Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9bff93e5-d08c-4c01-9251-abcb997a5276.roa
File:                     9bff93e5-d08c-4c01-9251-abcb997a5276.roa (raw, json)
Hash identifier:          A6W8jebOJTI6YrtvZXnUF9RrjR/ds0iWDvx605cKsiE=
Subject key identifier:   E4:5B:92:25:5B:8C:93:B8:13:CA:AB:2C:C2:89:8F:46:9F:2A:F5:11
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       33E84D95A1DD8B8D151B3882DDD216F7D9978A8B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9bff93e5-d08c-4c01-9251-abcb997a5276.roa
Signing time:             Mon 03 Aug 2026 01:00:13 +0000
ROA not before:           Mon 03 Aug 2026 01:00:13 +0000
ROA not after:            Sun 01 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f00:4020::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:e8:4d:95:a1:dd:8b:8d:15:1b:38:82:dd:d2:16:f7:d9:97:8a:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  3 01:00:13 2026 GMT
            Not After : Nov  1 23:59:59 2026 GMT
        Subject: serialNumber=8cd8135ddd76af7d20ec418bc70ad8dd82c92c7ea6e519b272fed23fafa8642c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7a:cf:0a:82:9c:bc:b4:da:f6:8e:3a:f4:2c:
                    dc:e3:a1:76:02:ea:82:a6:0a:a3:42:c1:5a:08:da:
                    27:3a:a1:59:ea:2d:da:e9:85:1d:82:25:38:4d:66:
                    24:d2:2f:a4:e8:c7:78:53:23:01:85:be:3b:5e:3d:
                    08:25:9e:66:7e:11:0c:d7:10:cf:48:f2:81:7b:53:
                    e0:55:3b:81:94:33:70:fc:dc:b6:ea:95:84:86:42:
                    cd:e8:b4:65:e9:e2:51:36:31:6f:34:8f:5b:1b:bf:
                    4c:c6:6a:c8:9b:43:ed:9d:96:31:25:86:bb:70:aa:
                    2b:e7:ae:38:b9:de:36:cd:fb:7c:41:a9:87:ca:db:
                    a8:c3:15:a6:47:56:a4:7d:a9:4e:77:5e:be:41:27:
                    00:d1:4a:3c:bd:a0:a1:c0:51:29:97:2e:66:07:64:
                    0b:24:80:08:ec:92:d4:3a:4b:43:b3:e1:09:cb:3c:
                    03:3b:1f:d2:2a:6c:7d:35:1e:90:7c:58:1c:12:26:
                    b3:27:2d:06:f9:ec:56:7f:e7:26:8d:a7:1e:e0:24:
                    44:b5:f1:17:ce:89:dd:53:cb:f4:96:fe:87:50:42:
                    e2:3f:8b:70:20:63:16:b0:62:aa:be:37:a4:21:46:
                    c1:08:d5:dc:69:ec:11:d8:ab:ac:48:20:ec:ec:5a:
                    66:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:5B:92:25:5B:8C:93:B8:13:CA:AB:2C:C2:89:8F:46:9F:2A:F5:11
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9bff93e5-d08c-4c01-9251-abcb997a5276.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f00:4020::/48

    Signature Algorithm: sha256WithRSAEncryption
         d2:f3:a3:1c:10:dc:8d:56:d7:03:37:33:99:45:e6:bc:4c:49:
         ea:08:ec:e6:0b:66:4e:76:7d:73:14:45:c9:e0:87:ee:ce:e2:
         1f:a6:86:27:d2:ea:8f:5a:c7:c3:a6:49:a9:40:63:57:95:a7:
         6e:77:f2:ee:b2:ae:26:75:ae:7f:81:84:c2:53:4c:e1:c9:a3:
         92:4a:06:40:cb:ca:09:39:fa:d4:a7:27:86:70:d7:60:16:a2:
         a7:f9:7d:03:03:ab:17:58:2e:c5:6a:a5:17:31:45:28:40:8a:
         ac:3d:8a:75:c7:85:82:19:86:1e:e7:d9:5e:97:6e:55:fe:4e:
         0f:46:b9:9f:91:c0:7a:9d:1d:14:b0:b0:25:c2:4f:1a:62:fb:
         4e:85:9e:c2:b2:1a:d4:9f:65:fb:d1:80:0e:d9:9d:d5:38:78:
         85:d6:76:ce:0b:f0:51:72:0f:76:4a:4d:d3:4a:38:9f:82:d8:
         02:4b:df:91:a5:2b:c3:5e:03:d0:cc:b2:2f:4d:ac:c3:42:0c:
         d0:b3:8d:50:aa:c6:f9:02:d4:b4:9d:e6:58:4f:70:30:98:71:
         f4:a2:06:91:1e:98:6f:42:f5:30:19:73:27:63:e6:b8:5f:e4:
         ed:ee:44:81:9f:fb:28:0d:50:ac:e5:a6:bd:67:89:3d:79:d1:
         8c:78:68:07
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUM+hNlaHdi40VGziC3dIW99mXioswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODAzMDEwMDEzWhcNMjYxMTAxMjM1OTU5
WjB6MUkwRwYDVQQFE0A4Y2Q4MTM1ZGRkNzZhZjdkMjBlYzQxOGJjNzBhZDhkZDgy
YzkyYzdlYTZlNTE5YjI3MmZlZDIzZmFmYTg2NDJjMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCoes8Kgpy8tNr2jjr0LNzjoXYC6oKmCqNCwVoI2ic6oVnq
LdrphR2CJThNZiTSL6Tox3hTIwGFvjtePQglnmZ+EQzXEM9I8oF7U+BVO4GUM3D8
3LbqlYSGQs3otGXp4lE2MW80j1sbv0zGasibQ+2dljElhrtwqivnrji53jbN+3xB
qYfK26jDFaZHVqR9qU53Xr5BJwDRSjy9oKHAUSmXLmYHZAskgAjsktQ6S0Oz4QnL
PAM7H9IqbH01HpB8WBwSJrMnLQb57FZ/5yaNpx7gJES18RfOid1Ty/SW/odQQuI/
i3AgYxawYqq+N6QhRsEI1dxp7BHYq6xIIOzsWmYvAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU5FuSJVuMk7gTyqsswomPRp8q9REwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzliZmY5M2U1LWQwOGMtNGMwMS05MjUxLWFiY2I5OTdhNTI3Ni5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB8AQCAwDQYJKoZIhvcNAQELBQADggEBANLzoxwQ3I1W1wM3M5lF5rxM
SeoI7OYLZk52fXMURcngh+7O4h+mhifS6o9ax8OmSalAY1eVp2538u6yriZ1rn+B
hMJTTOHJo5JKBkDLygk5+tSnJ4Zw12AWoqf5fQMDqxdYLsVqpRcxRShAiqw9inXH
hYIZhh7n2V6XblX+Tg9GuZ+RwHqdHRSwsCXCTxpi+06FnsKyGtSfZfvRgA7ZndU4
eIXWds4L8FFyD3ZKTdNKOJ+C2AJL35GlK8NeA9DMsi9NrMNCDNCzjVCqxvkC1LSd
5lhPcDCYcfSiBpEemG9C9TAZcydj5rhf5O3uRIGf+ygNUKzlpr1niT150Yx4aAc=
-----END CERTIFICATE-----
Generated at Mon Aug 3 05:42:13 2026 by rpki-client