Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c37cfee-ba64-4640-9fc9-6faaf619b439.roa
File:                     7c37cfee-ba64-4640-9fc9-6faaf619b439.roa (raw, json)
Hash identifier:          TDXuJvNyuoQBpxSJpKdqSze+/qfZ6BdBmYBapTDrc3E=
Subject key identifier:   0B:63:DF:1C:B4:53:F3:F5:90:8A:85:02:5C:28:A8:2F:93:F8:1B:E0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       75040A7EB7A4968BC9695E357693C1089C0577C4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c37cfee-ba64-4640-9fc9-6faaf619b439.roa
Signing time:             Tue 21 Jul 2026 01:01:51 +0000
ROA not before:           Tue 21 Jul 2026 01:01:51 +0000
ROA not after:            Mon 19 Oct 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1fec:5c00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:04:0a:7e:b7:a4:96:8b:c9:69:5e:35:76:93:c1:08:9c:05:77:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 21 01:01:51 2026 GMT
            Not After : Oct 19 23:59:59 2026 GMT
        Subject: serialNumber=a04deb3d3e11ea55ee2defab41617c7bdbacae79aad5b596e69a9ca0a22e7ecd, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:49:bb:8c:36:eb:19:15:c5:d4:c6:6d:0a:b3:
                    69:11:b3:64:c7:5c:0d:77:df:87:2a:4c:54:d4:27:
                    f5:e4:21:31:31:75:0e:7d:82:da:2b:88:9e:f6:78:
                    b1:5a:8b:ee:71:c9:9a:5d:9d:75:01:10:b6:0a:3e:
                    48:5c:6f:c0:26:a6:02:29:5f:9c:bd:8e:f8:ef:17:
                    68:97:66:73:58:33:0b:cb:27:b3:f0:33:7e:77:cf:
                    3b:da:9d:42:79:54:18:af:ae:d1:11:b2:58:72:f2:
                    db:86:cb:93:f3:56:f9:d1:74:29:76:41:bf:b8:67:
                    9c:1e:99:89:87:89:26:1f:53:13:f8:99:93:9e:59:
                    6f:73:40:dd:28:c3:3a:24:19:90:1d:25:d0:ca:70:
                    f8:41:19:9a:b6:f2:f5:97:ae:fc:0b:6b:d5:64:b3:
                    3e:3d:de:76:d2:0d:ec:00:d3:d9:78:66:34:29:c0:
                    4e:34:52:76:50:e1:73:01:32:8a:4f:0a:a0:25:41:
                    33:33:de:05:33:f9:49:01:c5:98:e8:34:6d:3b:d2:
                    6e:16:4e:76:50:ae:f6:13:90:52:61:ed:1a:25:71:
                    f1:eb:01:cf:0d:92:9c:39:5e:05:e1:4c:f8:35:6d:
                    c8:fd:56:7d:12:e9:ea:f3:93:c5:69:c7:8e:95:06:
                    47:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:63:DF:1C:B4:53:F3:F5:90:8A:85:02:5C:28:A8:2F:93:F8:1B:E0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c37cfee-ba64-4640-9fc9-6faaf619b439.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fec:5c00::/48

    Signature Algorithm: sha256WithRSAEncryption
         13:3e:9e:49:1b:1f:a7:8b:f1:d7:ed:e9:da:f9:fc:c5:e8:df:
         0b:52:8e:9d:f4:7a:94:aa:ac:53:63:89:0a:bf:e7:f9:f6:36:
         a0:20:72:52:e9:a7:4f:79:b8:16:2d:a2:02:95:4b:7f:82:1e:
         54:50:c3:15:f0:bb:d5:89:18:21:44:96:2d:71:0d:a9:32:1b:
         af:6e:94:ff:2e:19:6a:d2:b6:61:20:26:16:ed:0f:44:af:9c:
         7c:8b:08:02:bf:e7:77:43:c6:99:00:b0:4f:82:36:44:74:00:
         a7:2b:67:3f:15:17:b9:31:ff:de:1e:11:88:34:68:f3:35:9b:
         2f:1c:91:bd:b8:12:30:95:ad:89:f3:70:36:9c:28:2f:b4:40:
         f0:ab:2c:eb:ee:a7:81:fd:95:a8:b3:f5:b1:12:73:33:c4:84:
         29:7f:1d:7a:3c:16:8a:a9:8d:13:6f:3d:54:a9:45:9e:f5:a2:
         66:44:12:17:b4:84:f0:84:b5:1b:5e:5d:8e:aa:1d:c7:22:2b:
         c0:79:60:3e:b7:32:44:8f:db:be:8c:19:c0:b3:ef:43:8e:86:
         13:dc:88:18:ea:93:94:df:9d:85:13:24:ce:ce:71:c8:01:7d:
         b7:88:06:bc:2d:a4:e8:67:8d:fa:48:ef:9b:03:7c:d6:b4:43:
         b7:52:a7:da
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:34:48 2026 by rpki-client