Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62e31f42-58ee-49fe-af79-1ffeffece2ec.roa
File:                     62e31f42-58ee-49fe-af79-1ffeffece2ec.roa (raw, json)
Hash identifier:          E+x7OUb6+whV4VDGtLnmLc4Yfj1f3JTYeGRcgSWfnK8=
Subject key identifier:   45:70:12:2A:8E:8B:DE:9B:38:9C:0F:71:1E:1A:16:4C:C0:BC:A1:A9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5030C9B52A8A68C8E7CFEB8B5782A704EE6E3077
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62e31f42-58ee-49fe-af79-1ffeffece2ec.roa
Signing time:             Fri 31 Jul 2026 01:40:11 +0000
ROA not before:           Fri 31 Jul 2026 01:40:11 +0000
ROA not after:            Thu 29 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fec:e000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:30:c9:b5:2a:8a:68:c8:e7:cf:eb:8b:57:82:a7:04:ee:6e:30:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 31 01:40:11 2026 GMT
            Not After : Oct 29 23:59:59 2026 GMT
        Subject: serialNumber=454d401bf978167aa49be089327083adbce070bca195f90abedc4c3913f6d7cf, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:51:10:50:bf:3a:1e:0b:66:08:83:87:23:c2:
                    1d:21:3d:f0:94:8c:03:de:b8:4c:5f:72:e6:a0:88:
                    23:aa:59:d0:be:f1:e8:f8:85:56:d4:45:9a:42:ed:
                    98:f8:1b:0e:a4:78:ff:fb:c2:3e:83:50:53:11:d1:
                    aa:b3:ac:db:ba:ca:2a:14:7a:68:62:9f:32:43:db:
                    ea:c6:f8:24:7a:f6:4f:ca:7f:27:ab:d9:7f:a9:44:
                    57:53:07:23:22:3a:8b:b5:53:b4:81:83:d1:cb:60:
                    6c:e2:b4:2a:13:13:4e:06:a1:a1:b8:6f:14:6e:46:
                    bf:d9:35:35:d3:9a:03:ca:72:05:d4:91:c4:0d:c4:
                    4f:ef:24:da:55:b4:1c:3b:45:b3:95:5a:e2:4b:12:
                    b7:80:53:5f:e9:ec:ac:52:13:12:cb:46:55:2d:53:
                    da:b1:6c:ed:e9:78:4d:cd:bc:6e:dc:90:13:d7:be:
                    a9:bf:12:4c:e4:4c:7b:2b:34:b9:7a:c7:d1:22:58:
                    ec:1a:95:aa:b5:bb:f9:83:73:0d:20:76:15:85:4b:
                    29:17:f1:61:20:b4:ad:02:5a:79:7a:cb:b5:9f:26:
                    7c:01:fe:a3:33:88:35:cb:63:ff:3d:cd:66:bc:16:
                    46:af:40:a7:df:ab:ed:c4:25:87:a8:f1:99:d1:40:
                    1f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:70:12:2A:8E:8B:DE:9B:38:9C:0F:71:1E:1A:16:4C:C0:BC:A1:A9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62e31f42-58ee-49fe-af79-1ffeffece2ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fec:e000::/48

    Signature Algorithm: sha256WithRSAEncryption
         17:a3:11:46:22:71:bd:b7:ec:c2:9f:55:a8:5f:a5:08:20:42:
         01:dc:43:0b:a7:2b:e0:3d:13:86:1d:5e:93:a2:0a:e3:b4:1a:
         86:0c:9a:d3:4f:e2:f6:cc:e3:7e:d4:7a:b1:1c:b9:f0:1a:8f:
         93:2c:27:25:a0:63:17:50:cf:cf:78:ca:7a:f3:93:d7:d0:34:
         6a:9b:66:a2:6d:08:0a:8e:5e:d5:67:a8:bb:fe:3c:e7:fb:95:
         d5:08:c8:bf:85:8c:51:ac:a1:8c:d3:64:b1:af:89:89:f1:34:
         21:9a:c5:e5:d2:4d:b2:ab:6b:b6:76:ae:23:15:fe:d6:34:7e:
         ce:fd:53:e7:38:87:ba:95:a7:7c:e0:3d:8d:da:ab:51:90:7f:
         2b:88:5c:5e:15:db:3e:c1:a7:cf:8d:63:78:26:ba:40:13:35:
         8c:c5:cb:f0:14:4d:62:82:3f:69:ee:b8:94:c5:24:11:29:9c:
         6c:2e:9c:fb:cd:c5:46:a1:67:28:14:1e:96:c0:c6:f3:70:85:
         46:6c:89:ee:7a:95:e1:5e:52:03:55:92:21:48:23:d3:92:b6:
         de:e1:45:1e:bc:77:cb:f5:f1:d0:dd:c4:6e:55:f8:80:64:c4:
         88:dc:37:df:0d:44:41:12:95:b9:0e:fe:95:fe:43:50:df:fb:
         de:56:50:d3
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUUDDJtSqKaMjnz+uLV4KnBO5uMHcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzMxMDE0MDExWhcNMjYxMDI5MjM1OTU5
WjB6MUkwRwYDVQQFE0A0NTRkNDAxYmY5NzgxNjdhYTQ5YmUwODkzMjcwODNhZGJj
ZTA3MGJjYTE5NWY5MGFiZWRjNGMzOTEzZjZkN2NmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDIURBQvzoeC2YIg4cjwh0hPfCUjAPeuExfcuagiCOqWdC+
8ej4hVbURZpC7Zj4Gw6keP/7wj6DUFMR0aqzrNu6yioUemhinzJD2+rG+CR69k/K
fyer2X+pRFdTByMiOou1U7SBg9HLYGzitCoTE04GoaG4bxRuRr/ZNTXTmgPKcgXU
kcQNxE/vJNpVtBw7RbOVWuJLEreAU1/p7KxSExLLRlUtU9qxbO3peE3NvG7ckBPX
vqm/EkzkTHsrNLl6x9EiWOwalaq1u/mDcw0gdhWFSykX8WEgtK0CWnl6y7WfJnwB
/qMziDXLY/89zWa8FkavQKffq+3EJYeo8ZnRQB9nAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQURXASKo6L3ps4nA9xHhoWTMC8oakwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzYyZTMxZjQyLTU4ZWUtNDlmZS1hZjc5LTFmZmVmZmVjZTJlYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB/s4AAwDQYJKoZIhvcNAQELBQADggEBABejEUYicb237MKfVahfpQgg
QgHcQwunK+A9E4YdXpOiCuO0GoYMmtNP4vbM437UerEcufAaj5MsJyWgYxdQz894
ynrzk9fQNGqbZqJtCAqOXtVnqLv+POf7ldUIyL+FjFGsoYzTZLGviYnxNCGaxeXS
TbKra7Z2riMV/tY0fs79U+c4h7qVp3zgPY3aq1GQfyuIXF4V2z7Bp8+NY3gmukAT
NYzFy/AUTWKCP2nuuJTFJBEpnGwunPvNxUahZygUHpbAxvNwhUZsie56leFeUgNV
kiFII9OStt7hRR68d8v18dDdxG5V+IBkxIjcN98NREESlbkO/pX+Q1Df+95WUNM=
-----END CERTIFICATE-----
Generated at Mon Aug 3 05:37:42 2026 by rpki-client