Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e07b009f-7b48-43a4-a98e-2a14c194afe8.roa
File:                     e07b009f-7b48-43a4-a98e-2a14c194afe8.roa (raw, json)
Hash identifier:          H6BmmP/0Tc6w+qDMfRhtWTel1eyzhs0LfVwRL4opJ2w=
Subject key identifier:   ED:90:4E:26:1C:E1:2D:F4:40:29:38:F4:5A:52:E5:94:F0:37:2C:C9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3148CCB378969DA7BFBBB774229BBB8C7CC5D8B1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e07b009f-7b48-43a4-a98e-2a14c194afe8.roa
Signing time:             Mon 20 Jul 2026 00:31:21 +0000
ROA not before:           Mon 20 Jul 2026 00:31:21 +0000
ROA not after:            Sun 18 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2620:107:4003::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:48:cc:b3:78:96:9d:a7:bf:bb:b7:74:22:9b:bb:8c:7c:c5:d8:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 20 00:31:21 2026 GMT
            Not After : Oct 18 23:59:59 2026 GMT
        Subject: serialNumber=dca72f6729df227f59a3812a2be798212e8207413db048086842c0034260dd74, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:15:b7:16:63:ce:9e:51:71:4e:fe:83:7d:a4:
                    fb:ed:8b:3f:8f:ef:eb:81:6a:38:c8:41:61:61:8d:
                    ef:2a:26:64:17:ea:20:dd:de:1a:1c:43:01:fb:b4:
                    5f:a0:5b:b2:43:e5:bf:ce:23:01:3a:17:05:c1:35:
                    e2:42:a4:04:e1:b9:c2:6d:89:17:22:cc:52:fc:38:
                    63:f4:f8:cd:ad:15:02:41:ca:79:c3:20:b1:52:00:
                    29:70:45:14:d3:ca:7c:45:e7:e2:86:32:4c:bd:bc:
                    99:51:44:8a:9e:95:05:60:6d:6b:3b:87:b2:58:d6:
                    17:c3:4d:47:43:40:04:c6:0a:e5:97:7e:b6:d8:4f:
                    78:26:63:0d:d5:e5:11:dd:4b:96:28:10:25:e1:76:
                    81:c3:13:e6:da:82:9e:a6:d4:72:9f:9a:6b:37:92:
                    b8:22:49:59:43:fa:ad:08:b1:e4:7f:0b:31:4b:16:
                    0e:ad:eb:1e:62:e9:79:2e:9d:a9:1f:de:f1:f9:8c:
                    dd:e7:64:6e:7d:77:08:2e:68:21:20:36:d4:17:b7:
                    e3:e0:36:ef:4b:a3:42:a3:c2:be:48:4d:35:8e:c3:
                    ee:24:1d:3e:47:f0:0a:71:cc:e7:40:1d:23:af:13:
                    b9:d5:2c:0c:dc:cb:9c:d8:c6:16:4f:6d:2d:d4:b1:
                    10:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:90:4E:26:1C:E1:2D:F4:40:29:38:F4:5A:52:E5:94:F0:37:2C:C9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e07b009f-7b48-43a4-a98e-2a14c194afe8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:107:4003::/48

    Signature Algorithm: sha256WithRSAEncryption
         be:4b:9b:42:e4:b1:4e:ee:ef:d6:6c:6e:d4:47:ce:45:2a:4e:
         44:5a:9f:66:ec:f2:62:00:e0:db:b8:72:e2:98:d6:14:e0:04:
         63:55:1a:8b:8b:1e:f0:38:5d:3a:41:51:0e:7e:17:39:f7:c7:
         d2:44:40:90:62:f5:30:f8:de:bb:2b:bf:91:d7:72:13:f6:99:
         d3:80:d9:42:f6:6d:e1:fb:8c:06:dd:cd:97:74:e3:16:55:73:
         94:5b:bb:1f:e5:02:44:f0:4c:20:8c:27:7d:55:1e:94:4a:6e:
         62:3e:da:50:9c:f9:f8:df:3b:ac:1c:d9:4d:f0:df:ed:32:ca:
         ea:34:58:03:31:6a:57:f3:67:ed:64:22:c1:4b:2e:61:d7:f3:
         b6:04:d6:c4:46:a6:8d:53:44:b3:94:03:9b:9f:5e:23:e6:df:
         16:c0:21:5e:66:08:b8:0c:1c:50:5b:9a:f4:1e:ab:e8:44:3c:
         45:6d:db:5f:35:83:9c:68:df:0b:f6:97:b9:db:91:bd:bb:d8:
         f4:6b:2f:25:ac:d8:7a:50:be:3a:66:e1:6c:e0:a8:38:a4:98:
         fb:b2:fa:e7:f9:80:6b:67:a3:81:e6:da:9b:6c:19:44:4b:36:
         33:c6:8d:27:b8:63:1d:f0:cf:e2:0d:de:39:58:31:cb:0e:3c:
         89:20:20:cb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:32:41 2026 by rpki-client