Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab64f5ba-47e8-4f7a-9b0d-3a2936c81759.roa
File:                     ab64f5ba-47e8-4f7a-9b0d-3a2936c81759.roa (raw, json)
Hash identifier:          gIgrsE+CFnpcQDXRIm0IaBgJB7kGpFx5AlMhUECj618=
Subject key identifier:   5A:CC:96:88:BD:13:E9:82:A3:35:54:72:45:FD:C1:EC:BC:D7:C9:DE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       78456F4D1B9F68E2EAFD3D4F62A225C102E12D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab64f5ba-47e8-4f7a-9b0d-3a2936c81759.roa
Signing time:             Thu 10 Sep 2026 00:20:43 +0000
ROA not before:           Thu 10 Sep 2026 00:20:43 +0000
ROA not after:            Wed 09 Dec 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1feb:3440::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:45:6f:4d:1b:9f:68:e2:ea:fd:3d:4f:62:a2:25:c1:02:e1:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 10 00:20:43 2026 GMT
            Not After : Dec  9 23:59:59 2026 GMT
        Subject: serialNumber=28dd272afc8fb0d64eadfa0a880eb98c4c263d34edcf36c3c26cadf4087eecb0, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b8:1e:85:4f:b8:69:e6:dc:fc:fa:4c:da:f6:
                    f5:41:02:b3:71:d0:88:8b:e7:ba:eb:33:c2:4f:74:
                    d6:c4:4e:94:11:64:97:5e:b9:57:2f:30:47:20:b5:
                    34:42:1c:05:82:bf:82:a0:d9:0b:d3:20:a7:50:f6:
                    95:b2:cf:1f:a9:e1:0c:4e:3e:14:fc:97:cd:9b:05:
                    c3:83:ee:eb:61:2b:d3:fd:b2:c1:c7:b7:e0:92:ff:
                    c2:39:06:24:e7:1c:c4:67:22:96:e7:4c:2d:00:2d:
                    7e:f7:7f:d0:03:53:b6:0c:2e:c2:ca:fd:8c:11:94:
                    75:47:7c:b2:c1:d8:1c:40:a8:de:37:37:58:55:56:
                    40:bb:94:26:a5:29:f0:90:12:db:26:60:29:b3:ba:
                    d8:a5:40:15:e6:67:e5:87:e4:15:c6:15:ba:e7:91:
                    44:ee:3a:fa:2c:bf:eb:52:25:9e:ca:0a:99:67:42:
                    13:97:ec:d4:79:26:f5:37:9b:41:4f:e2:5e:56:a3:
                    d7:ed:61:89:67:55:a8:2b:74:0e:4c:1f:fa:ba:01:
                    fe:d1:e4:62:d5:7f:14:c8:29:79:4d:7d:89:2a:48:
                    18:20:bc:9b:cb:44:74:07:5e:9a:ed:dc:31:01:f2:
                    d0:25:9a:7e:65:0d:4a:ab:a0:a8:85:57:4c:99:5c:
                    e4:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:CC:96:88:BD:13:E9:82:A3:35:54:72:45:FD:C1:EC:BC:D7:C9:DE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab64f5ba-47e8-4f7a-9b0d-3a2936c81759.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1feb:3440::/48

    Signature Algorithm: sha256WithRSAEncryption
         44:96:cc:95:5a:24:72:6f:78:19:1d:4e:4a:40:78:a2:96:a7:
         19:c1:a4:ec:4b:88:40:95:95:05:57:2e:b1:7a:0f:21:67:c9:
         6b:b4:05:9c:d4:45:15:8e:93:3d:6d:9b:d3:3b:a5:58:8a:4f:
         10:59:46:fa:7c:a3:dc:d1:3f:67:f2:99:e8:03:67:6b:23:e8:
         df:42:74:91:8a:65:43:94:53:cc:ef:ba:ab:13:e8:7c:c8:46:
         86:a3:75:55:7b:f3:8f:f8:ae:16:94:e8:47:5f:39:08:50:7d:
         ad:c1:85:13:42:9f:a9:18:76:43:ff:63:96:4e:f3:77:c3:d6:
         85:a7:fc:f0:da:5b:50:e3:31:80:26:d1:9c:a7:a7:22:86:13:
         8d:0c:db:40:f0:29:76:02:71:db:b0:39:66:a9:9d:82:f0:b1:
         db:06:d0:73:c6:21:6e:41:39:f7:e1:e0:4d:7a:35:14:0e:e6:
         c8:c3:25:f0:0d:bd:28:a8:98:78:ed:16:df:14:ac:a2:aa:b3:
         b6:68:3b:6b:46:ee:88:a0:56:7f:61:5b:f7:59:a2:4d:e9:20:
         1c:da:e0:06:12:8b:fd:ab:e4:40:b1:8d:b8:7c:ff:2a:42:cc:
         61:4f:06:c5:3f:ef:e4:52:49:03:0c:09:00:cf:aa:64:45:0a:
         c8:6d:04:1c
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgITeEVvTRufaOLq/T1PYqIlwQLhLTANBgkqhkiG9w0BAQsF
ADA9MTswOQYDVQQDEzI2ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAxOGQ0MmJlMzU4ZWIz
NzEwN2RiZThjYjcxZDBhNzAeFw0yNjA5MTAwMDIwNDNaFw0yNjEyMDkyMzU5NTla
MHoxSTBHBgNVBAUTQDI4ZGQyNzJhZmM4ZmIwZDY0ZWFkZmEwYTg4MGViOThjNGMy
NjNkMzRlZGNmMzZjM2MyNmNhZGY0MDg3ZWVjYjAxLTArBgNVBAMTJGIyNWM5NzBm
LWQ4MTMtNDQ1Yy1iZmUyLTYyNjY4NTE4Yzg3ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOG4HoVPuGnm3Pz6TNr29UECs3HQiIvnuuszwk901sROlBFk
l165Vy8wRyC1NEIcBYK/gqDZC9Mgp1D2lbLPH6nhDE4+FPyXzZsFw4Pu62Er0/2y
wce34JL/wjkGJOccxGciludMLQAtfvd/0ANTtgwuwsr9jBGUdUd8ssHYHECo3jc3
WFVWQLuUJqUp8JAS2yZgKbO62KVAFeZn5YfkFcYVuueRRO46+iy/61IlnsoKmWdC
E5fs1Hkm9TebQU/iXlaj1+1hiWdVqCt0Dkwf+roB/tHkYtV/FMgpeU19iSpIGCC8
m8tEdAdemu3cMQHy0CWafmUNSqugqIVXTJlc5AsCAwEAAaOCArQwggKwMB0GA1Ud
DgQWBBRazJaIvRPpgqM1VHJF/cHsvNfJ3jAfBgNVHSMEGDAWgBQQXdeNVXhAq0Nd
vRUhII8p+kk/rjAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg
BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy
aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv
MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiYTMwMmI4LThk
YWItNDkxZC1iOWVkLWQ3YzkyZDAzMGQ4Mi82ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAx
OGQ0MmJlMzU4ZWIzNzEwN2RiZThjYjcxZDBhNy5jZXIwgZ4GCCsGAQUFBwELBIGR
MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8yMGFhMzI5Yi1mYzUyLTRjNjEtYmY1My0wOTcy
NWMwNDI5NDIvYWI2NGY1YmEtNDdlOC00ZjdhLTliMGQtM2EyOTM2YzgxNzU5LnJv
YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0
LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMt
MDk3MjVjMDQyOTQyL19xeDNSSjhCalVLLU5ZNnpjUWZiNk10eDBLYy5jcmwwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw
CQMHACYAH+s0QDANBgkqhkiG9w0BAQsFAAOCAQEARJbMlVokcm94GR1OSkB4opan
GcGk7EuIQJWVBVcusXoPIWfJa7QFnNRFFY6TPW2b0zulWIpPEFlG+nyj3NE/Z/KZ
6ANnayPo30J0kYplQ5RTzO+6qxPofMhGhqN1VXvzj/iuFpToR185CFB9rcGFE0Kf
qRh2Q/9jlk7zd8PWhaf88NpbUOMxgCbRnKenIoYTjQzbQPApdgJx27A5ZqmdgvCx
2wbQc8YhbkE59+HgTXo1FA7myMMl8A29KKiYeO0W3xSsoqqztmg7a0buiKBWf2Fb
91miTekgHNrgBhKL/avkQLGNuHz/KkLMYU8GxT/v5FJJAwwJAM+qZEUKyG0EHA==
-----END CERTIFICATE-----
Generated at Thu Sep 17 17:05:26 2026 by rpki-client