Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/25d16601-c1dd-4bc2-9272-b1bad646a5ef.roa
File:                     25d16601-c1dd-4bc2-9272-b1bad646a5ef.roa (raw, json)
Hash identifier:          9oFnqKKhpDDIqKkt5uK+FWpdhxf0smD3O4ZuZZewYdk=
Subject key identifier:   AD:D5:0D:84:D7:B9:C5:89:73:DA:51:4D:AC:D1:7D:D3:84:89:6C:32
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3665B66EABA90A79033B4E84256438CC3640AE12
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/25d16601-c1dd-4bc2-9272-b1bad646a5ef.roa
Signing time:             Wed 19 Aug 2026 00:41:14 +0000
ROA not before:           Wed 19 Aug 2026 00:41:14 +0000
ROA not after:            Tue 17 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fba:50c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:65:b6:6e:ab:a9:0a:79:03:3b:4e:84:25:64:38:cc:36:40:ae:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 19 00:41:14 2026 GMT
            Not After : Nov 17 23:59:59 2026 GMT
        Subject: serialNumber=e3fcf1dc47ac64faadd8b4d83b883184e9f08de57cab38bb711ee40cd52bd74a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b4:cb:da:5b:b5:1a:94:d9:c4:12:b7:e7:b1:
                    1f:9c:75:6d:d1:8d:be:f1:ce:30:a7:65:80:95:eb:
                    b2:0e:88:d6:b6:fa:55:24:46:4a:3d:41:7b:b2:eb:
                    b6:44:5d:e8:3d:c6:3e:0f:cf:02:24:f8:34:4e:1d:
                    ec:07:26:d0:2d:17:a1:9f:7d:ae:28:b6:75:a7:d7:
                    cd:fa:37:74:34:61:dc:58:29:82:30:69:5c:1a:88:
                    fb:89:b3:fb:45:ad:f9:a9:ba:0f:07:a2:25:55:ab:
                    30:b3:e9:8d:fc:72:96:4b:2f:39:b2:66:17:93:e8:
                    4e:ec:1c:6c:0e:80:31:39:6f:11:8e:e8:ba:9d:c7:
                    aa:4c:bb:da:8e:43:1f:52:d2:62:32:ba:e3:9a:e3:
                    01:e5:1c:13:c8:bc:c3:92:57:83:30:c1:d3:d7:20:
                    92:4b:8d:86:40:cb:f6:66:72:50:21:f2:24:a3:6a:
                    35:19:c1:c1:52:8c:98:9f:96:2e:ce:24:10:4e:0c:
                    17:60:67:f7:fa:9c:4d:8f:4c:aa:03:49:73:83:4d:
                    2f:47:e2:9d:1e:fd:a0:b2:e5:86:4c:72:03:7b:62:
                    47:14:f7:9f:32:06:3e:fd:da:86:43:9d:f5:ba:e4:
                    82:66:49:b2:c3:94:d7:f4:f5:2f:c0:0e:ba:b4:04:
                    eb:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:D5:0D:84:D7:B9:C5:89:73:DA:51:4D:AC:D1:7D:D3:84:89:6C:32
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/25d16601-c1dd-4bc2-9272-b1bad646a5ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fba:50c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         41:dc:36:26:da:35:80:b9:14:3b:6f:f4:ed:af:14:8c:c4:2e:
         db:0c:94:34:89:fa:a0:dd:9c:47:22:c7:6d:bc:a2:8d:a9:f0:
         2c:1e:06:4f:6e:7f:28:a5:ed:27:da:3c:31:46:7e:8c:0c:e4:
         75:c0:a9:08:f7:0b:7c:93:71:5e:07:e1:3a:c5:1a:3a:b5:3d:
         03:c0:1d:a9:8d:21:b0:b5:66:36:f9:6b:dd:7a:6f:d7:70:e4:
         2e:af:b1:66:6b:47:48:2f:f9:7f:9a:6e:b7:85:c4:5e:6e:f4:
         c9:f6:3a:ca:a3:f8:28:fc:ab:8a:8f:e8:3d:d0:ae:a4:45:38:
         52:63:72:8c:dd:f1:d6:19:38:a6:2c:e1:d7:dd:52:39:4b:16:
         f5:95:55:90:af:67:ff:be:12:5d:5c:40:a2:d1:05:95:bb:eb:
         aa:a2:1e:14:28:ac:86:ca:36:21:42:c6:15:75:5c:92:89:7a:
         59:c8:27:11:9c:7b:05:4b:81:f7:cb:25:10:6c:25:ff:7b:98:
         11:97:0a:74:7e:7a:1c:98:e9:85:03:2b:b3:25:ec:ce:9b:f0:
         6f:b6:37:6e:48:a6:d3:a2:99:88:84:d2:f2:d8:19:fe:01:52:
         bf:88:26:10:d4:48:a2:f3:34:55:9c:de:05:e3:dc:2e:38:a6:
         93:00:a4:15
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Sep 20 19:10:23 2026 by rpki-client