Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3b3f8a4-9a9b-4f84-827b-f8816f3c968f.roa
File:                     a3b3f8a4-9a9b-4f84-827b-f8816f3c968f.roa (raw, json)
Hash identifier:          jw6cy8A1GFuCLz5uSjlKo7NAIGMigagh09bikGMlTH0=
Subject key identifier:   72:F5:B4:A2:C4:36:E8:35:87:03:9C:66:DB:C7:13:21:87:28:CB:9A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6AFFDD76F47D74644EF1AF34BD969C29CBB83F90
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3b3f8a4-9a9b-4f84-827b-f8816f3c968f.roa
Signing time:             Wed 13 May 2026 21:07:54 +0000
ROA not before:           Wed 13 May 2026 21:07:54 +0000
ROA not after:            Tue 11 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f61:7400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 18 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:ff:dd:76:f4:7d:74:64:4e:f1:af:34:bd:96:9c:29:cb:b8:3f:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 13 21:07:54 2026 GMT
            Not After : Aug 11 23:59:59 2026 GMT
        Subject: serialNumber=f82c2c69ceed3e4c3e97f1938d1f28e5b8136619c5bcca0d222648c823ffea14, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:3b:d4:63:bf:0e:0e:e5:9a:3b:34:9b:a5:e9:
                    8a:ab:19:8e:c9:57:02:a4:ef:cb:94:92:6a:54:b6:
                    25:e4:ad:94:8f:f5:2b:06:2d:eb:19:02:44:61:cf:
                    bf:ff:3e:c9:32:a7:d3:b3:23:f0:20:e1:93:20:ba:
                    29:04:73:b1:ee:13:5e:80:79:d7:87:96:6d:02:de:
                    17:24:18:bb:ba:68:b2:57:5d:19:b0:1e:b5:f9:08:
                    77:99:59:d6:93:e6:a7:ab:6f:bf:b4:87:5e:57:45:
                    4c:c4:cb:32:a1:9d:c0:6d:ef:1f:9c:12:71:cb:08:
                    13:f5:5c:c4:8c:e5:16:4a:97:a4:ae:56:b4:67:4c:
                    1f:70:2c:a4:10:79:67:6f:65:38:8b:d2:e5:d0:e1:
                    f4:c8:c3:a6:8a:40:48:85:16:29:6e:2f:38:7f:53:
                    01:1e:fa:13:a9:f4:27:32:c6:47:13:1c:c3:56:98:
                    b5:54:88:30:83:0c:b4:aa:83:ad:a4:04:7d:4d:71:
                    3a:86:62:f5:87:65:1a:7f:b8:37:ec:14:a9:ec:e8:
                    58:11:1c:7a:25:96:a3:48:b0:24:1d:67:1f:7c:b5:
                    46:ac:30:03:42:08:fb:27:a7:ad:a7:f7:ce:65:68:
                    91:1e:fe:a7:54:e4:2a:fc:87:78:86:01:3d:27:4b:
                    6b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:F5:B4:A2:C4:36:E8:35:87:03:9C:66:DB:C7:13:21:87:28:CB:9A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3b3f8a4-9a9b-4f84-827b-f8816f3c968f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f61:7400::/40

    Signature Algorithm: sha256WithRSAEncryption
         1c:4d:be:ad:3f:70:f7:1e:55:a6:c1:3e:2c:93:fd:14:76:1e:
         23:a1:91:f8:45:25:5e:6d:49:b6:95:3b:bb:72:b4:59:1b:c0:
         d2:85:bc:a9:e2:8d:8a:db:a2:0d:f1:d3:08:cc:4b:e0:f4:8d:
         c3:2c:87:ac:f0:ab:9c:89:d7:b0:a4:7f:a4:ac:5d:51:a2:fa:
         2d:3c:5f:98:68:20:6c:ef:9d:20:45:46:a3:82:a4:c6:de:77:
         8c:ea:fc:97:ba:49:e6:e5:30:17:88:cc:89:2b:01:c3:84:94:
         7b:98:34:25:18:11:37:f4:6f:79:e7:03:71:4b:c9:5f:16:be:
         54:d0:b4:12:bc:a5:aa:9c:0e:85:df:b0:5e:8b:82:cf:9c:c5:
         45:0a:50:68:90:1f:d8:48:0e:26:11:94:e9:f3:70:36:ca:b2:
         e6:4d:29:11:f3:1d:7e:95:85:50:a4:c3:a1:4e:26:12:e0:55:
         16:21:b2:28:f8:0e:4a:1a:ef:33:45:a3:5d:0e:be:e9:75:84:
         74:fc:3c:25:2a:27:36:79:ec:e7:41:81:70:84:8a:01:d1:49:
         1b:05:8e:09:2d:3e:28:ab:ce:d0:dd:5e:fb:6f:f8:81:8e:82:
         bb:6b:1c:67:db:cb:61:ff:62:89:37:b0:af:86:69:5f:27:d7:
         a1:83:37:c7
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUav/ddvR9dGRO8a80vZacKcu4P5AwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTEzMjEwNzU0WhcNMjYwODExMjM1OTU5
WjB6MUkwRwYDVQQFE0BmODJjMmM2OWNlZWQzZTRjM2U5N2YxOTM4ZDFmMjhlNWI4
MTM2NjE5YzViY2NhMGQyMjI2NDhjODIzZmZlYTE0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCNO9Rjvw4O5Zo7NJul6YqrGY7JVwKk78uUkmpUtiXkrZSP
9SsGLesZAkRhz7//Pskyp9OzI/Ag4ZMguikEc7HuE16AedeHlm0C3hckGLu6aLJX
XRmwHrX5CHeZWdaT5qerb7+0h15XRUzEyzKhncBt7x+cEnHLCBP1XMSM5RZKl6Su
VrRnTB9wLKQQeWdvZTiL0uXQ4fTIw6aKQEiFFiluLzh/UwEe+hOp9CcyxkcTHMNW
mLVUiDCDDLSqg62kBH1NcTqGYvWHZRp/uDfsFKns6FgRHHollqNIsCQdZx98tUas
MANCCPsnp62n985laJEe/qdU5Cr8h3iGAT0nS2vVAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUcvW0osQ26DWHA5xm28cTIYcoy5owHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2EzYjNmOGE0LTlhOWItNGY4NC04MjdiLWY4ODE2ZjNjOTY4Zi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB9hdDANBgkqhkiG9w0BAQsFAAOCAQEAHE2+rT9w9x5VpsE+LJP9FHYe
I6GR+EUlXm1JtpU7u3K0WRvA0oW8qeKNituiDfHTCMxL4PSNwyyHrPCrnInXsKR/
pKxdUaL6LTxfmGggbO+dIEVGo4Kkxt53jOr8l7pJ5uUwF4jMiSsBw4SUe5g0JRgR
N/RveecDcUvJXxa+VNC0ErylqpwOhd+wXouCz5zFRQpQaJAf2EgOJhGU6fNwNsqy
5k0pEfMdfpWFUKTDoU4mEuBVFiGyKPgOShrvM0WjXQ6+6XWEdPw8JSonNnns50GB
cISKAdFJGwWOCS0+KKvO0N1e+2/4gY6Cu2scZ9vLYf9iiTewr4ZpXyfXoYM3xw==
-----END CERTIFICATE-----
Generated at Sun May 17 05:02:44 2026 by rpki-client