Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1ffaf5e-18fa-475b-9530-6bc4765a4d3f.roa
File:                     c1ffaf5e-18fa-475b-9530-6bc4765a4d3f.roa (raw, json)
Hash identifier:          bkE41j7w0DMTxuSRxVEPVI7fDF+b/0JzaO0L2jwDYy0=
Subject key identifier:   71:29:71:CC:54:96:68:D0:4A:8C:36:0F:16:0D:30:E8:CB:8A:8F:66
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0F4053C3721B29981EC6CF08E16481F8965ED89E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1ffaf5e-18fa-475b-9530-6bc4765a4d3f.roa
Signing time:             Wed 13 May 2026 21:06:09 +0000
ROA not before:           Wed 13 May 2026 21:06:09 +0000
ROA not after:            Tue 11 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f61:ec04::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 18 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:40:53:c3:72:1b:29:98:1e:c6:cf:08:e1:64:81:f8:96:5e:d8:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 13 21:06:09 2026 GMT
            Not After : Aug 11 23:59:59 2026 GMT
        Subject: serialNumber=fffffd335026b4751f628b94c14efb12e257a3eb363bf02829935e48be71e0bd, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9e:3f:ed:6c:53:f5:18:04:85:41:58:2b:8f:
                    f8:49:2c:f8:a4:66:ca:7a:f1:12:d2:c3:46:a9:40:
                    69:45:52:be:8d:04:1c:41:be:5c:91:c4:31:7c:c7:
                    94:fc:73:7e:a4:86:2c:bb:2c:57:ef:a1:24:00:9c:
                    58:a0:15:83:eb:9f:6e:1c:33:3d:23:bb:8c:81:8c:
                    63:63:65:88:7a:2c:9c:ca:67:70:1e:bb:cd:82:ba:
                    f1:d5:c5:1c:6a:f2:54:75:ad:5d:49:c6:88:55:71:
                    27:f0:eb:2c:98:b8:23:c8:86:a8:15:77:92:16:69:
                    43:80:f4:33:40:02:90:1b:f2:dd:8a:2f:e3:eb:f9:
                    c5:b0:9b:04:f8:c6:20:74:63:2b:9f:50:a8:7f:9b:
                    a0:7c:15:13:77:c2:26:f0:20:35:3d:ac:56:a8:f8:
                    3e:20:10:d1:a5:84:1f:ab:2e:57:72:53:e3:a1:ce:
                    5a:4b:be:ca:61:5d:17:6e:fa:92:87:a3:e0:4a:16:
                    dd:90:dc:df:d8:85:f2:93:f3:42:f8:71:96:95:ee:
                    0b:47:3b:ba:69:5d:dc:2a:fe:eb:f6:ce:7b:6f:f5:
                    27:85:25:f3:a4:d2:a0:3d:cd:f4:15:ee:9f:55:a1:
                    a1:40:9d:5a:18:c9:4a:23:2f:2a:79:c8:d7:7c:2d:
                    b0:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:29:71:CC:54:96:68:D0:4A:8C:36:0F:16:0D:30:E8:CB:8A:8F:66
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1ffaf5e-18fa-475b-9530-6bc4765a4d3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f61:ec04::/46

    Signature Algorithm: sha256WithRSAEncryption
         5e:91:84:9f:87:23:95:ac:27:58:c0:9d:0d:2b:5c:d5:84:cd:
         4a:d1:8f:ba:f4:2d:af:6b:8f:22:23:03:a8:ce:e6:4e:26:f1:
         97:6b:4e:b5:70:64:4c:c4:98:55:70:0b:0d:5d:9e:eb:87:29:
         db:6e:9f:19:6e:ae:23:c8:6a:ef:aa:ce:cc:fb:a4:2b:0f:df:
         83:ee:cf:8d:20:4b:c1:22:91:7a:75:e0:cb:b5:3f:b3:6d:23:
         9f:9b:b4:ab:45:e1:6e:dd:16:98:9c:2f:24:a0:1c:0b:96:78:
         05:13:2e:53:90:98:69:d6:49:c6:9c:df:78:73:40:56:2b:84:
         b4:75:a9:94:5e:1a:fb:85:13:a5:10:7d:a8:a6:4a:b1:39:59:
         d5:a7:88:2f:b7:23:f7:54:d6:83:fa:89:22:6c:7d:29:39:85:
         6d:d0:f5:b9:d4:bb:42:ff:0c:ca:2a:66:83:b4:d9:42:a8:df:
         b9:df:ee:29:3d:6d:3c:2e:c3:8b:a0:db:5c:a3:32:e7:5e:80:
         90:0d:ee:b7:e4:09:8e:94:9f:b4:6e:04:6d:e1:46:11:85:f0:
         6c:f3:e6:35:c4:2a:e3:b4:e0:5f:29:13:93:39:c0:1e:68:0f:
         7e:f3:ac:b6:30:a5:aa:a1:e8:e5:b1:ec:1a:d3:65:cd:e3:e0:
         e9:e5:68:9d
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUD0BTw3IbKZgexs8I4WSB+JZe2J4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTEzMjEwNjA5WhcNMjYwODExMjM1OTU5
WjB6MUkwRwYDVQQFE0BmZmZmZmQzMzUwMjZiNDc1MWY2MjhiOTRjMTRlZmIxMmUy
NTdhM2ViMzYzYmYwMjgyOTkzNWU0OGJlNzFlMGJkMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQChnj/tbFP1GASFQVgrj/hJLPikZsp68RLSw0apQGlFUr6N
BBxBvlyRxDF8x5T8c36khiy7LFfvoSQAnFigFYPrn24cMz0ju4yBjGNjZYh6LJzK
Z3Aeu82CuvHVxRxq8lR1rV1JxohVcSfw6yyYuCPIhqgVd5IWaUOA9DNAApAb8t2K
L+Pr+cWwmwT4xiB0YyufUKh/m6B8FRN3wibwIDU9rFao+D4gENGlhB+rLldyU+Oh
zlpLvsphXRdu+pKHo+BKFt2Q3N/YhfKT80L4cZaV7gtHO7ppXdwq/uv2zntv9SeF
JfOk0qA9zfQV7p9VoaFAnVoYyUojLyp5yNd8LbDDAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUcSlxzFSWaNBKjDYPFg0w6MuKj2YwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2MxZmZhZjVlLTE4ZmEtNDc1Yi05NTMwLTZiYzQ3NjVhNGQzZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImAB9h7AQwDQYJKoZIhvcNAQELBQADggEBAF6RhJ+HI5WsJ1jAnQ0rXNWE
zUrRj7r0La9rjyIjA6jO5k4m8ZdrTrVwZEzEmFVwCw1dnuuHKdtunxluriPIau+q
zsz7pCsP34Puz40gS8EikXp14Mu1P7NtI5+btKtF4W7dFpicLySgHAuWeAUTLlOQ
mGnWScac33hzQFYrhLR1qZReGvuFE6UQfaimSrE5WdWniC+3I/dU1oP6iSJsfSk5
hW3Q9bnUu0L/DMoqZoO02UKo37nf7ik9bTwuw4ug21yjMudegJAN7rfkCY6Un7Ru
BG3hRhGF8Gzz5jXEKuO04F8pE5M5wB5oD37zrLYwpaqh6OWx7BrTZc3j4OnlaJ0=
-----END CERTIFICATE-----
Generated at Sun May 17 05:01:59 2026 by rpki-client