Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b3dfc886-fa69-4258-8ded-784e425ab84e.roa
File:                     b3dfc886-fa69-4258-8ded-784e425ab84e.roa (raw, json)
Hash identifier:          pRivYv/BRYMcD5HJaA/nyqhPFofv2z38OkL/AvmrOZY=
Subject key identifier:   39:7A:00:8F:4F:16:E2:7F:21:4D:5C:E4:FE:DF:71:85:81:D9:C0:35
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       620B204614A9882DD5284FD9D6C8A8532516BCB4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b3dfc886-fa69-4258-8ded-784e425ab84e.roa
Signing time:             Sat 18 Jul 2026 00:30:54 +0000
ROA not before:           Sat 18 Jul 2026 00:30:54 +0000
ROA not after:            Fri 16 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f1e:c000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:0b:20:46:14:a9:88:2d:d5:28:4f:d9:d6:c8:a8:53:25:16:bc:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 18 00:30:54 2026 GMT
            Not After : Oct 16 23:59:59 2026 GMT
        Subject: serialNumber=7de74c2421d19e554e9c5b16cbf8b17971109430f63d57ba549b8f8b10cb1d60, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:3c:8d:10:b8:62:d9:7d:2d:df:29:b5:2d:de:
                    4e:d8:2e:b7:9d:a2:88:10:5a:2e:7d:fd:d0:54:96:
                    41:30:9a:ed:7b:0e:a1:3a:8d:0e:ec:34:b2:ea:b4:
                    44:a5:65:e6:b8:30:84:26:e6:89:01:64:32:58:5a:
                    c3:21:2c:71:f3:d2:b3:d9:02:33:9a:5a:ee:42:2e:
                    6b:97:eb:bd:4b:66:cd:68:c8:ed:e2:f8:4c:77:8c:
                    a0:14:0f:0c:f5:8a:35:dd:bb:2d:be:ff:17:bb:4a:
                    6b:b0:23:a2:2c:e3:13:59:52:f1:2f:eb:66:46:63:
                    7d:17:79:e2:87:44:85:12:98:96:26:63:72:51:f5:
                    08:10:db:fe:d5:5b:01:fd:1b:9d:d1:7b:12:53:fe:
                    b8:7c:fb:37:09:a8:c6:9e:0b:0c:3c:b4:cf:df:19:
                    f7:af:61:2a:3f:6b:c8:02:c9:07:fd:6a:4c:23:d3:
                    2e:f1:3f:7a:59:18:97:30:1b:fe:4e:fc:f7:48:ef:
                    9d:3b:26:98:47:85:7e:25:4c:9b:fe:38:e6:87:24:
                    56:38:32:8d:03:25:3b:94:34:f7:1b:5e:84:1f:44:
                    6a:94:ba:c3:a6:4e:09:a6:b6:a2:be:8d:5b:04:99:
                    fc:95:9e:ad:83:a6:33:ce:41:d1:fe:4d:67:9a:dc:
                    82:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:7A:00:8F:4F:16:E2:7F:21:4D:5C:E4:FE:DF:71:85:81:D9:C0:35
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b3dfc886-fa69-4258-8ded-784e425ab84e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f1e:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         84:01:92:9d:43:b2:ed:f4:e3:19:e7:91:67:b7:d0:36:01:25:
         b5:48:a3:cb:82:05:04:f7:8d:a6:75:d0:5e:bf:0f:34:4c:dc:
         9d:6f:82:86:90:f8:16:6c:16:b5:e4:3a:74:03:53:28:b6:de:
         6c:29:ca:bf:d2:ea:de:12:1c:05:d4:fe:2a:55:8e:1a:09:57:
         e1:76:8e:31:3c:70:18:bc:66:91:17:cd:0e:91:d3:ee:69:29:
         db:76:2a:52:c0:a1:4f:84:09:c5:97:12:5f:98:54:8c:80:10:
         0b:30:2e:c8:ab:e8:bf:df:f4:01:26:be:53:77:17:5a:f8:a8:
         1c:6e:aa:c2:74:4b:5a:17:f5:20:c0:0b:03:e1:e4:af:8d:27:
         f1:11:c3:be:fd:c9:40:6a:ea:a4:3f:25:c3:fb:72:0c:44:67:
         26:3a:e1:b0:3b:73:ab:73:a2:a3:6d:af:bb:1f:47:5e:78:30:
         10:29:fe:57:1f:5a:15:97:7e:69:c1:6e:dd:73:4a:7c:76:33:
         5d:4f:65:27:4a:6b:e6:08:e3:6d:d9:62:8a:a1:5c:ed:70:21:
         ef:26:7e:a3:db:e2:77:64:04:a8:9f:51:52:4e:03:84:3b:97:
         34:14:1a:bf:a5:f9:bc:33:77:05:01:78:e7:28:b4:8d:b8:29:
         1b:12:33:57
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:49:40 2026 by rpki-client