Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4270ebe4-3b8e-45e2-bcf7-4ad2d5830a34.roa
File:                     4270ebe4-3b8e-45e2-bcf7-4ad2d5830a34.roa (raw, json)
Hash identifier:          UPCvr91gDGYj4t/pWypNy91Bq0tCPlTm+WyKe3qAbX8=
Subject key identifier:   4E:C9:93:AC:DA:EE:0F:4B:FB:2C:75:9D:A7:9F:FC:FE:9E:C9:45:15
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       49A92FAA622C200057240A960F69DE2F8C3BBB33
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4270ebe4-3b8e-45e2-bcf7-4ad2d5830a34.roa
Signing time:             Fri 23 Oct 2026 00:30:17 +0000
ROA not before:           Fri 23 Oct 2026 00:30:17 +0000
ROA not after:            Thu 21 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f1c:4800::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:a9:2f:aa:62:2c:20:00:57:24:0a:96:0f:69:de:2f:8c:3b:bb:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 23 00:30:17 2026 GMT
            Not After : Jan 21 23:59:59 2027 GMT
        Subject: serialNumber=5cf2d81d5d66369fd3a7ff108cb34d4b775543a4e8a0ca0009157e22933977a7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:82:2e:eb:7e:86:48:34:d2:79:56:59:3d:ba:
                    9f:e8:f2:76:33:7a:28:7a:d3:64:55:32:0a:4a:75:
                    a5:fb:9c:7e:da:71:49:65:6e:98:0b:9c:22:3e:86:
                    57:33:47:55:0d:03:f3:6f:db:91:64:87:68:da:ec:
                    f7:ac:15:84:fd:75:28:1c:12:5d:f6:99:05:8e:19:
                    37:d4:30:5c:ac:cf:ff:56:bd:a7:0a:61:14:93:1e:
                    8c:1e:c2:39:07:a9:d8:a2:fc:4f:df:2c:c4:98:7c:
                    fb:04:c8:83:cd:a1:4d:99:08:0e:01:25:cb:2f:b2:
                    47:71:6a:15:2c:99:4e:7d:24:fc:63:75:20:8d:a7:
                    c9:80:93:dc:e1:24:4e:05:42:e7:a0:ba:5f:32:7a:
                    d0:d6:53:bb:39:a0:66:41:25:58:b1:a5:a8:54:81:
                    f0:3d:ac:4e:0b:13:08:f3:f6:a4:42:f8:a8:ad:ae:
                    bf:d2:c9:47:59:b5:45:60:8c:5a:39:e9:eb:03:54:
                    81:d7:3a:82:4a:1e:da:78:10:aa:22:38:0e:2f:7b:
                    fb:9f:bd:0e:45:5d:9a:b7:c7:0e:79:65:27:5e:07:
                    17:99:4a:8a:2c:72:d3:e8:fc:ac:e5:6f:d8:b7:e9:
                    d9:e0:5c:d6:52:6f:d1:c4:2e:9f:c6:09:50:a6:dd:
                    b2:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:C9:93:AC:DA:EE:0F:4B:FB:2C:75:9D:A7:9F:FC:FE:9E:C9:45:15
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4270ebe4-3b8e-45e2-bcf7-4ad2d5830a34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f1c:4800::/37

    Signature Algorithm: sha256WithRSAEncryption
         44:c2:57:b5:dd:ed:b7:96:49:d5:41:2f:4f:16:70:40:21:26:
         29:3d:a2:40:15:a1:4e:49:da:b7:c8:9a:7e:97:0d:98:2a:b0:
         14:66:92:a9:2c:72:7f:31:47:c6:74:bc:be:00:b5:a2:c3:42:
         50:95:0a:84:66:91:ee:ff:1f:f3:ff:54:4b:c5:30:1a:cd:b7:
         2f:dd:08:1f:e4:d4:00:fe:7d:b8:67:9b:2b:30:b1:e8:04:fe:
         a7:2e:35:46:0f:27:51:80:06:55:50:93:76:bf:34:e6:e6:86:
         e4:8e:b8:33:53:b5:72:ba:93:8c:e9:77:31:c4:41:df:45:e6:
         55:bd:72:0d:aa:c8:f8:23:42:c3:ed:a1:09:97:a1:20:5e:0a:
         6f:9d:ad:14:ef:83:69:28:cd:0d:a6:0f:1e:86:3f:3f:68:4a:
         c2:0d:ce:2e:71:56:09:8b:ec:89:7f:aa:0c:5b:0b:0c:da:63:
         7c:a7:45:26:69:d7:ac:22:01:3b:d5:e7:da:13:b4:b1:5b:8e:
         21:5e:81:f4:cd:85:00:b1:08:b3:1a:e2:27:36:8e:9c:1a:44:
         6a:71:8c:b9:8f:c5:aa:62:42:eb:c7:07:d9:ad:89:9f:74:3b:
         fe:fc:71:28:00:55:ab:44:ac:35:af:c4:f1:31:0c:4f:ce:7b:
         33:b0:35:2c
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUSakvqmIsIABXJAqWD2neL4w7uzMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIzMDAzMDE3WhcNMjcwMTIxMjM1OTU5
WjB6MUkwRwYDVQQFE0A1Y2YyZDgxZDVkNjYzNjlmZDNhN2ZmMTA4Y2IzNGQ0Yjc3
NTU0M2E0ZThhMGNhMDAwOTE1N2UyMjkzMzk3N2E3MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCrgi7rfoZINNJ5Vlk9up/o8nYzeih602RVMgpKdaX7nH7a
cUllbpgLnCI+hlczR1UNA/Nv25Fkh2ja7PesFYT9dSgcEl32mQWOGTfUMFysz/9W
vacKYRSTHowewjkHqdii/E/fLMSYfPsEyIPNoU2ZCA4BJcsvskdxahUsmU59JPxj
dSCNp8mAk9zhJE4FQuegul8yetDWU7s5oGZBJVixpahUgfA9rE4LEwjz9qRC+Kit
rr/SyUdZtUVgjFo56esDVIHXOoJKHtp4EKoiOA4ve/ufvQ5FXZq3xw55ZSdeBxeZ
SoosctPo/Kzlb9i36dngXNZSb9HELp/GCVCm3bI3AgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUTsmTrNruD0v7LHWdp5/8/p7JRRUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzQyNzBlYmU0LTNiOGUtNDVlMi1iY2Y3LTRhZDJkNTgzMGEzNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgMmAB8cSDANBgkqhkiG9w0BAQsFAAOCAQEARMJXtd3tt5ZJ1UEvTxZwQCEm
KT2iQBWhTknat8iafpcNmCqwFGaSqSxyfzFHxnS8vgC1osNCUJUKhGaR7v8f8/9U
S8UwGs23L90IH+TUAP59uGebKzCx6AT+py41Rg8nUYAGVVCTdr805uaG5I64M1O1
crqTjOl3McRB30XmVb1yDarI+CNCw+2hCZehIF4Kb52tFO+DaSjNDaYPHoY/P2hK
wg3OLnFWCYvsiX+qDFsLDNpjfKdFJmnXrCIBO9Xn2hO0sVuOIV6B9M2FALEIsxri
JzaOnBpEanGMuY/FqmJC68cH2a2Jn3Q7/vxxKABVq0SsNa/E8TEMT857M7A1LA==
-----END CERTIFICATE-----
Generated at Tue Nov 3 11:11:17 2026 by rpki-client