Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83d7516f-1510-4761-918c-750b42e47b27.roa
File:                     83d7516f-1510-4761-918c-750b42e47b27.roa (raw, json)
Hash identifier:          oqKLa0IOd2PS+Nil2G9aJDrMwZ1I8sRY3p3hi6VpmmI=
Subject key identifier:   C1:C2:EE:87:66:87:8A:FC:29:B2:53:FA:67:AC:54:E0:A9:20:41:E5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       75C52C47E457649312C3D32FBCB8AC28F519D4D2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83d7516f-1510-4761-918c-750b42e47b27.roa
Signing time:             Sat 02 May 2026 01:00:06 +0000
ROA not before:           Sat 02 May 2026 01:00:06 +0000
ROA not after:            Fri 31 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff3:1020::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:c5:2c:47:e4:57:64:93:12:c3:d3:2f:bc:b8:ac:28:f5:19:d4:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  2 01:00:06 2026 GMT
            Not After : Jul 31 23:59:59 2026 GMT
        Subject: serialNumber=942d44e062c560c3199852d26a8c1fe2ccda6f42ac57e0fd01219c343ee437e3, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:48:14:8d:13:90:b7:98:88:17:2e:cb:51:f1:
                    ee:47:ee:c4:2f:3e:d9:c6:1d:3b:ce:d0:f6:20:1a:
                    1a:44:7a:ab:ed:d6:73:8d:ae:41:c7:43:34:6f:84:
                    39:95:9b:86:cd:53:56:85:bd:0c:e6:95:12:eb:75:
                    63:5d:c8:08:bf:09:c2:ae:b0:39:70:59:1d:85:31:
                    57:06:23:21:d3:30:91:79:ba:f7:b6:d2:4a:2a:ec:
                    3a:38:da:20:97:bb:6f:9a:fc:c6:7a:5d:2a:db:b2:
                    a6:8b:27:0d:ea:c4:86:49:45:9c:ba:b5:a3:71:96:
                    02:ae:25:e0:27:04:67:7c:01:ee:e8:4f:e9:5a:34:
                    1e:c6:d6:26:0f:ee:de:bb:24:6a:fd:3d:e8:a5:67:
                    07:88:37:1b:80:16:58:f2:34:55:fc:39:d9:b8:39:
                    da:46:ec:af:8f:3f:b6:b2:73:d7:1a:4a:13:55:6f:
                    a5:f0:5b:2e:32:c4:ff:f9:a8:15:2e:10:f9:7e:26:
                    80:85:fe:7e:27:57:80:ca:77:3b:92:64:c1:50:99:
                    2c:11:20:eb:99:57:3d:7a:e7:04:b4:83:8c:46:cf:
                    c2:66:e3:61:b4:c6:f1:f0:75:e2:1d:f6:68:fe:14:
                    1b:3d:78:28:ba:ca:b5:00:d6:00:8d:71:c7:62:65:
                    11:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:C2:EE:87:66:87:8A:FC:29:B2:53:FA:67:AC:54:E0:A9:20:41:E5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83d7516f-1510-4761-918c-750b42e47b27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff3:1020::/46

    Signature Algorithm: sha256WithRSAEncryption
         07:5d:75:f2:26:4d:a6:7d:bf:36:d3:f8:f2:a2:a5:b5:09:ce:
         c5:06:2b:c4:8c:ab:a4:da:1e:44:14:4c:76:ea:5b:b2:c4:53:
         08:7f:e4:c6:8e:43:14:4f:e5:c5:f3:8e:0d:6b:82:d5:8c:96:
         12:ea:d6:4b:81:58:2e:18:46:ad:3d:25:de:c2:5d:a9:13:93:
         00:09:ee:52:7a:b2:49:96:3a:48:91:81:b7:38:cf:e1:22:bb:
         b2:e4:cb:fa:9a:4d:67:2a:a4:16:85:29:f2:e3:46:a3:76:e7:
         62:24:67:f5:1f:76:f6:28:dd:42:6e:3a:25:cb:a2:30:25:a6:
         d1:47:0f:eb:2e:8c:88:4a:8e:23:c8:d0:f4:fe:9a:3e:f2:5e:
         aa:74:5a:08:49:c6:d5:20:16:1b:18:c5:53:e9:c6:8c:ab:23:
         31:f1:9a:78:76:66:1b:4c:e4:5b:26:b8:1c:ad:db:a0:88:55:
         ce:3c:8c:a9:46:d0:ee:cc:61:6d:1e:5f:42:90:c6:a5:3a:d0:
         60:05:da:9b:56:19:2b:2c:61:79:fc:f6:1e:5c:83:d8:da:5d:
         d8:01:1f:77:4c:c8:58:e8:cf:8d:d4:72:17:57:01:21:4d:13:
         07:6e:b2:97:4d:7a:b1:89:69:2a:d4:43:58:86:84:15:4b:45:
         c1:44:90:49
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUdcUsR+RXZJMSw9MvvLisKPUZ1NIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTAyMDEwMDA2WhcNMjYwNzMxMjM1OTU5
WjB6MUkwRwYDVQQFE0A5NDJkNDRlMDYyYzU2MGMzMTk5ODUyZDI2YThjMWZlMmNj
ZGE2ZjQyYWM1N2UwZmQwMTIxOWMzNDNlZTQzN2UzMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDUSBSNE5C3mIgXLstR8e5H7sQvPtnGHTvO0PYgGhpEeqvt
1nONrkHHQzRvhDmVm4bNU1aFvQzmlRLrdWNdyAi/CcKusDlwWR2FMVcGIyHTMJF5
uve20koq7Do42iCXu2+a/MZ6XSrbsqaLJw3qxIZJRZy6taNxlgKuJeAnBGd8Ae7o
T+laNB7G1iYP7t67JGr9PeilZweINxuAFljyNFX8Odm4OdpG7K+PP7ayc9caShNV
b6XwWy4yxP/5qBUuEPl+JoCF/n4nV4DKdzuSZMFQmSwRIOuZVz165wS0g4xGz8Jm
42G0xvHwdeId9mj+FBs9eCi6yrUA1gCNccdiZRFZAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUwcLuh2aHivwpslP6Z6xU4KkgQeUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzgzZDc1MTZmLTE1MTAtNDc2MS05MThjLTc1MGI0MmU0N2IyNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImAB/zECAwDQYJKoZIhvcNAQELBQADggEBAAdddfImTaZ9vzbT+PKipbUJ
zsUGK8SMq6TaHkQUTHbqW7LEUwh/5MaOQxRP5cXzjg1rgtWMlhLq1kuBWC4YRq09
Jd7CXakTkwAJ7lJ6skmWOkiRgbc4z+Eiu7Lky/qaTWcqpBaFKfLjRqN252IkZ/Uf
dvYo3UJuOiXLojAlptFHD+sujIhKjiPI0PT+mj7yXqp0WghJxtUgFhsYxVPpxoyr
IzHxmnh2ZhtM5FsmuByt26CIVc48jKlG0O7MYW0eX0KQxqU60GAF2ptWGSssYXn8
9h5cg9jaXdgBH3dMyFjoz43UchdXASFNEwduspdNerGJaSrUQ1iGhBVLRcFEkEk=
-----END CERTIFICATE-----
Generated at Mon May 4 21:39:27 2026 by rpki-client