Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c24d76f-a988-4548-a654-37a30aa8d32c.roa
File:                     4c24d76f-a988-4548-a654-37a30aa8d32c.roa (raw, json)
Hash identifier:          9cmds4hDwYppRERl13tN1Dl34EQ7bkMEBqhWcGI6RvU=
Subject key identifier:   15:F0:A5:CF:7F:D3:82:5A:22:A8:C2:FB:4F:2A:22:2C:51:96:9B:68
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1E18C795708EF82A97875D9BAF6401DCE2A02329
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c24d76f-a988-4548-a654-37a30aa8d32c.roa
Signing time:             Tue 04 Aug 2026 01:20:03 +0000
ROA not before:           Tue 04 Aug 2026 01:20:03 +0000
ROA not after:            Mon 02 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f1c:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:18:c7:95:70:8e:f8:2a:97:87:5d:9b:af:64:01:dc:e2:a0:23:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  4 01:20:03 2026 GMT
            Not After : Nov  2 23:59:59 2026 GMT
        Subject: serialNumber=54034985b5c984f4f1a529d3d0f4c8bcbdfd33965fee8f4aacd7bd417a6396a5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:97:b0:7d:e2:14:49:bb:68:3b:eb:e3:c1:76:
                    30:d7:32:68:c1:21:cc:41:82:c7:fb:b0:dd:cc:ad:
                    c2:ed:eb:c9:b7:96:ac:4e:5c:6b:23:ae:3b:de:b5:
                    49:6b:72:03:9e:4a:63:b0:23:51:a1:dd:4e:31:68:
                    17:fb:6d:bc:37:76:b8:a4:6e:66:52:47:89:f4:e5:
                    3d:53:26:2f:de:e8:6d:8e:94:11:ec:18:c8:bd:3a:
                    1d:6d:d0:a5:6e:52:ea:04:b0:fb:8f:ab:5b:1d:9a:
                    fa:41:be:18:5a:66:1b:dd:3e:46:a0:0b:c6:36:38:
                    4a:b7:90:bf:34:fa:2c:73:35:06:71:c9:78:a3:3b:
                    44:44:11:6e:3e:46:67:5d:ea:cb:13:90:ab:b0:28:
                    63:0c:11:59:34:13:88:5e:b1:54:32:3e:30:23:6b:
                    c4:42:3d:14:5c:ad:b2:61:ab:89:08:e6:a6:10:5b:
                    d5:39:63:71:0f:e6:49:fc:30:ed:b1:6c:4d:d7:c5:
                    8b:2f:cc:0e:86:cd:6b:1d:a8:e7:5c:ee:e8:b0:90:
                    0b:8a:50:6c:85:f3:98:13:d2:73:be:22:81:48:44:
                    84:50:ed:e2:83:48:09:85:ca:c9:fc:7f:4a:b7:39:
                    8a:33:55:64:70:1e:60:fe:be:9a:6c:c1:7e:a9:7f:
                    ec:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:F0:A5:CF:7F:D3:82:5A:22:A8:C2:FB:4F:2A:22:2C:51:96:9B:68
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c24d76f-a988-4548-a654-37a30aa8d32c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f1c:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         50:18:49:6f:9e:e0:3f:e2:b2:9c:43:70:6d:08:a4:59:b5:a0:
         db:80:0a:0a:0a:1b:c2:9d:b9:8d:ea:d9:50:b7:b6:f4:2e:09:
         6b:ca:37:b9:ff:3a:d2:ed:cb:eb:31:84:03:aa:43:e1:e7:47:
         0e:6a:c9:10:16:2e:86:76:01:68:67:e4:81:1f:4e:46:c4:34:
         ba:cd:fc:1b:fe:e1:73:5a:b8:c6:26:83:54:09:dc:10:2a:69:
         19:0a:64:45:4f:90:3b:fa:e7:08:51:14:2f:4d:d9:27:d8:55:
         c3:3c:39:e3:1f:27:1e:c6:c7:1c:70:c5:aa:ff:e0:8e:48:8f:
         79:cb:f3:ab:6d:f4:2c:d4:27:a6:d2:1a:4e:3e:aa:99:e9:b8:
         91:dd:05:ba:21:0a:56:de:9d:a4:ee:de:80:82:98:99:8a:b8:
         c6:47:1e:34:b4:9d:c8:6e:91:3f:d6:7e:64:04:bd:04:5c:d0:
         2c:1b:ee:61:d6:2a:4d:5b:8d:20:eb:be:7d:c8:1c:c1:3d:9e:
         f1:1b:09:5f:0c:e0:5f:09:af:27:90:07:93:7d:c4:0e:93:cf:
         ed:7a:de:a0:0d:7b:f8:56:8a:0a:dd:ea:13:49:18:0b:ab:41:
         0a:57:77:69:ac:87:b1:5f:14:67:0e:b0:b9:b3:8f:7a:1f:e5:
         1c:47:18:a6
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUHhjHlXCO+CqXh12br2QB3OKgIykwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA0MDEyMDAzWhcNMjYxMTAyMjM1OTU5
WjB6MUkwRwYDVQQFE0A1NDAzNDk4NWI1Yzk4NGY0ZjFhNTI5ZDNkMGY0YzhiY2Jk
ZmQzMzk2NWZlZThmNGFhY2Q3YmQ0MTdhNjM5NmE1MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCvl7B94hRJu2g76+PBdjDXMmjBIcxBgsf7sN3MrcLt68m3
lqxOXGsjrjvetUlrcgOeSmOwI1Gh3U4xaBf7bbw3drikbmZSR4n05T1TJi/e6G2O
lBHsGMi9Oh1t0KVuUuoEsPuPq1sdmvpBvhhaZhvdPkagC8Y2OEq3kL80+ixzNQZx
yXijO0REEW4+Rmdd6ssTkKuwKGMMEVk0E4hesVQyPjAja8RCPRRcrbJhq4kI5qYQ
W9U5Y3EP5kn8MO2xbE3XxYsvzA6GzWsdqOdc7uiwkAuKUGyF85gT0nO+IoFIRIRQ
7eKDSAmFysn8f0q3OYozVWRwHmD+vppswX6pf+wDAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUFfClz3/TgloiqML7TyoiLFGWm2gwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzRjMjRkNzZmLWE5ODgtNDU0OC1hNjU0LTM3YTMwYWE4ZDMyYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgQmAB8cQDANBgkqhkiG9w0BAQsFAAOCAQEAUBhJb57gP+KynENwbQikWbWg
24AKCgobwp25jerZULe29C4Ja8o3uf860u3L6zGEA6pD4edHDmrJEBYuhnYBaGfk
gR9ORsQ0us38G/7hc1q4xiaDVAncECppGQpkRU+QO/rnCFEUL03ZJ9hVwzw54x8n
HsbHHHDFqv/gjkiPecvzq230LNQnptIaTj6qmem4kd0FuiEKVt6dpO7egIKYmYq4
xkceNLSdyG6RP9Z+ZAS9BFzQLBvuYdYqTVuNIOu+fcgcwT2e8RsJXwzgXwmvJ5AH
k33EDpPP7XreoA17+FaKCt3qE0kYC6tBCld3aayHsV8UZw6wubOPeh/lHEcYpg==
-----END CERTIFICATE-----
Generated at Thu Sep 17 16:53:31 2026 by rpki-client