Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9d2a7c19-dc41-408f-891e-f098b8e0dcec.roa
File:                     9d2a7c19-dc41-408f-891e-f098b8e0dcec.roa (raw, json)
Hash identifier:          e2haQ23vTMaS4MkgykCMi15PUE/ao3lLhMKR6c1pTpk=
Subject key identifier:   AD:A4:44:81:F7:E6:D8:54:FB:97:A2:44:BC:6A:10:63:71:21:30:EA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       134C59940D1B16BB186F18A5E8241BE6FE53F05B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9d2a7c19-dc41-408f-891e-f098b8e0dcec.roa
Signing time:             Tue 18 Aug 2026 18:05:02 +0000
ROA not before:           Tue 18 Aug 2026 18:05:02 +0000
ROA not after:            Mon 16 Nov 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f33:c000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:4c:59:94:0d:1b:16:bb:18:6f:18:a5:e8:24:1b:e6:fe:53:f0:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 18 18:05:02 2026 GMT
            Not After : Nov 16 23:59:59 2026 GMT
        Subject: serialNumber=a1479fd0a981275c76e1d0f2f91b2e42495f5d40b67e0bfd402ab102dc2bf97f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:27:38:ab:d5:82:cc:fb:67:39:f5:ee:ce:70:
                    a8:5f:30:c1:17:1e:b2:90:11:63:82:8c:1a:ba:77:
                    48:71:ad:3e:ff:e6:e7:5d:51:e2:22:8e:c4:b6:a4:
                    b3:d3:2b:f9:66:2c:77:f8:0d:e1:4f:f9:67:d4:91:
                    48:f5:bf:0c:48:d5:2e:bd:7d:47:d7:40:db:da:aa:
                    f0:5a:c4:60:59:65:22:32:32:af:95:8c:c8:da:99:
                    10:9f:94:67:41:39:bb:54:0b:63:ee:4b:25:4c:af:
                    6f:25:38:1e:4b:66:63:b2:83:7f:6e:05:eb:31:e9:
                    ea:a8:fe:a6:61:38:a5:8e:c0:6c:49:e9:9c:9a:d5:
                    1c:54:eb:18:34:27:f6:7d:22:69:83:46:bc:1c:b0:
                    52:51:6e:fd:e3:eb:85:67:ec:50:cc:b3:50:eb:8d:
                    45:68:8a:bd:98:76:57:bf:3c:7f:8d:42:b4:6e:cf:
                    0e:82:64:14:51:80:93:e9:93:9b:8e:3d:42:9a:1a:
                    b6:61:72:9d:0a:a5:00:1f:62:8a:dd:a0:da:ab:9f:
                    90:4b:47:d2:ec:ba:29:ae:ee:4c:c9:61:aa:fc:78:
                    02:1f:ca:b0:05:e8:37:f1:a4:43:0d:79:75:8c:44:
                    f4:72:f2:7e:ea:a3:ce:b5:76:3d:0b:c9:36:84:63:
                    53:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:A4:44:81:F7:E6:D8:54:FB:97:A2:44:BC:6A:10:63:71:21:30:EA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9d2a7c19-dc41-408f-891e-f098b8e0dcec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f33:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         22:e5:d4:a4:e0:6c:af:33:da:d1:c0:dd:3a:c7:69:b8:3c:fe:
         19:8a:91:e1:47:1d:3c:d8:7d:a2:a7:62:da:aa:ac:d9:8c:b0:
         34:01:a1:5a:df:74:4b:3c:a1:cd:ad:5f:e5:28:c6:2e:92:cb:
         92:c3:4c:3f:b4:ae:70:50:0a:1f:98:99:21:de:1f:e8:63:47:
         b3:ed:a4:f1:6a:b2:c6:38:81:f7:b5:8f:8d:50:0a:79:fc:16:
         6b:d4:67:10:0d:08:a1:be:03:e9:a7:63:13:88:db:c0:b1:92:
         1e:7f:6d:f3:8a:d3:78:18:af:35:35:70:b4:7f:3f:58:49:d6:
         98:13:b8:99:d1:d8:7c:fe:43:58:20:cd:ce:6c:72:2d:51:5f:
         27:bb:3a:a4:f3:12:9e:f0:56:f4:37:46:3c:0d:43:73:42:73:
         86:c7:73:cc:28:35:0f:de:be:2a:75:b8:10:fa:6d:05:bb:94:
         86:85:e8:0a:6d:2b:c7:b2:1a:94:7e:de:ca:61:12:54:86:1c:
         58:cb:2a:54:88:12:5a:e3:db:e5:f0:4f:c1:06:bf:bc:03:92:
         9f:8b:f5:d0:09:39:fb:10:f1:9e:b9:c7:91:a5:a5:17:a9:40:
         c7:07:fb:88:b2:91:01:24:64:06:9b:90:df:84:cf:9b:52:3d:
         10:8d:4f:69
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUE0xZlA0bFrsYbxil6CQb5v5T8FswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODE4MTgwNTAyWhcNMjYxMTE2MjM1OTU5
WjB6MUkwRwYDVQQFE0BhMTQ3OWZkMGE5ODEyNzVjNzZlMWQwZjJmOTFiMmU0MjQ5
NWY1ZDQwYjY3ZTBiZmQ0MDJhYjEwMmRjMmJmOTdmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCGJzir1YLM+2c59e7OcKhfMMEXHrKQEWOCjBq6d0hxrT7/
5uddUeIijsS2pLPTK/lmLHf4DeFP+WfUkUj1vwxI1S69fUfXQNvaqvBaxGBZZSIy
Mq+VjMjamRCflGdBObtUC2PuSyVMr28lOB5LZmOyg39uBesx6eqo/qZhOKWOwGxJ
6Zya1RxU6xg0J/Z9ImmDRrwcsFJRbv3j64Vn7FDMs1DrjUVoir2Ydle/PH+NQrRu
zw6CZBRRgJPpk5uOPUKaGrZhcp0KpQAfYordoNqrn5BLR9Lsuimu7kzJYar8eAIf
yrAF6DfxpEMNeXWMRPRy8n7qo861dj0LyTaEY1NDAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUraREgffm2FT7l6JEvGoQY3EhMOowHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzlkMmE3YzE5LWRjNDEtNDA4Zi04OTFlLWYwOThiOGUwZGNlYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB8zwDANBgkqhkiG9w0BAQsFAAOCAQEAIuXUpOBsrzPa0cDdOsdpuDz+
GYqR4UcdPNh9oqdi2qqs2YywNAGhWt90Szyhza1f5SjGLpLLksNMP7SucFAKH5iZ
Id4f6GNHs+2k8WqyxjiB97WPjVAKefwWa9RnEA0Iob4D6adjE4jbwLGSHn9t84rT
eBivNTVwtH8/WEnWmBO4mdHYfP5DWCDNzmxyLVFfJ7s6pPMSnvBW9DdGPA1Dc0Jz
hsdzzCg1D96+KnW4EPptBbuUhoXoCm0rx7IalH7eymESVIYcWMsqVIgSWuPb5fBP
wQa/vAOSn4v10Ak5+xDxnrnHkaWlF6lAxwf7iLKRASRkBpuQ34TPm1I9EI1PaQ==
-----END CERTIFICATE-----
Generated at Thu Aug 20 22:53:09 2026 by rpki-client