Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6adb1852-870b-45f8-8e02-9bb6f2b5aff8.roa
File:                     6adb1852-870b-45f8-8e02-9bb6f2b5aff8.roa (raw, json)
Hash identifier:          F6Ve4E5y5rWs/xtv4DQwQJQFqEWL7Vskc4mBi9kLgSY=
Subject key identifier:   02:74:BF:CA:00:36:85:2F:EC:F4:A2:99:7D:F3:27:B5:AE:DD:52:00
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4285DE4E218AB0577E4AE103FC7E5BC4DE19BB42
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6adb1852-870b-45f8-8e02-9bb6f2b5aff8.roa
Signing time:             Mon 27 Jul 2026 00:32:01 +0000
ROA not before:           Mon 27 Jul 2026 00:32:01 +0000
ROA not after:            Sun 25 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff6:3400::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:85:de:4e:21:8a:b0:57:7e:4a:e1:03:fc:7e:5b:c4:de:19:bb:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 27 00:32:01 2026 GMT
            Not After : Oct 25 23:59:59 2026 GMT
        Subject: serialNumber=1e6eb694a1e0f6fd501b7745a7b2f42d587c799a15e6e068de30b57a14248df9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:57:1b:40:b3:f4:fe:5a:80:94:f0:24:2f:2a:
                    c1:49:05:4a:9c:e6:c6:af:47:39:e5:07:bc:9f:03:
                    1a:bf:9f:d0:94:e0:45:2b:3d:58:40:5e:f1:a1:0b:
                    0a:57:fd:52:be:f9:ae:ba:04:8a:16:1b:9a:96:a7:
                    78:23:7d:74:45:d1:37:80:9c:e3:59:34:2a:7a:06:
                    65:fd:28:97:84:04:d5:e8:18:d6:18:86:f4:07:d6:
                    2c:61:dc:5e:62:e9:c1:d0:5e:df:02:4f:63:87:0d:
                    a5:58:30:db:a6:a3:a5:fc:ef:c4:d4:89:01:16:b3:
                    6e:dd:59:3a:bf:f6:28:bd:82:25:68:67:96:21:7b:
                    8a:c3:a6:f3:44:16:f8:c4:8a:80:a6:7b:13:1c:b1:
                    c2:0c:c9:45:d9:88:b4:84:c5:91:6d:0a:d7:a0:b2:
                    28:3d:2e:82:f6:25:d3:83:b9:aa:5c:52:55:69:4c:
                    32:08:be:7c:4b:44:7f:29:d8:8b:e8:ec:3b:f3:9c:
                    49:3e:98:52:bc:95:e3:8b:bd:b0:9a:15:bc:5f:8b:
                    12:43:4f:c3:fc:f6:b9:1c:e4:5b:21:52:62:fc:0c:
                    cb:ca:dd:ac:06:c7:2a:dd:ed:16:83:22:a1:2e:5f:
                    e8:f7:df:47:4f:fd:93:cd:ab:ff:70:41:ee:ab:dd:
                    ba:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:74:BF:CA:00:36:85:2F:EC:F4:A2:99:7D:F3:27:B5:AE:DD:52:00
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6adb1852-870b-45f8-8e02-9bb6f2b5aff8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff6:3400::/48

    Signature Algorithm: sha256WithRSAEncryption
         1c:05:d5:50:a7:42:ca:8c:21:36:e4:e8:14:53:d6:54:fc:d0:
         85:30:76:0b:04:cf:57:64:59:c7:e1:1a:69:db:74:28:4a:69:
         33:ce:e7:5c:d0:c2:3c:2a:ea:4c:49:27:6a:3d:4e:96:77:a1:
         6d:64:74:3e:86:ec:4f:0f:2b:0a:ef:be:80:c3:ba:6e:59:b8:
         a0:33:3d:62:75:fe:06:1d:98:01:26:1e:cf:2c:99:a6:7c:f6:
         97:b6:c2:f2:db:24:61:51:94:95:11:db:c7:81:0d:7e:54:2c:
         73:c1:6a:a1:fe:fb:bd:ca:e4:1b:e8:53:02:dc:85:b8:46:dc:
         68:68:dc:ee:e2:28:c3:49:b1:7b:41:65:64:e0:78:ef:25:36:
         52:23:e3:6b:e3:81:66:7d:f1:7f:39:ab:55:0b:6b:40:93:3e:
         78:a8:56:cc:ca:22:b3:30:ed:a2:f7:65:18:f4:fd:8c:cb:4e:
         4a:99:ec:db:a4:c9:49:16:d5:82:6c:8a:b3:5c:97:e6:44:10:
         61:65:d8:e3:a6:5a:8a:24:83:db:c7:ec:15:20:14:c4:0c:02:
         ec:a1:06:9a:7b:61:39:f5:c6:35:02:1d:5e:6e:b4:b4:c7:c1:
         8f:02:6b:d7:55:3e:26:85:2f:e5:e6:a2:f9:95:f7:23:45:cd:
         df:1b:27:18
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jul 28 17:09:58 2026 by rpki-client