Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f7fd3545-77f1-4387-9569-710d9169bc6e.roa
File:                     f7fd3545-77f1-4387-9569-710d9169bc6e.roa (raw, json)
Hash identifier:          cazaUkXHDFTLD9ojdU0pZ2KaYZllsrlGECqxJlfLrgM=
Subject key identifier:   77:70:EA:40:21:F0:53:30:9D:52:96:F3:62:D5:84:1A:89:BD:DB:B8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3681CDE8A7AC2DB5420F9B63D9FC0C997D022B11
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f7fd3545-77f1-4387-9569-710d9169bc6e.roa
Signing time:             Thu 23 Jul 2026 00:50:49 +0000
ROA not before:           Thu 23 Jul 2026 00:50:49 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ffd:8000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:81:cd:e8:a7:ac:2d:b5:42:0f:9b:63:d9:fc:0c:99:7d:02:2b:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 23 00:50:49 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=ad7beca5df3a56737ca3884903c63971c5cc01629bffbd30ecb3828c725e89b6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:59:5c:9d:0f:70:3b:2e:f9:23:01:f8:07:c9:
                    cb:cf:96:a6:0d:cf:eb:07:e8:0e:f2:36:ae:ee:48:
                    cc:fa:a6:7d:1b:78:24:9c:e6:a2:42:d7:ff:7b:5f:
                    d9:8d:c1:6c:ad:94:ae:1f:74:66:53:56:f7:76:94:
                    6c:b1:02:19:a4:0f:82:70:d9:68:21:5f:7b:a2:79:
                    5d:32:07:dc:00:5d:97:11:6b:92:38:50:93:a8:e7:
                    f5:1b:10:07:64:92:38:47:f1:ec:57:07:d3:b6:a9:
                    e6:f1:c0:bc:d5:05:97:b7:57:c9:78:32:f2:e3:a6:
                    60:e6:a8:e6:54:cf:f8:f6:bf:98:ff:a1:23:3a:97:
                    1f:d9:72:da:14:d3:7a:7a:e5:e9:6b:f8:ce:3e:2a:
                    b1:34:5f:30:e7:39:52:7e:ed:fa:8e:17:1a:ae:79:
                    7a:64:13:77:28:85:03:9c:d5:05:aa:58:6c:ee:c1:
                    0d:78:87:9e:48:3d:cf:ba:3c:ae:0a:18:a8:a5:29:
                    5b:84:84:fb:d3:e3:3a:9e:5b:63:33:ad:e8:cd:53:
                    c7:5b:25:28:59:b8:9d:73:b7:9c:23:dc:ed:63:0e:
                    a2:a2:cb:df:b1:af:34:72:7d:e0:2a:09:d3:f4:fb:
                    61:75:f9:8c:b5:a2:ee:4c:1a:95:eb:87:36:01:8e:
                    9c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:70:EA:40:21:F0:53:30:9D:52:96:F3:62:D5:84:1A:89:BD:DB:B8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f7fd3545-77f1-4387-9569-710d9169bc6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ffd:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         d6:3c:71:48:39:86:6a:45:ea:5a:be:aa:a6:2d:ba:b2:22:82:
         b0:a0:bc:c2:a2:79:ab:09:66:94:2d:52:62:50:d0:e7:4c:a4:
         49:c3:f1:cc:96:d9:2e:f4:43:bd:14:12:52:ab:29:b0:7a:65:
         75:2c:64:19:3d:27:09:ec:1d:d2:76:ef:c2:46:67:e7:15:66:
         24:11:a8:a7:7e:3d:a7:1d:11:4d:68:cb:41:af:40:3f:5e:d6:
         f4:70:5b:63:cc:5f:6e:d4:4a:fa:b4:d3:22:cb:c1:e8:19:25:
         55:5a:0d:b7:94:56:5b:e4:7d:70:8f:a2:fa:6f:68:17:a7:d2:
         2c:e9:51:53:9a:0b:90:d2:21:5b:59:83:40:d6:35:21:45:ba:
         8a:b6:20:06:1c:fc:ec:38:d5:5c:d9:7d:42:3c:91:af:4a:aa:
         80:6f:e6:55:f8:14:73:44:30:fa:a9:b7:e9:6f:cf:db:be:ae:
         91:c9:bf:20:1e:12:d0:0c:98:70:b1:df:bd:36:a6:60:41:ab:
         e7:32:ad:9e:ee:72:37:f8:48:e6:23:95:b3:62:8f:0b:ac:c6:
         8b:d5:53:51:81:dc:a1:ec:71:1f:0b:64:1c:a5:f8:38:f5:a8:
         af:2d:5f:77:89:e8:68:d4:22:71:90:2e:07:38:f7:fa:2a:92:
         41:cb:fa:a2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:13:31 2026 by rpki-client