Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f563c031-845f-4357-b002-8b1b33718b1a.roa
File:                     f563c031-845f-4357-b002-8b1b33718b1a.roa (raw, json)
Hash identifier:          1r00RmM1ZyAlPp9873tL7c3oKiwRs3derLawloO2Hns=
Subject key identifier:   27:91:04:A1:86:36:12:41:73:36:35:92:A8:59:D6:89:11:F8:6C:41
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4CBC353C84B91EB554D9E9EEE43C705C1E265D42
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f563c031-845f-4357-b002-8b1b33718b1a.roa
Signing time:             Fri 24 Jul 2026 00:41:17 +0000
ROA not before:           Fri 24 Jul 2026 00:41:17 +0000
ROA not after:            Thu 22 Oct 2026 23:59:59 +0000
asID:                     8987
IP address blocks:        2600:1fee:2000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:bc:35:3c:84:b9:1e:b5:54:d9:e9:ee:e4:3c:70:5c:1e:26:5d:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 24 00:41:17 2026 GMT
            Not After : Oct 22 23:59:59 2026 GMT
        Subject: serialNumber=e63b3ea22aafaa1458408e3f6f4f711d50e6e219d46861c20623afd4eeabdc8c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:3a:b3:00:f3:c1:fb:2b:a5:07:83:26:cd:bd:
                    a6:1b:5b:50:c2:29:4a:bd:ed:1d:19:e3:07:c0:73:
                    a9:bd:e8:bf:6d:26:df:26:33:d1:30:04:0c:af:e4:
                    47:fe:4b:f6:47:03:8a:c3:c7:e3:a1:31:ff:18:3b:
                    dc:79:cc:a4:87:5c:a1:fa:83:c4:8c:c2:8d:23:7a:
                    ba:44:e0:02:4f:98:16:a8:40:56:87:9f:9c:65:37:
                    80:d8:40:45:8f:62:a4:7c:f0:e8:34:b2:07:14:cf:
                    5d:6b:49:22:17:9d:cf:d6:1e:30:ac:33:e3:07:08:
                    4a:ef:fb:7a:47:95:0c:ca:3b:ab:e4:46:5a:92:7f:
                    3a:00:6a:09:dc:26:0a:a9:c7:b4:2c:5c:0f:91:8b:
                    41:6f:1b:e1:c9:98:f0:98:0e:bb:71:e9:6f:ee:f5:
                    c5:9a:35:be:1c:7a:ea:d9:34:e2:1b:86:bd:d0:11:
                    2a:88:94:9b:a6:31:0c:02:71:16:0e:e0:d3:5e:ed:
                    2a:8d:18:05:a3:54:17:0f:a4:2e:62:6d:44:ef:47:
                    35:1d:89:a8:32:f3:0c:62:38:67:bd:64:a2:da:d7:
                    c1:61:f6:2c:2e:82:ea:59:93:4b:a2:00:bf:cd:4a:
                    71:c4:ae:c8:a7:ca:a4:bd:81:f5:27:fb:22:3f:7c:
                    d7:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:91:04:A1:86:36:12:41:73:36:35:92:A8:59:D6:89:11:F8:6C:41
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f563c031-845f-4357-b002-8b1b33718b1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fee:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         b7:f1:77:25:4e:4a:40:7e:3e:0d:cd:c0:99:04:53:a5:f7:52:
         e7:e9:44:d9:ad:99:61:a9:27:cb:0e:c5:df:45:04:a1:b4:2f:
         a1:5d:df:fb:af:3b:ec:0d:54:2f:59:3c:4c:81:23:25:3e:8a:
         03:0f:da:d6:a9:e2:b4:32:55:08:6c:fd:bc:7d:bb:1f:3b:79:
         7b:c0:ed:d9:4c:e7:24:35:d1:af:8e:ea:43:f6:ec:96:f7:24:
         20:a8:f4:75:f0:74:33:e0:61:ce:b4:97:f5:fa:2c:13:f4:3e:
         8b:85:e0:31:83:50:27:46:48:b9:a8:1c:d3:70:e7:b6:67:aa:
         56:e8:0a:a8:13:58:7c:f8:eb:a5:29:34:b0:72:9f:8c:db:52:
         c0:32:9f:1c:ed:06:34:80:ab:09:f5:d7:5a:7d:ab:15:02:15:
         3d:13:91:7a:42:a7:42:d2:c8:2d:96:a7:fe:79:46:54:2a:82:
         cf:6c:ac:bc:f0:a0:0a:4c:c6:4b:c4:53:33:6d:69:db:d5:99:
         86:e5:5f:fc:8f:2d:a9:ef:a0:ff:c8:0d:86:ef:0f:1c:30:4d:
         1c:4e:98:34:d7:0b:6d:c0:54:88:d8:32:f3:fe:77:05:c5:87:
         ac:38:a9:77:b2:42:9e:af:2b:62:12:36:22:14:86:c1:0a:a7:
         3b:0f:c2:a5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:38:46 2026 by rpki-client