Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/573cb5ef-e727-41fb-9d17-3fb973734860.roa
File:                     573cb5ef-e727-41fb-9d17-3fb973734860.roa (raw, json)
Hash identifier:          I+yOMEJ7AP1XbkGD91mgTPRSEQN755n/865AL1cTXNI=
Subject key identifier:   ED:E6:C5:43:DC:74:33:57:8C:2D:B1:9D:B0:B2:DB:8C:27:95:53:97
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       44F840107FF70020E36B950F9E6DEE1CD1805022
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/573cb5ef-e727-41fb-9d17-3fb973734860.roa
Signing time:             Tue 04 Aug 2026 00:51:13 +0000
ROA not before:           Tue 04 Aug 2026 00:51:13 +0000
ROA not after:            Mon 02 Nov 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f29:4800::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:f8:40:10:7f:f7:00:20:e3:6b:95:0f:9e:6d:ee:1c:d1:80:50:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  4 00:51:13 2026 GMT
            Not After : Nov  2 23:59:59 2026 GMT
        Subject: serialNumber=b4eb3695f0073dc1c9829e5fd03ad5583dccf6ae0893e9b860a7d7bb5ad4057e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:77:10:68:8c:1b:93:94:b1:34:9b:79:14:05:
                    2a:3f:5a:39:d1:e6:77:9f:a4:01:40:d1:ec:dc:b7:
                    6d:8f:9a:9e:90:28:8c:53:09:fd:80:34:85:a6:18:
                    b8:2a:b9:e4:ab:ca:94:c2:76:e4:f6:91:3e:2e:73:
                    ae:b0:8a:f8:f4:8d:f5:7c:86:3c:7e:e9:46:86:8e:
                    1f:0c:fd:e9:5a:40:4d:73:24:bf:98:b3:b0:94:ff:
                    0a:7d:76:53:a1:bc:c0:7b:88:bf:66:07:19:e3:bb:
                    ed:6c:6b:e5:80:b3:74:b0:9e:eb:8f:c2:19:44:55:
                    9a:33:bf:64:94:63:32:37:c2:e4:ae:6b:74:ff:49:
                    b4:19:8a:96:ad:3d:48:08:00:57:fa:24:21:ae:6f:
                    24:06:6f:19:cf:ed:f8:d8:97:73:70:74:26:f2:c1:
                    87:51:09:57:de:5c:eb:9e:b1:d9:8b:77:98:ba:e6:
                    af:1a:62:ca:91:3c:02:a8:12:87:ff:e2:9a:d3:f7:
                    b1:e2:3c:d4:9c:8d:bf:f2:76:2b:a5:f6:cd:4b:4c:
                    21:68:47:ad:9d:1c:47:14:2c:d7:f4:24:76:c6:8f:
                    dd:41:39:5e:7c:67:c4:76:59:23:b1:e3:0d:9d:c4:
                    f4:45:15:ea:70:76:a4:ce:cf:4f:5c:f0:7d:3b:c3:
                    48:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E6:C5:43:DC:74:33:57:8C:2D:B1:9D:B0:B2:DB:8C:27:95:53:97
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/573cb5ef-e727-41fb-9d17-3fb973734860.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f29:4800::/37

    Signature Algorithm: sha256WithRSAEncryption
         53:68:14:90:ac:5c:27:4a:b9:4d:1b:40:e7:0c:9c:d9:23:72:
         d8:c3:a1:ee:2d:1c:7c:51:fc:16:f4:cc:e1:ee:7e:e0:c2:51:
         1a:2d:a8:06:20:c8:fa:80:80:66:9f:80:fb:48:90:95:39:87:
         b0:4c:f9:10:ad:84:63:0d:25:f4:1a:40:ed:ec:9a:1a:00:40:
         f6:a6:e2:57:2d:2f:a0:7e:31:8c:6a:73:87:5e:86:4b:89:05:
         3f:78:26:f0:45:5d:84:da:70:2b:d0:2f:61:e8:7d:a1:c6:32:
         f9:68:c4:32:41:ba:04:4c:fa:98:5b:a3:27:8b:c8:74:19:e0:
         ac:28:82:81:65:98:ad:98:59:13:84:50:ad:49:20:d8:87:75:
         17:be:53:8b:ac:13:e6:0e:54:42:53:41:c8:22:e6:0f:a6:71:
         b3:58:84:e1:40:4c:db:f7:9f:05:86:56:c6:af:89:3d:2d:f0:
         80:1a:27:a1:13:8c:d8:70:41:e8:dc:30:98:52:c2:10:8c:83:
         e7:f9:71:74:6d:19:45:0e:6c:d9:6b:b7:dc:57:5d:42:73:f8:
         c7:b5:d0:5d:40:91:68:6e:d0:5e:53:f5:6e:9b:9c:b7:4a:9d:
         6d:cb:34:ed:6a:ec:5a:3a:89:1c:b2:d6:ef:4a:72:14:0f:a9:
         18:cf:ce:f6
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIURPhAEH/3ACDja5UPnm3uHNGAUCIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA0MDA1MTEzWhcNMjYxMTAyMjM1OTU5
WjB6MUkwRwYDVQQFE0BiNGViMzY5NWYwMDczZGMxYzk4MjllNWZkMDNhZDU1ODNk
Y2NmNmFlMDg5M2U5Yjg2MGE3ZDdiYjVhZDQwNTdlMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC2dxBojBuTlLE0m3kUBSo/WjnR5nefpAFA0ezct22Pmp6Q
KIxTCf2ANIWmGLgqueSrypTCduT2kT4uc66wivj0jfV8hjx+6UaGjh8M/elaQE1z
JL+Ys7CU/wp9dlOhvMB7iL9mBxnju+1sa+WAs3SwnuuPwhlEVZozv2SUYzI3wuSu
a3T/SbQZipatPUgIAFf6JCGubyQGbxnP7fjYl3NwdCbywYdRCVfeXOuesdmLd5i6
5q8aYsqRPAKoEof/4prT97HiPNScjb/ydiul9s1LTCFoR62dHEcULNf0JHbGj91B
OV58Z8R2WSOx4w2dxPRFFepwdqTOz09c8H07w0i5AgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQU7ebFQ9x0M1eMLbGdsLLbjCeVU5cwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzU3M2NiNWVmLWU3MjctNDFmYi05ZDE3LTNmYjk3MzczNDg2MC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgMmAB8pSDANBgkqhkiG9w0BAQsFAAOCAQEAU2gUkKxcJ0q5TRtA5wyc2SNy
2MOh7i0cfFH8FvTM4e5+4MJRGi2oBiDI+oCAZp+A+0iQlTmHsEz5EK2EYw0l9BpA
7eyaGgBA9qbiVy0voH4xjGpzh16GS4kFP3gm8EVdhNpwK9AvYeh9ocYy+WjEMkG6
BEz6mFujJ4vIdBngrCiCgWWYrZhZE4RQrUkg2Id1F75Ti6wT5g5UQlNByCLmD6Zx
s1iE4UBM2/efBYZWxq+JPS3wgBonoROM2HBB6NwwmFLCEIyD5/lxdG0ZRQ5s2Wu3
3FddQnP4x7XQXUCRaG7QXlP1bpuct0qdbcs07WrsWjqJHLLW70pyFA+pGM/O9g==
-----END CERTIFICATE-----
Generated at Thu Sep 17 16:13:37 2026 by rpki-client