Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/29260c01-e258-4b3e-b897-d131635cd2ec.roa
File:                     29260c01-e258-4b3e-b897-d131635cd2ec.roa (raw, json)
Hash identifier:          ZfdXqjl2w5wWAxlmY61581SDWKk0/yaN9RBVNTBuwJM=
Subject key identifier:   BA:14:89:E7:9F:68:9B:A8:DD:4A:01:0F:D2:4A:7F:E2:53:D3:4B:23
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7D56D99A3C9C64123F5590F53A8FA219F2601DF9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/29260c01-e258-4b3e-b897-d131635cd2ec.roa
Signing time:             Wed 29 Jul 2026 21:02:09 +0000
ROA not before:           Wed 29 Jul 2026 21:02:09 +0000
ROA not after:            Tue 27 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff6:ec00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:56:d9:9a:3c:9c:64:12:3f:55:90:f5:3a:8f:a2:19:f2:60:1d:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 29 21:02:09 2026 GMT
            Not After : Oct 27 23:59:59 2026 GMT
        Subject: serialNumber=040d06ab2459edff8a36ccdced35261684ec321202b1ff68ed577cf45e7bd95d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e6:8d:c0:92:44:d2:bb:8d:4a:91:4f:c5:71:
                    09:a4:6d:37:f7:be:e1:f6:48:a3:cf:94:cd:81:f5:
                    ee:3b:c6:e2:f1:88:f4:2c:75:e2:61:0d:ce:b3:74:
                    6b:c6:35:66:db:be:47:3d:5c:df:a9:53:f7:81:12:
                    4e:6f:a3:f4:19:8f:26:63:df:51:68:44:ed:e9:51:
                    56:65:1f:39:65:7d:ae:7c:72:ff:93:44:23:45:58:
                    b8:0f:fd:2d:f7:8a:a0:e8:a6:d2:eb:d3:91:3d:8c:
                    89:7b:72:94:c4:7c:4e:14:53:36:26:42:8a:5f:bd:
                    5e:09:85:28:0f:10:9d:d1:fc:0c:dc:84:46:24:62:
                    f1:4a:03:18:77:12:e6:f0:9d:12:cb:d4:56:5d:e2:
                    93:c3:03:ea:87:28:31:3f:29:fc:70:88:4f:3d:b9:
                    d7:42:16:6c:16:04:8a:43:99:cd:b5:80:1e:4e:b3:
                    c3:5b:04:98:65:6a:14:d1:cd:aa:0f:1f:7a:41:d1:
                    d0:33:22:35:f1:dc:de:32:55:ce:fe:a7:e5:98:2f:
                    02:a6:19:21:7a:d0:8f:60:77:81:e6:b9:76:89:d0:
                    be:03:9c:a1:5e:28:3d:ce:d6:42:29:03:9f:bb:33:
                    a8:cb:fd:ff:80:a1:ce:5e:80:97:66:88:df:a5:48:
                    6c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:14:89:E7:9F:68:9B:A8:DD:4A:01:0F:D2:4A:7F:E2:53:D3:4B:23
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/29260c01-e258-4b3e-b897-d131635cd2ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff6:ec00::/48

    Signature Algorithm: sha256WithRSAEncryption
         97:83:f8:da:58:26:d6:be:90:7c:34:de:82:17:f8:1e:ac:09:
         6f:b7:d0:75:0a:7b:c7:50:7c:8e:fb:c1:19:12:15:36:50:a8:
         69:ae:4b:29:63:2e:83:0c:6e:35:9a:76:f8:38:92:54:5f:d8:
         a0:61:11:8f:ba:dd:24:7b:a5:ef:9a:ea:71:cc:1a:89:03:c0:
         14:58:83:57:72:6a:27:65:2e:2b:4c:aa:fb:20:7c:36:30:86:
         fa:63:8a:70:60:ad:8e:97:af:25:b1:f8:c9:f2:d7:95:3c:f1:
         b4:9a:72:96:52:82:56:b3:44:da:d8:ef:dd:19:cb:f6:72:17:
         2c:38:27:68:b5:2a:81:4f:4d:48:24:27:15:b3:5d:c0:59:eb:
         16:55:df:77:50:7e:bb:19:d2:51:0b:d6:c3:0c:a2:46:75:57:
         1a:83:53:ec:d8:0f:89:74:0b:d1:e4:8b:98:42:1c:2c:b9:65:
         0f:c9:95:1d:24:bb:b3:9d:33:0a:10:8a:89:25:d5:e7:47:e0:
         b8:58:04:51:91:5b:19:98:f8:2b:90:4c:73:d1:4c:76:92:74:
         b7:b9:d9:1a:ec:0e:89:30:45:b2:48:f7:75:11:19:c9:32:45:
         9d:58:b2:1b:e2:7e:72:b4:c1:33:a9:09:c0:ca:c0:33:ea:d2:
         2d:e8:c3:be
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUfVbZmjycZBI/VZD1Oo+iGfJgHfkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzI5MjEwMjA5WhcNMjYxMDI3MjM1OTU5
WjB6MUkwRwYDVQQFE0AwNDBkMDZhYjI0NTllZGZmOGEzNmNjZGNlZDM1MjYxNjg0
ZWMzMjEyMDJiMWZmNjhlZDU3N2NmNDVlN2JkOTVkMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCQ5o3AkkTSu41KkU/FcQmkbTf3vuH2SKPPlM2B9e47xuLx
iPQsdeJhDc6zdGvGNWbbvkc9XN+pU/eBEk5vo/QZjyZj31FoRO3pUVZlHzllfa58
cv+TRCNFWLgP/S33iqDoptLr05E9jIl7cpTEfE4UUzYmQopfvV4JhSgPEJ3R/Azc
hEYkYvFKAxh3EubwnRLL1FZd4pPDA+qHKDE/KfxwiE89uddCFmwWBIpDmc21gB5O
s8NbBJhlahTRzaoPH3pB0dAzIjXx3N4yVc7+p+WYLwKmGSF60I9gd4HmuXaJ0L4D
nKFeKD3O1kIpA5+7M6jL/f+Aoc5egJdmiN+lSGxXAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUuhSJ559om6jdSgEP0kp/4lPTSyMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzI5MjYwYzAxLWUyNTgtNGIzZS1iODk3LWQxMzE2MzVjZDJlYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB/27AAwDQYJKoZIhvcNAQELBQADggEBAJeD+NpYJta+kHw03oIX+B6s
CW+30HUKe8dQfI77wRkSFTZQqGmuSyljLoMMbjWadvg4klRf2KBhEY+63SR7pe+a
6nHMGokDwBRYg1dyaidlLitMqvsgfDYwhvpjinBgrY6XryWx+Mny15U88bSacpZS
glazRNrY790Zy/ZyFyw4J2i1KoFPTUgkJxWzXcBZ6xZV33dQfrsZ0lEL1sMMokZ1
VxqDU+zYD4l0C9Hki5hCHCy5ZQ/JlR0ku7OdMwoQiokl1edH4LhYBFGRWxmY+CuQ
THPRTHaSdLe52RrsDokwRbJI93URGckyRZ1YshvifnK0wTOpCcDKwDPq0i3ow74=
-----END CERTIFICATE-----
Generated at Mon Aug 3 05:37:22 2026 by rpki-client