Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be2c256c-f4ff-41dc-a00e-c372a0f7cff7.roa
File:                     be2c256c-f4ff-41dc-a00e-c372a0f7cff7.roa (raw, json)
Hash identifier:          cH04Npievwxwmgya8+wSyFUGbEdRTqyaz2zWgeihaIQ=
Subject key identifier:   01:84:92:00:36:BF:90:5F:21:82:04:7C:41:5B:A6:06:E4:2C:8F:6A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2310AE35DAF4D018B117A41D4C918DF7EEB24171
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be2c256c-f4ff-41dc-a00e-c372a0f7cff7.roa
Signing time:             Mon 27 Jul 2026 00:40:55 +0000
ROA not before:           Mon 27 Jul 2026 00:40:55 +0000
ROA not after:            Sun 25 Oct 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f19:c000::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:10:ae:35:da:f4:d0:18:b1:17:a4:1d:4c:91:8d:f7:ee:b2:41:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 27 00:40:55 2026 GMT
            Not After : Oct 25 23:59:59 2026 GMT
        Subject: serialNumber=ab7f02ba8ef45600752070184fbee6712c04beecfdf5800eaa2cefa38c461c0a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:4d:ac:92:69:be:80:b1:8e:1d:1e:be:4c:07:
                    de:d2:4d:2d:0a:bf:dd:09:b7:fb:d0:7f:0a:c8:05:
                    84:9d:1e:bc:4a:fa:2c:86:f4:d5:3b:a5:e9:78:89:
                    d8:25:35:fc:90:2b:1c:61:d1:b9:40:e9:b1:82:93:
                    b1:25:b0:98:df:3d:72:82:ce:5e:bb:98:74:ec:bc:
                    e3:b0:e8:8d:42:2c:d5:b4:42:36:b6:3f:aa:29:bd:
                    a0:5a:49:ec:d7:db:b2:40:fa:f9:83:b5:52:92:72:
                    29:5f:66:1b:2a:47:da:7f:be:26:7d:d0:01:e5:0c:
                    10:51:4c:91:13:79:d6:56:12:3a:16:28:12:51:45:
                    ed:11:99:9a:c3:36:26:00:73:f0:22:92:0e:a2:88:
                    40:97:f2:27:fb:4a:a9:3d:c0:d4:20:0c:ca:78:38:
                    cd:39:9b:ed:6c:f1:31:60:5b:5b:ad:1d:3a:8a:f6:
                    85:4e:31:ba:00:2d:bb:9c:b2:9b:b1:b5:35:42:e8:
                    01:d0:be:61:a2:ba:a4:b7:68:ac:1c:10:bc:47:4b:
                    ff:ca:e9:3b:4a:11:20:2b:22:0d:07:20:b4:f4:ea:
                    94:12:5f:bd:a7:84:12:b2:b0:f8:51:df:48:73:54:
                    9c:97:3d:38:19:94:22:23:7d:c2:12:45:7a:b5:66:
                    db:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:84:92:00:36:BF:90:5F:21:82:04:7C:41:5B:A6:06:E4:2C:8F:6A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be2c256c-f4ff-41dc-a00e-c372a0f7cff7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f19:c000::/37

    Signature Algorithm: sha256WithRSAEncryption
         5a:c5:53:ee:32:fd:65:2f:23:62:dc:31:df:bc:a4:12:72:96:
         bd:e0:f8:ca:a7:92:e0:33:10:23:88:7b:69:71:32:55:c4:eb:
         99:b0:66:ed:d1:2a:d9:79:62:ea:95:37:1a:19:92:b0:63:a0:
         07:3d:c0:1a:5a:43:63:91:0c:f7:37:fb:91:a3:6d:cf:ae:77:
         e4:fb:f0:d4:7b:4c:7d:4c:b3:9c:3f:cb:6f:a2:85:bd:15:47:
         cc:57:88:28:cf:fb:db:b3:5c:58:7f:94:f0:4f:66:ee:6f:c8:
         c2:e4:7f:9c:25:35:7f:42:ed:1c:f3:a2:22:71:1d:b6:b6:82:
         84:7e:8d:24:67:4b:0e:da:09:fa:2e:ab:6a:77:66:48:98:36:
         e9:27:76:82:e2:e4:d2:ed:c7:b0:5d:2b:49:dd:84:36:f4:28:
         51:81:cd:1c:af:2d:00:77:d0:97:1e:47:1b:99:15:b1:0d:11:
         54:fc:a4:b2:59:2c:ba:67:ba:e5:ad:6e:33:6f:44:0f:84:82:
         96:3b:13:28:8b:cf:2c:be:94:83:a0:3e:07:66:71:c5:d5:2b:
         4c:55:cf:f0:01:cc:82:59:84:a5:9e:20:37:93:6a:c5:b8:66:
         c2:01:43:4a:db:38:ee:52:a2:2b:72:18:0a:83:f1:3d:bc:75:
         1a:08:3c:00
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jul 28 14:51:05 2026 by rpki-client