Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/30b2f28c-86cf-492f-8dfc-8cacff8f8955.roa
File:                     30b2f28c-86cf-492f-8dfc-8cacff8f8955.roa (raw, json)
Hash identifier:          4KzeLXM7WNf8Olsh3X2Kl3lWRl/HCu3bth+cVKIxZd8=
Subject key identifier:   E9:EC:6A:80:62:25:2B:11:D6:94:49:58:D3:F5:CC:4A:32:4D:74:72
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       193A55D9A541994E2E5A4FD35EB02F91A7C9753E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/30b2f28c-86cf-492f-8dfc-8cacff8f8955.roa
Signing time:             Mon 19 Oct 2026 00:30:48 +0000
ROA not before:           Mon 19 Oct 2026 00:30:48 +0000
ROA not after:            Sun 17 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ffb:6000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:3a:55:d9:a5:41:99:4e:2e:5a:4f:d3:5e:b0:2f:91:a7:c9:75:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 19 00:30:48 2026 GMT
            Not After : Jan 17 23:59:59 2027 GMT
        Subject: serialNumber=434a47fe9465bb31dc0226f94af6008bac4c3916866b6406b032266130eca608, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:88:9b:d7:27:9e:3d:6c:95:48:46:49:c9:8c:
                    9c:3c:68:97:ce:00:6f:b0:d8:0e:45:6f:99:e8:40:
                    6a:12:74:84:ee:a4:51:56:82:1c:56:61:a5:1e:b5:
                    f0:2d:7c:2b:51:c0:7c:a3:61:f4:2b:87:c6:3b:c0:
                    b2:b0:82:37:43:6e:b6:06:1b:cc:67:e2:63:ad:21:
                    fd:36:b3:8f:c3:14:ca:ee:14:a9:66:5f:8b:61:fb:
                    1e:63:91:43:1f:d0:ef:09:e7:61:5c:06:1e:13:19:
                    47:a2:c8:b7:29:e8:63:53:82:84:86:08:0c:c3:0f:
                    b3:71:0a:ba:5a:32:a8:68:9d:b0:cc:11:ae:b7:cc:
                    f8:3d:5f:ac:73:c2:66:b7:3f:c4:2b:e3:3b:1a:a5:
                    03:e9:f4:7f:aa:73:b7:1e:f4:f8:8f:9a:be:f5:72:
                    c9:aa:9e:64:a0:96:4a:6f:a5:b3:a3:4e:2e:cc:68:
                    43:49:21:be:b1:3d:ce:24:0c:93:e7:86:41:aa:1c:
                    3d:74:d7:64:32:22:9e:94:93:55:4c:e3:04:c9:71:
                    88:79:4b:6f:30:2f:22:63:04:b4:2f:15:14:1e:72:
                    52:98:77:5a:7b:ca:fc:06:40:3e:23:10:e5:c7:ab:
                    08:62:77:6f:56:fe:f5:dd:c6:c4:b5:0a:6c:cc:11:
                    79:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:EC:6A:80:62:25:2B:11:D6:94:49:58:D3:F5:CC:4A:32:4D:74:72
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/30b2f28c-86cf-492f-8dfc-8cacff8f8955.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ffb:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         87:7c:4f:3e:cf:c6:08:69:3a:a5:e0:c8:b0:40:d2:95:41:43:
         59:3d:9c:f1:9f:a0:7a:7c:93:98:40:a9:3d:78:10:97:a4:a2:
         b2:2d:b5:26:21:19:a6:36:9e:90:fd:14:77:7b:3b:b8:c5:9b:
         b8:c0:a9:5e:3f:b2:bd:0c:8e:33:8a:fc:28:6d:3c:cb:d9:9f:
         49:b7:72:52:f9:86:2c:25:a8:af:a3:6b:94:60:49:0e:2e:fd:
         7f:ba:9f:21:7d:0e:f4:36:37:d0:2b:02:9f:e4:30:32:fa:43:
         b1:4d:2e:13:11:3f:98:d9:26:46:32:88:4d:25:5a:4b:86:4f:
         ab:3d:77:7f:74:4f:2b:63:1f:35:5d:3a:e5:92:0f:e1:8e:de:
         93:80:72:fe:1b:28:06:70:85:9b:59:77:82:d1:4e:28:e5:90:
         86:a0:a1:b1:b6:47:78:13:52:2f:32:2f:72:dd:89:68:28:34:
         3e:73:ad:82:d7:7d:3e:87:b5:a5:d0:c6:16:c0:9f:aa:79:2c:
         35:9c:20:cf:9a:53:a8:6e:76:c5:d5:08:af:b6:73:78:21:1d:
         4d:41:a9:56:27:1b:4f:4b:c9:66:a5:b4:35:db:a7:2c:39:65:
         7d:aa:1b:19:f8:55:57:f9:16:42:01:8d:33:5c:c9:35:de:52:
         5c:34:02:96
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUGTpV2aVBmU4uWk/TXrAvkafJdT4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDE5MDAzMDQ4WhcNMjcwMTE3MjM1OTU5
WjB6MUkwRwYDVQQFE0A0MzRhNDdmZTk0NjViYjMxZGMwMjI2Zjk0YWY2MDA4YmFj
NGMzOTE2ODY2YjY0MDZiMDMyMjY2MTMwZWNhNjA4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDKiJvXJ549bJVIRknJjJw8aJfOAG+w2A5Fb5noQGoSdITu
pFFWghxWYaUetfAtfCtRwHyjYfQrh8Y7wLKwgjdDbrYGG8xn4mOtIf02s4/DFMru
FKlmX4th+x5jkUMf0O8J52FcBh4TGUeiyLcp6GNTgoSGCAzDD7NxCrpaMqhonbDM
Ea63zPg9X6xzwma3P8Qr4zsapQPp9H+qc7ce9PiPmr71csmqnmSglkpvpbOjTi7M
aENJIb6xPc4kDJPnhkGqHD1012QyIp6Uk1VM4wTJcYh5S28wLyJjBLQvFRQeclKY
d1p7yvwGQD4jEOXHqwhid29W/vXdxsS1CmzMEXnjAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQU6exqgGIlKxHWlElY0/XMSjJNdHIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzMwYjJmMjhjLTg2Y2YtNDkyZi04ZGZjLThjYWNmZjhmODk1NS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB/7YDANBgkqhkiG9w0BAQsFAAOCAQEAh3xPPs/GCGk6peDIsEDSlUFD
WT2c8Z+genyTmECpPXgQl6Sisi21JiEZpjaekP0Ud3s7uMWbuMCpXj+yvQyOM4r8
KG08y9mfSbdyUvmGLCWor6NrlGBJDi79f7qfIX0O9DY30CsCn+QwMvpDsU0uExE/
mNkmRjKITSVaS4ZPqz13f3RPK2MfNV065ZIP4Y7ek4By/hsoBnCFm1l3gtFOKOWQ
hqChsbZHeBNSLzIvct2JaCg0PnOtgtd9Poe1pdDGFsCfqnksNZwgz5pTqG52xdUI
r7ZzeCEdTUGpVicbT0vJZqW0NdunLDllfaobGfhVV/kWQgGNM1zJNd5SXDQClg==
-----END CERTIFICATE-----
Generated at Tue Nov 3 19:20:09 2026 by rpki-client