50:bc:fd:95:da:1f:cd:c1:7c:90:1f:
         9d:51:4f:db:4c:c6:d9:7f:45:c5:a9:01:9c:7c:f7:84:a5:d2:
         38:4a:e0:3c:1d:9f:99:d6:40:59:1e:66:ac:bf:9f:6a:be:23:
         16:0c:00:1c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:55:15 2026 by rpki-client