Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/797d3498-a160-4006-845e-131ce55f21f5.roa
File:                     797d3498-a160-4006-845e-131ce55f21f5.roa (raw, json)
Hash identifier:          NJqG7jSZOruPAzBdkivjDHXAS087tTcXcIqDrDakfq8=
Subject key identifier:   4E:05:05:D6:2C:E8:8C:DA:4C:8F:14:01:D4:22:27:D6:5F:47:87:8B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5EFAB95248FB960E0E8F67FD4F4C49AAEB19A016
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/797d3498-a160-4006-845e-131ce55f21f5.roa
Signing time:             Tue 04 Aug 2026 00:41:13 +0000
ROA not before:           Tue 04 Aug 2026 00:41:13 +0000
ROA not after:            Mon 02 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f00:4000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:fa:b9:52:48:fb:96:0e:0e:8f:67:fd:4f:4c:49:aa:eb:19:a0:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  4 00:41:13 2026 GMT
            Not After : Nov  2 23:59:59 2026 GMT
        Subject: serialNumber=1cdd6611b08e160f91321ac1efec27945c1ea7a20643b191ac1ae95f44ab35ea, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fe:46:65:47:be:31:de:e2:5f:1c:fa:61:ec:
                    e4:6a:74:1c:de:22:c4:18:c4:7f:0b:fd:0d:df:ba:
                    1c:06:26:12:88:0a:2b:1a:c6:6e:96:e0:fc:cc:4b:
                    8c:23:1d:a2:75:8a:21:b5:20:5f:90:e9:5c:d5:5b:
                    f0:9b:6e:01:ce:e0:92:d5:87:1e:d6:be:9c:0a:26:
                    5e:d1:5a:1b:8f:cd:f2:60:e4:84:6e:f9:89:5b:e4:
                    7d:d7:9a:46:9f:d5:c0:66:47:f3:86:41:9b:32:f8:
                    8c:c6:7c:0d:ec:1d:45:56:84:5b:bb:22:16:77:a3:
                    5b:56:61:81:b2:ea:2c:76:cc:6d:51:fd:f2:43:da:
                    e2:80:0b:1d:dd:61:fa:f6:50:09:fd:69:4b:71:c1:
                    9d:87:cb:e3:50:83:5d:24:ac:ee:0e:1f:ae:60:4a:
                    80:d2:b6:74:73:4a:48:ce:3f:cf:df:d5:47:5b:7b:
                    9b:c9:0d:0f:cc:55:fe:4b:34:e5:7c:e7:a7:f3:2f:
                    b0:4c:e0:7a:46:a4:99:82:ac:20:b4:75:d2:d9:34:
                    97:0a:26:1e:f3:b4:bd:03:59:f1:da:8c:5d:c9:49:
                    a8:f4:22:1b:49:fb:de:7f:6a:a1:2b:0e:20:45:49:
                    a9:4f:ec:74:9c:49:a1:5c:e5:70:3d:46:db:88:dc:
                    6d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:05:05:D6:2C:E8:8C:DA:4C:8F:14:01:D4:22:27:D6:5F:47:87:8B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/797d3498-a160-4006-845e-131ce55f21f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f00:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         b4:9f:e9:9f:2c:68:29:18:94:54:9f:b3:bb:df:a3:50:cd:5a:
         ab:9d:72:96:da:57:cb:50:88:f4:17:af:9e:eb:69:66:65:8e:
         f3:8d:54:63:85:da:ed:fe:f6:31:a8:bb:ec:7f:f8:6a:7a:a4:
         41:99:8d:78:4a:61:ab:03:07:b7:eb:12:72:e8:35:bd:10:72:
         03:32:0e:ee:aa:88:21:0c:9a:06:4c:64:7a:63:6f:5e:d3:22:
         ed:f5:80:ca:68:b8:c2:32:8e:7c:d1:0a:8a:70:bb:bf:39:64:
         93:60:48:b6:0e:3f:56:77:62:f4:e6:6a:21:b1:c6:fe:72:ee:
         25:d3:04:78:06:ad:b2:9b:22:1b:a3:30:7a:f4:15:e3:b4:5a:
         e5:c2:e7:17:a1:95:5d:8e:e3:7e:6f:c4:c9:be:9a:bc:70:6d:
         47:94:5d:81:9f:06:95:e8:8f:4c:2d:7b:c0:82:63:7c:72:dc:
         b0:65:a4:e1:57:70:b2:32:9a:9f:6f:83:5a:04:e5:37:65:f7:
         3a:0d:2e:b7:31:56:cc:5e:e0:41:82:15:af:b0:60:00:ea:78:
         c3:2e:07:d0:47:8c:2e:68:c4:96:60:7a:78:9e:13:39:93:78:
         7c:7b:e4:a6:e8:6a:ae:67:4a:e1:2d:94:a1:d0:6e:59:dd:c8:
         e3:3b:6e:c1
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUXvq5Ukj7lg4Oj2f9T0xJqusZoBYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA0MDA0MTEzWhcNMjYxMTAyMjM1OTU5
WjB6MUkwRwYDVQQFE0AxY2RkNjYxMWIwOGUxNjBmOTEzMjFhYzFlZmVjMjc5NDVj
MWVhN2EyMDY0M2IxOTFhYzFhZTk1ZjQ0YWIzNWVhMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDA/kZlR74x3uJfHPph7ORqdBzeIsQYxH8L/Q3fuhwGJhKI
Cisaxm6W4PzMS4wjHaJ1iiG1IF+Q6VzVW/CbbgHO4JLVhx7WvpwKJl7RWhuPzfJg
5IRu+Ylb5H3Xmkaf1cBmR/OGQZsy+IzGfA3sHUVWhFu7IhZ3o1tWYYGy6ix2zG1R
/fJD2uKACx3dYfr2UAn9aUtxwZ2Hy+NQg10krO4OH65gSoDStnRzSkjOP8/f1Udb
e5vJDQ/MVf5LNOV856fzL7BM4HpGpJmCrCC0ddLZNJcKJh7ztL0DWfHajF3JSaj0
IhtJ+95/aqErDiBFSalP7HScSaFc5XA9RtuI3G1LAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUTgUF1izojNpMjxQB1CIn1l9Hh4swHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzc5N2QzNDk4LWExNjAtNDAwNi04NDVlLTEzMWNlNTVmMjFmNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB8AQDANBgkqhkiG9w0BAQsFAAOCAQEAtJ/pnyxoKRiUVJ+zu9+jUM1a
q51yltpXy1CI9BevnutpZmWO841UY4Xa7f72Mai77H/4anqkQZmNeEphqwMHt+sS
cug1vRByAzIO7qqIIQyaBkxkemNvXtMi7fWAymi4wjKOfNEKinC7vzlkk2BItg4/
Vndi9OZqIbHG/nLuJdMEeAatspsiG6MwevQV47Ra5cLnF6GVXY7jfm/Eyb6avHBt
R5RdgZ8GleiPTC17wIJjfHLcsGWk4VdwsjKan2+DWgTlN2X3Og0utzFWzF7gQYIV
r7BgAOp4wy4H0EeMLmjElmB6eJ4TOZN4fHvkpuhqrmdK4S2UodBuWd3I4ztuwQ==
-----END CERTIFICATE-----
Generated at Thu Sep 17 18:52:34 2026 by rpki-client