Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a7232751-d438-4093-a842-dfdeb18f7665.roa
File:                     a7232751-d438-4093-a842-dfdeb18f7665.roa (raw, json)
Hash identifier:          9jwtID7UT8MyioNyjehc5W9x1axV1Pbj607n1X5V/rc=
Subject key identifier:   41:7A:08:E6:2A:2B:B2:D5:0A:B4:46:97:B4:7C:88:C0:CA:99:AF:9A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       39CA10B0A6CC1FE7065F67EA62E5F1BAFB5865B0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a7232751-d438-4093-a842-dfdeb18f7665.roa
Signing time:             Fri 13 Nov 2026 00:02:56 +0000
ROA not before:           Fri 13 Nov 2026 00:02:56 +0000
ROA not after:            Thu 11 Feb 2027 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1fe9:8030::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:ca:10:b0:a6:cc:1f:e7:06:5f:67:ea:62:e5:f1:ba:fb:58:65:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 13 00:02:56 2026 GMT
            Not After : Feb 11 23:59:59 2027 GMT
        Subject: serialNumber=d89655523938d9b9126136423cf306b55cae2a275bf03afa918f12aa6589cd4f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2d:20:d1:7c:9a:65:02:3a:52:8b:4d:77:17:
                    53:7a:ed:c1:6e:97:d8:58:05:9a:ce:54:3c:6b:95:
                    6d:be:5d:fd:34:09:fe:dd:9e:dd:36:18:18:f4:71:
                    be:15:f3:b7:0c:f4:15:78:a8:ea:99:50:93:2e:6e:
                    34:d9:2b:68:57:85:4a:e5:5d:a8:f1:37:5d:bd:33:
                    b4:88:ef:53:eb:f7:04:6f:ca:cd:ad:67:57:98:fc:
                    b2:a2:8d:3e:99:f4:0f:bf:fe:d5:8d:35:10:7a:08:
                    ef:a1:4d:42:11:f4:38:5e:3a:43:6b:87:bd:d5:18:
                    17:9e:06:b6:d6:fa:31:b0:ea:7b:34:f0:db:2b:41:
                    f4:99:73:50:bf:ca:a0:90:ba:a9:b5:c6:b3:b4:b6:
                    c6:c5:94:5c:59:a8:c0:e6:17:e6:a1:95:1d:e0:f6:
                    19:0f:0a:01:80:26:ad:b0:47:f2:8d:3c:bb:48:fe:
                    a9:a1:99:84:ad:2e:9d:0b:d9:7d:75:42:ed:66:46:
                    63:09:3c:cd:83:3c:26:1f:34:30:23:a4:ce:c3:b7:
                    47:4a:7b:2c:b2:a3:4e:9a:57:7b:5d:66:a1:82:cb:
                    70:d1:78:e8:c4:b5:55:3b:fe:36:e8:8a:87:c9:f5:
                    52:27:de:7b:f4:09:9c:2d:3e:5a:4b:e0:bc:4f:94:
                    87:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:7A:08:E6:2A:2B:B2:D5:0A:B4:46:97:B4:7C:88:C0:CA:99:AF:9A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a7232751-d438-4093-a842-dfdeb18f7665.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fe9:8030::/48

    Signature Algorithm: sha256WithRSAEncryption
         d5:bf:5f:db:d2:6a:db:01:80:c3:a9:24:d4:dd:d3:1a:80:e6:
         32:69:08:aa:b8:bc:32:78:19:32:75:e0:3f:3b:f1:11:0d:46:
         7b:83:cf:df:2f:8d:b9:6b:ca:4d:04:c9:23:ca:49:5c:ee:a5:
         39:0b:4a:d0:bf:08:8c:16:e3:a4:ff:b5:ec:b6:83:59:cc:f0:
         91:8c:30:89:5f:bb:d1:d5:74:aa:67:3a:cf:8c:a2:d8:01:cf:
         e2:d7:e7:d9:b1:ee:ab:51:25:25:6c:9f:c1:c8:ff:c2:9f:59:
         76:53:f1:15:2e:0e:6e:b7:17:09:7a:ae:66:9e:16:4e:db:40:
         4a:e3:0e:05:f0:28:52:c4:f8:44:fd:d9:14:80:55:c7:12:ba:
         6e:09:a3:c0:2a:c9:d8:52:a4:fe:dc:27:ca:fb:81:cd:e6:fd:
         0c:7c:c7:ba:e1:1e:40:b0:2e:7a:f3:dc:67:68:11:99:8f:f4:
         78:56:aa:2d:9e:2e:d1:b7:44:96:dd:85:33:3d:7f:69:fb:4f:
         03:95:f6:db:10:ff:a5:ad:12:80:b3:ba:f3:eb:3a:b1:ac:5b:
         35:b7:f0:7e:c4:ef:61:f5:6f:d8:51:85:9a:5b:f8:7d:1b:59:
         55:a5:f2:3e:ca:aa:1d:38:1d:36:f0:42:46:d1:3c:c7:2b:b4:
         29:73:53:09
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Nov 15 15:18:29 2026 by rpki-client