Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9df526d6-2843-463e-9ea7-c558b6deb39e.roa
File:                     9df526d6-2843-463e-9ea7-c558b6deb39e.roa (raw, json)
Hash identifier:          yBjpFv+ggoSvI+8ENezbCY1LgyEa14nXNMqiWiAeFqY=
Subject key identifier:   25:C2:2B:8A:1C:0E:35:57:A2:3E:34:3A:A5:A2:04:E0:35:C0:14:CE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2637BAA7CC88C79F54E39F2F04EF897E06485B49
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9df526d6-2843-463e-9ea7-c558b6deb39e.roa
Signing time:             Fri 23 Oct 2026 01:03:28 +0000
ROA not before:           Fri 23 Oct 2026 01:03:28 +0000
ROA not after:            Thu 21 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f38:4000::/39 maxlen: 39
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:37:ba:a7:cc:88:c7:9f:54:e3:9f:2f:04:ef:89:7e:06:48:5b:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 23 01:03:28 2026 GMT
            Not After : Jan 21 23:59:59 2027 GMT
        Subject: serialNumber=9010f304f01162dec95bcccec9f9eddad049678b111357b3f4e4efcb478890c2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c7:a9:13:87:7e:f3:c3:3b:d7:ea:44:6a:a4:
                    a9:4f:f0:9d:c5:fd:99:7c:a5:f0:d3:5d:b6:8d:5b:
                    61:78:33:a2:cc:a9:29:e2:e2:33:5f:37:56:53:7b:
                    97:d4:a7:2c:7a:12:a0:5c:8d:45:f1:77:0a:f0:81:
                    e1:ef:5e:f8:3f:43:95:31:3e:ef:a6:40:6b:7d:76:
                    57:8d:67:90:f1:64:6e:92:8c:84:fd:80:d5:5d:c0:
                    06:57:3f:bf:96:77:96:04:46:28:f8:9b:ab:2d:89:
                    dc:5e:25:32:a4:99:a9:7e:47:9c:77:38:bd:ee:3b:
                    c2:67:35:8e:48:5d:3e:04:d7:d6:b6:49:93:70:d0:
                    90:c5:91:ed:3a:bb:5a:ea:a6:41:9e:a8:cc:56:f8:
                    d8:bc:0e:f0:4e:ec:fd:b9:14:a2:9f:d4:cf:53:3e:
                    89:90:b3:e5:a5:05:22:ac:c4:73:ff:ce:e9:3c:6e:
                    a2:b5:ad:ce:c0:38:72:38:46:b3:d8:a0:74:9b:af:
                    d2:f0:a5:e7:f0:f9:e0:22:64:ab:35:8f:4a:93:84:
                    75:f1:a9:42:7d:7c:bc:e6:d0:97:18:e0:e4:a9:77:
                    d4:de:d0:95:c5:65:25:15:8b:b6:66:4a:06:fb:76:
                    95:8b:bb:dc:30:7b:e0:bd:48:60:86:81:e9:d0:8f:
                    72:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:C2:2B:8A:1C:0E:35:57:A2:3E:34:3A:A5:A2:04:E0:35:C0:14:CE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9df526d6-2843-463e-9ea7-c558b6deb39e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f38:4000::/39

    Signature Algorithm: sha256WithRSAEncryption
         3e:ae:a1:1b:e0:d5:b7:39:14:25:82:22:75:f0:ba:52:78:05:
         84:e8:b1:99:6b:f0:59:5d:ea:10:d9:91:dd:06:36:4f:a1:af:
         9f:e2:54:50:db:f4:07:58:74:c4:05:91:94:16:b6:6d:99:6b:
         1d:f3:36:4a:ec:b7:15:fa:f8:f5:cd:4c:60:44:d1:92:4f:32:
         b3:71:85:f5:89:2c:0c:78:d2:d1:1b:88:45:95:b1:39:45:22:
         32:9c:3e:cf:b7:35:e9:9f:52:f3:62:69:cc:2f:6e:46:1a:e9:
         5b:1b:9a:ad:e9:95:29:41:ad:37:b7:55:53:b9:35:5f:82:78:
         df:22:33:08:19:c0:fc:1d:f8:74:01:df:6f:5f:7a:0f:ec:44:
         26:d8:12:9d:f0:fe:96:73:80:5f:9f:cb:00:73:56:cb:7e:7a:
         ac:cb:1c:0b:3a:20:38:7c:50:df:1d:e9:0e:e6:c2:39:9f:1d:
         fa:28:81:38:9e:5c:bb:f4:89:74:35:e2:de:24:15:d8:cb:a3:
         f3:56:e4:bc:ab:66:02:7a:c5:93:5b:64:43:ca:57:ad:23:11:
         a3:2d:a5:40:ed:8d:30:dd:ee:b6:78:e1:8a:b0:0f:1d:24:47:
         08:c1:cc:39:66:f9:16:3b:17:1f:3b:5e:db:e0:8b:28:86:ac:
         6f:7c:40:4a
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUJje6p8yIx59U458vBO+JfgZIW0kwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIzMDEwMzI4WhcNMjcwMTIxMjM1OTU5
WjB6MUkwRwYDVQQFE0A5MDEwZjMwNGYwMTE2MmRlYzk1YmNjY2VjOWY5ZWRkYWQw
NDk2NzhiMTExMzU3YjNmNGU0ZWZjYjQ3ODg5MGMyMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDfx6kTh37zwzvX6kRqpKlP8J3F/Zl8pfDTXbaNW2F4M6LM
qSni4jNfN1ZTe5fUpyx6EqBcjUXxdwrwgeHvXvg/Q5UxPu+mQGt9dleNZ5DxZG6S
jIT9gNVdwAZXP7+Wd5YERij4m6stidxeJTKkmal+R5x3OL3uO8JnNY5IXT4E19a2
SZNw0JDFke06u1rqpkGeqMxW+Ni8DvBO7P25FKKf1M9TPomQs+WlBSKsxHP/zuk8
bqK1rc7AOHI4RrPYoHSbr9Lwpefw+eAiZKs1j0qThHXxqUJ9fLzm0JcY4OSpd9Te
0JXFZSUVi7ZmSgb7dpWLu9wwe+C9SGCGgenQj3IhAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUJcIrihwONVeiPjQ6paIE4DXAFM4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzlkZjUyNmQ2LTI4NDMtNDYzZS05ZWE3LWM1NThiNmRlYjM5ZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgEmAB84QDANBgkqhkiG9w0BAQsFAAOCAQEAPq6hG+DVtzkUJYIidfC6UngF
hOixmWvwWV3qENmR3QY2T6Gvn+JUUNv0B1h0xAWRlBa2bZlrHfM2Suy3Ffr49c1M
YETRkk8ys3GF9YksDHjS0RuIRZWxOUUiMpw+z7c16Z9S82JpzC9uRhrpWxuaremV
KUGtN7dVU7k1X4J43yIzCBnA/B34dAHfb196D+xEJtgSnfD+lnOAX5/LAHNWy356
rMscCzogOHxQ3x3pDubCOZ8d+iiBOJ5cu/SJdDXi3iQV2Muj81bkvKtmAnrFk1tk
Q8pXrSMRoy2lQO2NMN3utnjhirAPHSRHCMHMOWb5FjsXHzte2+CLKIasb3xASg==
-----END CERTIFICATE-----
Generated at Mon Nov 2 16:46:29 2026 by rpki-client