Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b65e933e-ac5f-46a3-85ee-488c769cdbe2.roa
File:                     b65e933e-ac5f-46a3-85ee-488c769cdbe2.roa (raw, json)
Hash identifier:          zapEj48q4w3Q5u+i+X9esPUm8U2CTIUGItnKKfijPzA=
Subject key identifier:   62:DD:7E:2F:C2:A6:09:2C:35:C7:A1:52:C8:94:7D:96:7B:27:42:D5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       24AA23F7B1FD2D463BE6B2FDDF8A215DAADAA5F2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b65e933e-ac5f-46a3-85ee-488c769cdbe2.roa
Signing time:             Fri 09 Oct 2026 01:07:25 +0000
ROA not before:           Fri 09 Oct 2026 01:07:25 +0000
ROA not after:            Thu 07 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fea:80c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:aa:23:f7:b1:fd:2d:46:3b:e6:b2:fd:df:8a:21:5d:aa:da:a5:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  9 01:07:25 2026 GMT
            Not After : Jan  7 23:59:59 2027 GMT
        Subject: serialNumber=6945aa6e7f0af0617ac54f8ac697390fb19dce3e3a0cc2b72ca20d803dea7a0e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:5a:46:82:a8:4f:b4:58:92:d8:a9:e6:5f:05:
                    8a:68:ef:df:e9:69:59:e8:71:ea:c2:10:16:ba:e3:
                    4a:ad:54:b3:f1:17:c6:be:a7:1b:b9:85:57:ff:a2:
                    bc:d0:22:b6:ac:6a:de:1a:f7:a0:65:08:5d:fb:7d:
                    57:b8:2c:3a:cc:99:a0:38:fb:5d:a4:07:b9:8d:ad:
                    63:85:cf:ff:6e:b9:05:ae:31:9c:63:de:dc:0d:3e:
                    f7:24:0e:1a:37:03:23:05:2f:9d:ca:63:95:64:95:
                    f7:36:6f:ba:6d:11:40:57:97:83:cf:29:7c:f4:45:
                    fb:86:55:9d:b6:17:6a:05:e1:67:83:ce:eb:c5:d3:
                    15:6a:86:de:2e:84:89:6c:ec:a6:b3:a2:10:e1:4a:
                    d2:d5:da:57:e5:53:64:ff:41:4e:ac:71:96:4d:8b:
                    70:5f:9d:36:98:06:2c:a3:06:f8:ff:4e:45:fa:9c:
                    0e:01:27:79:f1:6a:da:cc:b7:51:0c:8f:84:f0:6f:
                    1a:ab:7e:15:02:05:58:69:6b:b1:fc:36:b9:e2:79:
                    80:22:14:c1:f3:c1:e7:cc:94:71:b6:ff:b2:c6:06:
                    ed:6d:09:5a:29:71:29:ff:8f:b4:63:16:60:b4:a6:
                    33:c9:ac:0e:4c:ab:37:4a:f6:27:54:96:de:a4:53:
                    95:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:DD:7E:2F:C2:A6:09:2C:35:C7:A1:52:C8:94:7D:96:7B:27:42:D5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b65e933e-ac5f-46a3-85ee-488c769cdbe2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fea:80c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         65:37:5e:7b:5f:f4:a1:eb:bb:19:d0:a0:f1:0a:0e:55:29:c4:
         4d:bc:13:8b:6f:00:f9:03:31:b1:11:6c:38:31:06:48:15:94:
         30:88:46:06:df:22:2c:ef:6e:53:b1:ec:01:6e:1d:dd:89:c0:
         0d:fe:ab:c2:2b:db:1a:41:79:0f:2e:f3:25:97:ef:3b:dc:a7:
         bc:b5:99:e0:a2:40:9a:9a:ed:da:dc:7d:3d:2b:b3:d9:44:b9:
         b9:a7:71:5e:52:46:16:38:20:53:ee:b6:87:4a:7e:05:c4:8f:
         e6:62:99:3f:91:51:64:20:c3:cf:f1:bd:a0:a4:79:86:b1:2b:
         48:a6:54:f1:e1:cf:47:69:04:ed:0f:65:46:d5:7f:92:b2:95:
         2e:53:99:13:0a:c9:1b:1b:99:2b:65:e0:22:b1:47:3d:19:b8:
         27:9d:26:e7:05:af:ea:52:1b:c2:32:15:d6:47:24:10:a5:f9:
         94:cd:c7:8a:10:c7:a5:3c:47:90:3e:3e:bc:07:2c:90:5b:37:
         fd:85:3c:48:e6:e2:fa:58:e9:a2:c0:51:f7:3d:6d:38:68:94:
         94:b5:e0:e2:50:ba:ac:95:ca:46:f7:48:05:d7:0a:7d:e3:3c:
         7f:76:f9:c6:04:be:44:1d:ed:bb:7e:8d:b3:87:e3:0c:b0:8b:
         a6:fb:ed:0b
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUJKoj97H9LUY75rL934ohXarapfIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA5MDEwNzI1WhcNMjcwMTA3MjM1OTU5
WjB6MUkwRwYDVQQFE0A2OTQ1YWE2ZTdmMGFmMDYxN2FjNTRmOGFjNjk3MzkwZmIx
OWRjZTNlM2EwY2MyYjcyY2EyMGQ4MDNkZWE3YTBlMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDkWkaCqE+0WJLYqeZfBYpo79/paVnocerCEBa640qtVLPx
F8a+pxu5hVf/orzQIrasat4a96BlCF37fVe4LDrMmaA4+12kB7mNrWOFz/9uuQWu
MZxj3twNPvckDho3AyMFL53KY5Vklfc2b7ptEUBXl4PPKXz0RfuGVZ22F2oF4WeD
zuvF0xVqht4uhIls7KazohDhStLV2lflU2T/QU6scZZNi3BfnTaYBiyjBvj/TkX6
nA4BJ3nxatrMt1EMj4TwbxqrfhUCBVhpa7H8NrnieYAiFMHzwefMlHG2/7LGBu1t
CVopcSn/j7RjFmC0pjPJrA5MqzdK9idUlt6kU5XlAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUYt1+L8KmCSw1x6FSyJR9lnsnQtUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2I2NWU5MzNlLWFjNWYtNDZhMy04NWVlLTQ4OGM3NjljZGJlMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB/qgMAwDQYJKoZIhvcNAQELBQADggEBAGU3Xntf9KHruxnQoPEKDlUp
xE28E4tvAPkDMbERbDgxBkgVlDCIRgbfIizvblOx7AFuHd2JwA3+q8Ir2xpBeQ8u
8yWX7zvcp7y1meCiQJqa7drcfT0rs9lEubmncV5SRhY4IFPutodKfgXEj+ZimT+R
UWQgw8/xvaCkeYaxK0imVPHhz0dpBO0PZUbVf5KylS5TmRMKyRsbmStl4CKxRz0Z
uCedJucFr+pSG8IyFdZHJBCl+ZTNx4oQx6U8R5A+PrwHLJBbN/2FPEjm4vpY6aLA
Ufc9bTholJS14OJQuqyVykb3SAXXCn3jPH92+cYEvkQd7bt+jbOH4wywi6b77Qs=
-----END CERTIFICATE-----
Generated at Wed Nov 4 14:54:16 2026 by rpki-client