Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/87972863-6bed-4fd0-8654-ba8d4fa79897.roa
File:                     87972863-6bed-4fd0-8654-ba8d4fa79897.roa (raw, json)
Hash identifier:          HyJOj8vZe9sZ2xk5CK6WrEg5l30CkkV4TXzyHqZqi0w=
Subject key identifier:   99:CD:78:66:40:14:00:58:77:C8:4E:42:3C:11:7B:EE:4B:9A:7A:AA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5101913027F52752638F2AE511F0483F9D630F93
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/87972863-6bed-4fd0-8654-ba8d4fa79897.roa
Signing time:             Fri 09 Oct 2026 01:11:11 +0000
ROA not before:           Fri 09 Oct 2026 01:11:11 +0000
ROA not after:            Thu 07 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f38:8000::/39 maxlen: 39
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:01:91:30:27:f5:27:52:63:8f:2a:e5:11:f0:48:3f:9d:63:0f:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  9 01:11:11 2026 GMT
            Not After : Jan  7 23:59:59 2027 GMT
        Subject: serialNumber=beb7eb83868f4940a54fc924743d1c549c2526415147934ab7b111ed59715800, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9f:96:da:ac:30:1f:84:f3:b5:90:b0:8e:89:
                    03:a2:be:27:61:55:9b:6b:35:1c:32:85:37:33:45:
                    40:4d:2f:20:05:06:7b:cd:c7:cf:6b:ae:b3:bb:cd:
                    b2:36:1e:e8:2a:6f:62:c5:b5:af:90:d2:8a:00:6e:
                    29:e2:6e:23:99:16:e9:c2:81:ab:aa:cf:0d:1c:7b:
                    57:02:d7:9a:97:52:6b:2b:eb:01:aa:0b:d7:ba:69:
                    9b:94:fc:ca:ae:13:ae:67:be:09:04:ad:2b:be:c3:
                    cb:ed:9a:95:39:10:3c:6d:72:7a:6f:9c:2c:22:a4:
                    95:68:34:f8:8f:ad:d8:66:98:c3:be:1c:17:3a:51:
                    25:65:39:5c:0c:b0:17:9f:26:e8:4a:37:fc:5d:6d:
                    f4:60:6a:d5:7f:74:a9:b9:23:50:97:b9:35:eb:c3:
                    44:f7:7f:ab:5f:85:6d:41:08:f4:6b:88:14:bf:d7:
                    f3:9f:a5:04:5f:6a:72:8e:72:0b:35:37:35:16:6d:
                    e6:8a:46:e7:26:b6:0c:34:aa:6d:18:ac:c7:9d:fd:
                    f7:ab:be:53:a6:90:49:c7:6b:45:41:ea:f9:cb:1d:
                    a3:ed:dd:4f:21:6f:d9:68:83:ca:b8:03:67:eb:2b:
                    45:52:a7:b5:aa:04:d6:48:17:7a:5d:6f:cb:59:ef:
                    03:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:CD:78:66:40:14:00:58:77:C8:4E:42:3C:11:7B:EE:4B:9A:7A:AA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/87972863-6bed-4fd0-8654-ba8d4fa79897.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f38:8000::/39

    Signature Algorithm: sha256WithRSAEncryption
         86:9f:f8:d1:6f:68:fd:42:5b:ef:4d:b1:12:18:d3:b9:f8:fc:
         8a:47:92:18:2d:22:23:30:e6:1c:9d:42:ab:bd:99:f7:17:47:
         93:1c:fc:54:34:f4:ae:6e:34:b8:c1:b7:fe:f2:49:28:be:d3:
         d0:07:dc:f8:20:c7:f9:b4:e3:f3:24:22:24:0f:51:9a:c3:e1:
         c5:bd:7a:21:cc:7a:bc:0a:8a:a5:6a:03:46:f3:ac:68:7c:49:
         60:3f:e3:af:a3:10:c5:35:fd:c3:41:b8:55:3f:9c:a0:58:86:
         26:98:2c:46:b4:6f:ef:1b:35:71:bc:bc:8f:0b:5f:d6:83:fb:
         b5:f2:a7:c9:1d:23:45:bb:12:b2:6b:06:68:04:d3:a2:3c:c3:
         7c:93:4a:33:9a:25:6b:b3:fd:08:1c:f9:84:45:a7:50:8a:b7:
         30:99:9b:0b:80:cd:72:13:8e:b2:ba:27:92:10:30:60:84:8e:
         33:cf:62:be:ac:3a:ff:0f:d7:36:d6:cc:b4:7a:fa:42:e8:fa:
         14:a3:ec:1a:2f:11:a9:9e:a5:67:46:30:7b:35:e1:23:d8:91:
         3e:6e:04:80:0c:28:8c:f4:54:f5:06:60:ea:11:c9:9b:97:0c:
         b3:d7:bc:9a:ec:12:64:c8:2e:19:45:5c:3b:3e:fb:e6:f3:53:
         35:4c:1d:d0
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUUQGRMCf1J1JjjyrlEfBIP51jD5MwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA5MDExMTExWhcNMjcwMTA3MjM1OTU5
WjB6MUkwRwYDVQQFE0BiZWI3ZWI4Mzg2OGY0OTQwYTU0ZmM5MjQ3NDNkMWM1NDlj
MjUyNjQxNTE0NzkzNGFiN2IxMTFlZDU5NzE1ODAwMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCin5barDAfhPO1kLCOiQOividhVZtrNRwyhTczRUBNLyAF
BnvNx89rrrO7zbI2Hugqb2LFta+Q0ooAbinibiOZFunCgauqzw0ce1cC15qXUmsr
6wGqC9e6aZuU/MquE65nvgkErSu+w8vtmpU5EDxtcnpvnCwipJVoNPiPrdhmmMO+
HBc6USVlOVwMsBefJuhKN/xdbfRgatV/dKm5I1CXuTXrw0T3f6tfhW1BCPRriBS/
1/OfpQRfanKOcgs1NzUWbeaKRucmtgw0qm0YrMed/fervlOmkEnHa0VB6vnLHaPt
3U8hb9log8q4A2frK0VSp7WqBNZIF3pdb8tZ7wP7AgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUmc14ZkAUAFh3yE5CPBF77kuaeqowHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzg3OTcyODYzLTZiZWQtNGZkMC04NjU0LWJhOGQ0ZmE3OTg5Ny5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgEmAB84gDANBgkqhkiG9w0BAQsFAAOCAQEAhp/40W9o/UJb702xEhjTufj8
ikeSGC0iIzDmHJ1Cq72Z9xdHkxz8VDT0rm40uMG3/vJJKL7T0Afc+CDH+bTj8yQi
JA9RmsPhxb16Icx6vAqKpWoDRvOsaHxJYD/jr6MQxTX9w0G4VT+coFiGJpgsRrRv
7xs1cby8jwtf1oP7tfKnyR0jRbsSsmsGaATTojzDfJNKM5ola7P9CBz5hEWnUIq3
MJmbC4DNchOOsronkhAwYISOM89ivqw6/w/XNtbMtHr6Quj6FKPsGi8RqZ6lZ0Yw
ezXhI9iRPm4EgAwojPRU9QZg6hHJm5cMs9e8muwSZMguGUVcOz775vNTNUwd0A==
-----END CERTIFICATE-----
Generated at Mon Nov 2 16:46:56 2026 by rpki-client