Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9275dae5-5753-4531-b3f4-71757dd2b784.roa
File:                     9275dae5-5753-4531-b3f4-71757dd2b784.roa (raw, json)
Hash identifier:          UrNyBi94wecK+bcxVnh5b96FO5tQX3VPsckcF3r1NG0=
Subject key identifier:   4D:2E:0E:23:C2:53:7E:70:75:67:D7:92:B7:F8:DE:8A:72:B3:65:BD
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1AC481CA6764E33FCA208ECFEE0895DAC44C749C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9275dae5-5753-4531-b3f4-71757dd2b784.roa
Signing time:             Sun 11 Oct 2026 00:20:38 +0000
ROA not before:           Sun 11 Oct 2026 00:20:38 +0000
ROA not after:            Sat 09 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff1:ec00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:c4:81:ca:67:64:e3:3f:ca:20:8e:cf:ee:08:95:da:c4:4c:74:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 11 00:20:38 2026 GMT
            Not After : Jan  9 23:59:59 2027 GMT
        Subject: serialNumber=1c2b3bf6662ed455784252d24731b745191470b6a011c7ac0f5a03fe0c4aa454, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:12:b1:b6:3a:66:cf:b7:20:b2:1a:c4:d7:f9:
                    9e:82:26:db:cd:40:7f:20:67:5c:23:a1:06:08:64:
                    d1:f3:ab:5b:c6:8b:10:e8:93:57:01:88:78:fa:ee:
                    28:7c:c1:87:4f:8e:bf:bb:6d:9b:1c:cb:b3:83:23:
                    5f:93:47:c8:1a:fe:d7:4d:2b:35:f4:6b:2d:53:a0:
                    44:03:ad:2c:c3:35:8a:ec:ae:af:a9:a7:9c:6e:e0:
                    4b:f0:50:09:b2:37:77:a4:8d:b2:4f:6c:7a:1e:d6:
                    5a:f8:f4:81:41:e2:71:d4:74:19:73:85:e0:a1:71:
                    88:2d:d8:94:c5:9c:65:a1:31:c5:fb:d5:74:b5:bc:
                    16:e0:9a:ce:c7:d5:d4:c1:a3:84:3a:08:d2:04:e2:
                    8f:86:68:30:bf:b5:d9:8b:6a:56:bf:f7:70:f8:36:
                    1e:46:e1:d1:5d:5e:6a:83:8d:37:76:ec:cf:87:c5:
                    31:5e:ec:a6:39:b4:21:31:ef:f5:a0:ed:47:48:8a:
                    3c:02:75:7c:57:17:62:53:6b:f9:19:d2:16:90:7b:
                    81:a2:1c:09:90:39:75:d1:9d:b6:87:09:af:56:3a:
                    e7:cd:89:70:47:c8:37:cb:03:51:56:3d:9a:b0:0d:
                    45:ea:ce:b4:28:62:1e:3f:a7:f4:80:b1:be:8d:f4:
                    b4:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:2E:0E:23:C2:53:7E:70:75:67:D7:92:B7:F8:DE:8A:72:B3:65:BD
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9275dae5-5753-4531-b3f4-71757dd2b784.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff1:ec00::/40

    Signature Algorithm: sha256WithRSAEncryption
         0a:be:1d:43:85:45:f6:d3:46:16:3c:8b:5c:6d:fe:f7:23:2f:
         e7:16:32:3c:0b:e5:ba:91:f1:6a:d0:02:a5:3f:fb:e6:49:46:
         ea:73:ff:f2:69:bc:62:14:d4:65:0d:8c:16:2e:4b:29:0b:36:
         23:23:6b:fc:d2:cd:4b:15:21:c0:ea:8c:e4:8e:eb:51:76:f6:
         c3:a3:d3:c5:51:cd:41:65:1a:bc:1a:c4:93:26:69:bf:63:39:
         0e:a9:8f:a6:eb:4d:aa:0d:99:f0:96:e5:3e:65:05:24:26:ba:
         ff:35:68:c3:b2:1c:b6:40:7a:55:a5:cc:ea:22:e7:62:ee:6f:
         00:14:05:df:f8:16:7b:8a:7a:54:de:c6:49:c8:4b:dd:55:a5:
         db:01:fe:b4:4a:43:fd:f0:e3:b2:8c:46:f3:6f:8f:70:5a:1c:
         fb:ab:ff:b2:61:48:d4:a0:a5:e8:72:70:cc:98:ea:74:33:9e:
         6a:a1:7f:3e:a9:ff:41:ec:08:b8:18:8c:70:82:2d:b4:4d:fd:
         f2:2b:9c:e9:45:dc:cd:8d:d6:9f:92:89:69:96:d2:03:70:96:
         f6:23:76:8f:b8:97:12:3e:e5:1c:0a:18:6a:68:fc:36:72:86:
         27:62:71:84:84:a6:0b:65:28:e7:08:2d:28:1e:e7:e9:9b:b2:
         5c:0d:1f:99
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUGsSBymdk4z/KII7P7giV2sRMdJwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDExMDAyMDM4WhcNMjcwMTA5MjM1OTU5
WjB6MUkwRwYDVQQFE0AxYzJiM2JmNjY2MmVkNDU1Nzg0MjUyZDI0NzMxYjc0NTE5
MTQ3MGI2YTAxMWM3YWMwZjVhMDNmZTBjNGFhNDU0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC3ErG2OmbPtyCyGsTX+Z6CJtvNQH8gZ1wjoQYIZNHzq1vG
ixDok1cBiHj67ih8wYdPjr+7bZscy7ODI1+TR8ga/tdNKzX0ay1ToEQDrSzDNYrs
rq+pp5xu4EvwUAmyN3ekjbJPbHoe1lr49IFB4nHUdBlzheChcYgt2JTFnGWhMcX7
1XS1vBbgms7H1dTBo4Q6CNIE4o+GaDC/tdmLala/93D4Nh5G4dFdXmqDjTd27M+H
xTFe7KY5tCEx7/Wg7UdIijwCdXxXF2JTa/kZ0haQe4GiHAmQOXXRnbaHCa9WOufN
iXBHyDfLA1FWPZqwDUXqzrQoYh4/p/SAsb6N9LSVAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUTS4OI8JTfnB1Z9eSt/jeinKzZb0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzkyNzVkYWU1LTU3NTMtNDUzMS1iM2Y0LTcxNzU3ZGQyYjc4NC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB/x7DANBgkqhkiG9w0BAQsFAAOCAQEACr4dQ4VF9tNGFjyLXG3+9yMv
5xYyPAvlupHxatACpT/75klG6nP/8mm8YhTUZQ2MFi5LKQs2IyNr/NLNSxUhwOqM
5I7rUXb2w6PTxVHNQWUavBrEkyZpv2M5DqmPputNqg2Z8JblPmUFJCa6/zVow7Ic
tkB6VaXM6iLnYu5vABQF3/gWe4p6VN7GSchL3VWl2wH+tEpD/fDjsoxG82+PcFoc
+6v/smFI1KCl6HJwzJjqdDOeaqF/Pqn/QewIuBiMcIIttE398iuc6UXczY3Wn5KJ
aZbSA3CW9iN2j7iXEj7lHAoYamj8NnKGJ2JxhISmC2Uo5wgtKB7n6ZuyXA0fmQ==
-----END CERTIFICATE-----
Generated at Tue Nov 3 19:23:20 2026 by rpki-client