Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/140a8b1c-7c91-4264-9029-072fd4c2db01.roa
File:                     140a8b1c-7c91-4264-9029-072fd4c2db01.roa (raw, json)
Hash identifier:          e5gLtgoXKD6M/iRA3ZaA+pbyrd5XYtZfMDZgtRL7s94=
Subject key identifier:   22:95:67:6F:36:DC:F4:FF:17:71:28:FD:02:D4:79:95:A4:8F:DA:0D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0E7467472441A8D88542D9321BD3D68BF4310000
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/140a8b1c-7c91-4264-9029-072fd4c2db01.roa
Signing time:             Wed 09 Sep 2026 16:10:05 +0000
ROA not before:           Wed 09 Sep 2026 16:10:05 +0000
ROA not after:            Tue 08 Dec 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff6:e200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:74:67:47:24:41:a8:d8:85:42:d9:32:1b:d3:d6:8b:f4:31:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep  9 16:10:05 2026 GMT
            Not After : Dec  8 23:59:59 2026 GMT
        Subject: serialNumber=a34aa53e5ca4103833ec2bb49f5ee5f9910c069b1707c18d8e4f3fa3abe961db, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:01:1c:dd:34:c2:f7:55:cc:22:99:52:7b:8d:
                    ee:27:22:b0:4e:1c:40:bd:42:3d:43:16:1c:ef:4a:
                    cf:76:27:49:0d:f3:b3:b2:5d:46:29:cb:10:63:39:
                    49:ad:14:1d:ed:98:44:01:61:b1:69:7f:9e:02:04:
                    46:76:8e:e9:84:7c:45:d3:46:1f:87:35:da:09:b0:
                    d6:53:ba:99:8b:1b:2c:7d:6f:63:5b:0c:0c:37:55:
                    d6:17:fc:c1:26:9a:b5:0e:76:85:65:14:e8:d8:74:
                    78:57:15:ae:d1:79:32:94:09:a6:1a:55:6a:db:ff:
                    60:83:48:66:c3:b5:67:64:e7:f5:54:a8:00:ff:05:
                    d6:c5:7a:23:19:af:0c:58:82:aa:56:f0:1d:d6:59:
                    6f:94:7b:b1:54:7c:24:6d:59:99:35:2b:62:0a:4b:
                    ec:ad:19:48:c4:62:a7:44:42:eb:be:a4:1a:68:76:
                    11:d2:76:b3:1d:fc:8e:c9:9c:92:10:9d:85:2c:d4:
                    f9:d9:12:3e:0f:ea:a9:e3:ce:ee:40:ca:c1:a8:7e:
                    98:c4:11:fb:32:e0:a3:95:97:17:36:49:97:7c:16:
                    d3:cf:87:9a:c9:14:95:e1:81:02:b4:15:ca:7d:6e:
                    58:af:cf:83:27:80:b2:46:69:d0:6c:16:95:aa:44:
                    63:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:95:67:6F:36:DC:F4:FF:17:71:28:FD:02:D4:79:95:A4:8F:DA:0D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/140a8b1c-7c91-4264-9029-072fd4c2db01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff6:e200::/40

    Signature Algorithm: sha256WithRSAEncryption
         7b:9d:e6:9e:fd:9a:c9:79:01:bd:34:d9:d8:f0:2f:10:2c:a7:
         f7:ed:ba:aa:3d:e4:26:42:10:4f:1c:c0:77:96:e5:df:95:d1:
         23:b1:bb:9d:39:bd:36:e6:84:47:a5:92:d9:ab:16:00:91:fe:
         ad:92:62:34:d1:bb:ff:71:4c:0d:a6:0d:78:fd:31:6d:a5:f2:
         8d:df:27:98:76:30:ee:ae:d8:65:94:bf:eb:3c:ad:f5:59:03:
         f6:bf:59:18:13:44:b1:a0:a2:8a:a1:c1:ee:a8:0b:b2:58:1d:
         bc:58:54:98:d5:47:c6:ef:0a:6e:0c:88:df:f4:d3:fb:45:05:
         55:89:b1:d3:e4:8d:84:1f:af:f9:1f:65:6a:ed:e2:00:6a:47:
         5d:38:61:70:f0:5e:b0:ad:50:7c:25:11:08:9a:31:cf:30:63:
         cf:17:8e:86:83:43:34:2d:4c:79:81:33:dd:9f:46:9a:9d:ea:
         33:9b:b7:e1:13:56:dc:e9:8a:d1:45:fe:f1:6c:aa:c0:5d:b5:
         7a:70:47:6c:36:98:09:a4:1f:21:7a:a3:f5:7f:a0:60:88:7a:
         f1:74:16:c5:3b:98:e0:0f:cc:82:5c:38:05:46:e9:d9:b6:62:
         63:47:31:70:69:ec:4d:33:65:4b:ab:3d:26:4f:51:8b:54:a6:
         8c:70:ef:26
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUDnRnRyRBqNiFQtkyG9PWi/QxAAAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwOTA5MTYxMDA1WhcNMjYxMjA4MjM1OTU5
WjB6MUkwRwYDVQQFE0BhMzRhYTUzZTVjYTQxMDM4MzNlYzJiYjQ5ZjVlZTVmOTkx
MGMwNjliMTcwN2MxOGQ4ZTRmM2ZhM2FiZTk2MWRiMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDeARzdNML3VcwimVJ7je4nIrBOHEC9Qj1DFhzvSs92J0kN
87OyXUYpyxBjOUmtFB3tmEQBYbFpf54CBEZ2jumEfEXTRh+HNdoJsNZTupmLGyx9
b2NbDAw3VdYX/MEmmrUOdoVlFOjYdHhXFa7ReTKUCaYaVWrb/2CDSGbDtWdk5/VU
qAD/BdbFeiMZrwxYgqpW8B3WWW+Ue7FUfCRtWZk1K2IKS+ytGUjEYqdEQuu+pBpo
dhHSdrMd/I7JnJIQnYUs1PnZEj4P6qnjzu5AysGofpjEEfsy4KOVlxc2SZd8FtPP
h5rJFJXhgQK0Fcp9blivz4MngLJGadBsFpWqRGOjAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUIpVnbzbc9P8XcSj9AtR5laSP2g0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzE0MGE4YjFjLTdjOTEtNDI2NC05MDI5LTA3MmZkNGMyZGIwMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB/24jANBgkqhkiG9w0BAQsFAAOCAQEAe53mnv2ayXkBvTTZ2PAvECyn
9+26qj3kJkIQTxzAd5bl35XRI7G7nTm9NuaER6WS2asWAJH+rZJiNNG7/3FMDaYN
eP0xbaXyjd8nmHYw7q7YZZS/6zyt9VkD9r9ZGBNEsaCiiqHB7qgLslgdvFhUmNVH
xu8KbgyI3/TT+0UFVYmx0+SNhB+v+R9lau3iAGpHXThhcPBesK1QfCURCJoxzzBj
zxeOhoNDNC1MeYEz3Z9Gmp3qM5u34RNW3OmK0UX+8WyqwF21enBHbDaYCaQfIXqj
9X+gYIh68XQWxTuY4A/Mglw4BUbp2bZiY0cxcGnsTTNlS6s9Jk9Ri1SmjHDvJg==
-----END CERTIFICATE-----
Generated at Tue Sep 15 12:43:21 2026 by rpki-client