Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ea64a1b0-9599-4dc6-891f-37bca962817c.roa
File:                     ea64a1b0-9599-4dc6-891f-37bca962817c.roa (raw, json)
Hash identifier:          kHf30e+Fp1BGGkZ+noUA+BQqGG3nHgzjQkKDSafXpEc=
Subject key identifier:   D5:A4:19:8F:0B:8A:4B:8D:42:C9:C9:5E:B1:80:D9:37:6E:AD:E8:8F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       58E36BD6A519B725A52E4EC30F05E56213D0908C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ea64a1b0-9599-4dc6-891f-37bca962817c.roa
Signing time:             Tue 21 Jul 2026 00:50:06 +0000
ROA not before:           Tue 21 Jul 2026 00:50:06 +0000
ROA not after:            Mon 19 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fea:ec00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:e3:6b:d6:a5:19:b7:25:a5:2e:4e:c3:0f:05:e5:62:13:d0:90:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 21 00:50:06 2026 GMT
            Not After : Oct 19 23:59:59 2026 GMT
        Subject: serialNumber=72a2ff5502110c00a553d718bcb00fd9a450cc3696690199f7599b619a986137, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8f:5e:ea:c2:12:04:10:14:52:56:45:38:51:
                    b7:88:40:d2:03:bf:52:57:80:fe:94:5f:90:5f:b9:
                    bd:4f:5a:24:92:35:bf:3d:ed:22:11:8c:f5:c4:72:
                    d7:9d:72:f0:6e:ed:01:ed:78:26:00:7c:90:11:b8:
                    63:50:11:eb:2a:19:64:88:c9:a5:92:0a:8b:33:63:
                    e6:57:48:0e:3e:dc:1b:79:ea:84:27:55:d5:b3:2f:
                    0a:33:f4:91:43:d3:7f:37:06:2b:04:b0:d8:95:72:
                    2a:22:4c:c3:9f:86:69:d9:fc:0d:0f:0f:96:d6:f2:
                    e3:0f:33:ef:9c:92:71:59:57:2a:d4:37:ef:6f:dd:
                    a0:81:1b:fe:da:de:c9:df:7f:ed:d2:da:20:ec:74:
                    20:a1:b6:23:48:7d:72:02:d3:e2:5b:5e:a5:fc:87:
                    25:31:27:2e:ac:20:2c:97:3f:74:10:32:39:29:db:
                    99:cb:53:a6:b6:cc:5b:19:3e:43:a8:da:fd:60:55:
                    59:28:10:13:1b:ab:1d:62:4f:b7:13:9c:1a:82:6d:
                    45:52:eb:cd:e2:42:e7:6b:3b:ca:7e:15:d0:a5:08:
                    71:b0:04:13:8f:07:08:59:3b:1a:e0:85:b0:35:43:
                    35:07:0a:11:84:a3:f3:9a:64:3a:6e:25:cd:02:56:
                    90:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:A4:19:8F:0B:8A:4B:8D:42:C9:C9:5E:B1:80:D9:37:6E:AD:E8:8F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ea64a1b0-9599-4dc6-891f-37bca962817c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fea:ec00::/40

    Signature Algorithm: sha256WithRSAEncryption
         c1:00:75:d1:47:43:36:60:e7:68:30:4a:5b:7a:10:cc:61:81:
         8a:34:39:19:20:7f:a4:81:8a:bf:a1:74:d8:2b:13:85:7d:99:
         1a:03:4b:98:92:93:58:d6:6b:90:e7:a5:ca:b0:a2:af:bb:1f:
         69:75:24:d3:ab:d6:49:e6:a4:79:5b:8a:eb:7c:0f:b8:0a:32:
         a7:dd:fd:16:2f:d9:44:83:58:35:40:e8:cd:a8:e9:98:9c:0c:
         ff:6c:14:75:d0:5a:10:62:fb:5d:6f:31:54:e7:61:2d:41:65:
         08:82:c8:9c:98:8e:f4:ba:4f:a3:0d:ac:13:51:34:de:8c:4b:
         b5:a1:7e:90:1f:57:24:21:ac:29:04:3d:62:4f:6d:56:b4:df:
         01:63:78:13:46:38:10:f9:5d:64:c1:82:df:9b:85:41:fd:2e:
         a6:23:55:dc:86:8a:7c:4e:0a:54:ab:91:af:6d:d5:c9:5a:0d:
         dc:8c:3e:f8:b0:82:22:27:86:bb:f1:43:e9:a6:3a:f2:45:cb:
         1e:65:2d:39:57:1a:40:af:fe:ae:14:37:7a:1d:52:c4:f4:0b:
         77:0b:85:39:b8:52:f3:f6:85:38:36:0b:b8:6e:ee:1f:94:15:
         dd:fd:b7:39:f6:31:60:0a:c4:bf:17:77:20:d2:1b:cb:6c:9d:
         e6:78:00:4e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:04:11 2026 by rpki-client