Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d6185de8-a4ea-4ece-82e3-974af53b3f82.roa
File:                     d6185de8-a4ea-4ece-82e3-974af53b3f82.roa (raw, json)
Hash identifier:          4aCmj5+kiC5hXRURWPd5cCBS9qOoM9xqUR6U5CxVhhY=
Subject key identifier:   7B:2F:02:E2:41:1C:88:0D:DF:FF:8B:28:62:A5:E6:87:55:82:DD:0C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       55A43FE09288F39C3647D24D8D802996CAE35002
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d6185de8-a4ea-4ece-82e3-974af53b3f82.roa
Signing time:             Mon 26 Oct 2026 00:30:16 +0000
ROA not before:           Mon 26 Oct 2026 00:30:16 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1fef:e000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:a4:3f:e0:92:88:f3:9c:36:47:d2:4d:8d:80:29:96:ca:e3:50:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 26 00:30:16 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=97792c6c406fa56468433cfc2ffd778d0c448ff6269cbdfa1e133fb2b5791e90, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:61:d1:ca:17:d3:cb:1b:a3:bc:a5:63:6c:fd:
                    43:13:79:ea:cf:5e:8c:7b:ef:88:34:e5:ae:7c:e2:
                    ea:96:17:f5:70:3d:d1:f8:ab:7f:da:cf:10:e7:7b:
                    b4:b6:42:cd:9e:d9:c5:43:42:a9:9a:97:53:1c:02:
                    a5:f5:8a:b3:39:f3:c4:75:ad:e6:c3:53:d2:69:f4:
                    45:88:14:20:4e:70:bf:35:63:4b:7a:59:6c:83:01:
                    4a:83:59:c9:7c:c4:40:26:e3:fd:29:b5:9d:85:fd:
                    f2:a8:b6:bd:29:66:fc:1e:13:20:70:e7:2f:b0:63:
                    4a:0d:2d:cf:67:79:6f:13:69:1f:60:0b:b6:dd:cb:
                    85:f6:f5:d7:4b:d4:1b:76:4e:56:da:eb:e6:6f:15:
                    7b:8e:97:de:ec:05:7b:db:b6:77:b7:52:6c:00:3c:
                    9e:f2:b1:7a:4b:55:87:95:0e:2a:8e:af:90:bf:b3:
                    3e:62:88:11:3f:de:17:43:48:b1:99:18:1a:3a:1e:
                    1c:16:c8:c7:d1:a1:34:03:c2:a1:56:5d:cb:8d:ea:
                    8c:e8:28:d0:9d:87:3c:08:f9:b0:42:39:69:cc:f3:
                    6d:f3:dc:7d:dc:f0:3b:e8:7e:02:04:0d:aa:7c:85:
                    a2:ae:f2:91:8a:44:74:a0:d8:15:49:07:98:57:d8:
                    a8:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:2F:02:E2:41:1C:88:0D:DF:FF:8B:28:62:A5:E6:87:55:82:DD:0C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d6185de8-a4ea-4ece-82e3-974af53b3f82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fef:e000::/40

    Signature Algorithm: sha256WithRSAEncryption
         3d:56:b4:bf:f7:2f:57:45:b4:c9:0b:2f:e3:de:63:a7:e9:80:
         d5:22:27:31:8c:b7:5e:a3:a2:3f:cd:18:63:97:df:34:76:23:
         1c:80:18:63:17:8f:92:f8:2c:9f:ea:cc:3a:cb:70:9b:43:41:
         34:d9:1f:2a:cc:a1:53:89:f0:1d:95:9b:26:ec:16:25:9e:0b:
         b4:e6:05:df:7f:d3:55:33:90:c5:45:94:59:b0:2c:94:89:5a:
         1d:73:38:e0:ce:fa:e8:0c:ce:53:5f:38:fe:98:4c:87:ba:81:
         68:e7:1c:f4:be:7e:a6:d0:58:44:f7:05:bf:0a:d9:61:f8:98:
         02:2f:a4:d1:06:38:7a:01:d8:1e:38:0f:2f:ac:33:5a:91:ee:
         7c:34:d3:3e:34:28:d3:aa:08:cf:75:5b:2e:29:6d:da:f8:30:
         0f:52:c4:36:09:3f:61:1b:ae:de:78:aa:ef:0e:1f:53:a7:33:
         b0:85:77:21:3e:c5:c2:b9:fa:64:a1:73:f0:cc:b2:fb:03:ad:
         8d:cb:4f:55:a3:8f:62:5a:af:c2:99:a5:4e:48:68:81:f4:12:
         b8:2a:9a:ec:1c:15:43:78:a8:13:99:09:3a:1e:cb:d6:63:2f:
         da:c1:ca:4b:86:58:34:95:3e:1f:5b:2d:1a:5a:2f:fd:46:4a:
         59:be:d6:8a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Nov 5 16:26:57 2026 by rpki-client