Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79f8c443-fc41-4935-8539-a3e686ebd0b2.roa
File:                     79f8c443-fc41-4935-8539-a3e686ebd0b2.roa (raw, json)
Hash identifier:          p5c1EoWXqVPHdnoLuWuxvBwLZh9wMvsR2GFVioJzahc=
Subject key identifier:   FA:19:C7:22:CF:3E:4C:1D:EB:97:4C:DD:9F:C7:AF:4C:64:99:A7:0E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       46E6E458C442A2C428CBB115E5AE18095CE3BD47
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79f8c443-fc41-4935-8539-a3e686ebd0b2.roa
Signing time:             Mon 22 Jun 2026 00:21:05 +0000
ROA not before:           Mon 22 Jun 2026 00:21:05 +0000
ROA not after:            Sun 20 Sep 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1feb:7400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:e6:e4:58:c4:42:a2:c4:28:cb:b1:15:e5:ae:18:09:5c:e3:bd:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 22 00:21:05 2026 GMT
            Not After : Sep 20 23:59:59 2026 GMT
        Subject: serialNumber=d65a16d894a56f674b92cd546ea6b838a62a87ab9f1b67883215cff853537a2d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:49:b0:83:c9:b0:e3:ba:19:51:bd:a7:79:ea:
                    21:58:57:b2:04:16:db:09:2b:98:78:e0:aa:fe:4e:
                    af:30:5d:de:ff:4c:8b:49:8d:c1:48:7f:3e:37:df:
                    dc:89:bc:36:24:52:cf:00:23:1e:24:7d:66:25:02:
                    d2:43:85:3c:06:10:f1:27:ad:e7:21:c8:48:88:7e:
                    9e:32:6c:6f:e2:30:0a:88:ab:be:7b:90:5a:4c:c4:
                    7b:70:b4:76:07:33:19:47:7a:9c:a2:b5:2c:35:7a:
                    70:c5:23:ee:c4:83:37:01:8c:da:d3:83:e7:71:3f:
                    45:fc:51:82:91:5d:e7:64:75:03:27:03:65:19:d6:
                    73:23:9b:c2:5d:08:aa:2a:17:15:35:f6:f6:2b:f3:
                    39:90:ca:0b:31:65:6e:f8:15:f7:2f:a0:38:dc:0b:
                    81:de:51:e0:af:ce:5f:a4:35:b3:c5:8a:5f:cb:3b:
                    dc:16:e8:ad:c1:5a:40:e5:ce:6f:7d:53:b0:c4:38:
                    bd:ec:76:a6:21:2c:8f:46:d7:30:15:17:42:7d:6e:
                    08:ac:3b:4a:54:87:b8:39:45:8a:31:bf:b2:e1:fa:
                    21:9b:60:8a:68:95:33:bb:73:d2:ff:18:3e:16:71:
                    41:7f:a3:69:b5:d3:82:64:7a:91:75:2c:f5:64:12:
                    3a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:19:C7:22:CF:3E:4C:1D:EB:97:4C:DD:9F:C7:AF:4C:64:99:A7:0E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79f8c443-fc41-4935-8539-a3e686ebd0b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1feb:7400::/40

    Signature Algorithm: sha256WithRSAEncryption
         49:1c:a1:b1:d4:01:6c:ae:a1:38:5f:77:6f:ae:78:26:cf:d6:
         c1:01:1e:1e:92:61:36:97:9b:0a:9f:73:ec:65:32:70:13:43:
         bb:59:73:5f:df:4c:b4:73:a6:93:dd:0a:de:c2:23:d8:b8:da:
         ed:be:b0:49:1d:c8:29:f6:42:ae:0c:a7:60:9b:2d:30:85:07:
         8e:1a:98:ee:e8:25:26:34:e5:dc:8a:d0:67:e6:76:af:ad:aa:
         b8:02:49:75:ed:f7:7f:e8:31:d3:c3:de:6c:4c:c6:9d:a8:c1:
         1f:3f:e6:c9:5f:12:49:71:b7:55:63:51:87:4b:c4:a4:ec:ab:
         02:0f:ce:ed:20:fa:46:0c:d2:22:1e:0d:06:7e:35:de:6c:ac:
         cc:76:4a:32:94:d6:80:50:c9:8b:5a:4c:a5:48:8d:0d:87:43:
         b5:84:42:ea:34:c2:2c:6c:a2:23:cf:89:e2:19:89:97:ff:78:
         d4:5f:8a:d9:a6:1a:ca:ae:f6:21:c2:42:50:6b:46:62:a6:31:
         71:e4:5b:32:31:a2:5c:30:b4:e6:32:9e:fd:ab:29:59:34:b9:
         1f:1f:8b:89:0a:7e:e8:55:cc:34:5c:1f:95:4f:d1:d4:a5:ff:
         90:0c:71:3a:72:47:59:d0:89:42:2a:40:3b:47:21:7a:07:69:
         c2:d1:01:f4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:33:42 2026 by rpki-client