Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8b12f3e-dcb0-41c7-852e-373ae3f8b0b5.roa
File:                     b8b12f3e-dcb0-41c7-852e-373ae3f8b0b5.roa (raw, json)
Hash identifier:          oZfyJuP63QJQQoyyF9dbhlDla2IP1h19Kl3+A8T/BPc=
Subject key identifier:   A5:21:B3:FC:48:32:4B:0E:61:4C:E2:E4:00:2D:F1:31:9F:8A:B9:BD
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       268B1CD875A6B68F5F744D26E42C8DE942A48A13
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8b12f3e-dcb0-41c7-852e-373ae3f8b0b5.roa
Signing time:             Thu 08 Oct 2026 00:10:06 +0000
ROA not before:           Thu 08 Oct 2026 00:10:06 +0000
ROA not after:            Wed 06 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ffa:8000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 31 Oct 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:8b:1c:d8:75:a6:b6:8f:5f:74:4d:26:e4:2c:8d:e9:42:a4:8a:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  8 00:10:06 2026 GMT
            Not After : Jan  6 23:59:59 2027 GMT
        Subject: serialNumber=93ab9f4f999a7951169c8dc69b19aa2e95c3243b7aa4d4f6c900abdfaec0bec4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:bc:74:e4:56:14:b3:b1:2d:6f:3f:50:72:6e:
                    0c:59:d7:7a:a2:37:c6:53:bc:a0:cd:e1:35:69:c8:
                    4a:21:f8:43:5d:b4:18:c6:1c:8a:ce:cf:b5:20:5e:
                    4d:48:bd:36:44:2c:59:60:3d:5a:f1:5a:19:f7:76:
                    33:37:a7:4e:a2:ba:7a:cd:24:11:55:8a:8a:b7:a6:
                    9f:86:cf:42:51:26:c9:c0:b0:7a:98:66:8a:00:ba:
                    fa:b9:4f:ce:0a:9d:30:dc:75:7d:98:b4:6d:f2:55:
                    92:33:7e:51:36:51:65:d6:60:14:28:64:8d:db:09:
                    d9:fa:6a:21:d0:83:22:62:00:4f:3b:92:50:5b:11:
                    cd:91:db:c3:cb:68:cc:2b:cc:05:22:fe:57:68:61:
                    8f:05:43:7c:69:6e:50:a8:ea:57:06:6a:4c:64:c8:
                    5d:02:f1:5c:0e:ef:1f:a7:45:48:37:93:4d:a1:15:
                    7a:2d:2d:1f:ad:5b:d9:42:c7:10:db:45:ce:09:47:
                    49:04:aa:3b:c7:bf:69:22:37:aa:36:96:b8:75:56:
                    9b:cf:b2:4a:0e:59:2b:71:3c:a5:7e:29:47:77:4d:
                    f9:3d:6a:2d:ae:5b:14:04:6d:a5:2c:91:36:ca:f2:
                    da:60:7e:03:88:86:c1:0b:6c:a8:80:6a:0b:34:47:
                    40:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:21:B3:FC:48:32:4B:0E:61:4C:E2:E4:00:2D:F1:31:9F:8A:B9:BD
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8b12f3e-dcb0-41c7-852e-373ae3f8b0b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ffa:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         a7:92:a4:b5:5d:7d:be:f0:c0:ad:7a:a3:37:3a:d4:85:1c:8f:
         5e:68:09:3e:19:75:32:08:91:e3:46:85:14:03:01:2e:99:54:
         28:d9:f1:f6:98:15:32:49:d8:3c:01:37:d7:86:04:26:9e:4b:
         13:f4:fe:c2:18:9b:02:59:1e:aa:ea:40:da:28:12:b4:9b:a6:
         fe:fc:0f:5b:d2:0d:5c:f6:53:19:6a:39:d2:e0:eb:ea:a5:ac:
         2f:c8:e6:72:67:36:7f:63:7a:ac:d9:82:1d:fc:45:23:d1:9a:
         22:54:d2:ae:ec:ac:05:ad:a1:c8:9d:8c:bd:4e:7b:a5:0f:c5:
         af:ca:55:2b:27:c8:fb:5c:d0:24:37:b0:e7:b2:71:ca:39:a7:
         07:da:fb:89:1c:3b:45:f7:f4:b0:ec:83:5b:93:82:14:9e:8e:
         a2:c9:d7:50:ba:18:6a:83:0a:58:00:8f:cf:0a:22:e6:0e:30:
         d3:b0:09:cc:1f:b9:d9:b5:91:b7:7e:f1:37:76:38:f3:f4:ee:
         c3:2a:73:cd:8e:d9:93:cc:d9:10:5a:5c:70:67:72:1f:e3:f6:
         c6:85:da:1b:03:12:26:4f:b9:55:6a:02:8d:c2:f2:2b:1e:80:
         ee:f3:19:ce:e6:51:c8:28:2d:aa:50:08:36:f8:5f:0c:5a:de:
         46:e6:0b:30
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUJosc2HWmto9fdE0m5CyN6UKkihMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA4MDAxMDA2WhcNMjcwMTA2MjM1OTU5
WjB6MUkwRwYDVQQFE0A5M2FiOWY0Zjk5OWE3OTUxMTY5YzhkYzY5YjE5YWEyZTk1
YzMyNDNiN2FhNGQ0ZjZjOTAwYWJkZmFlYzBiZWM0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCnvHTkVhSzsS1vP1BybgxZ13qiN8ZTvKDN4TVpyEoh+ENd
tBjGHIrOz7UgXk1IvTZELFlgPVrxWhn3djM3p06iunrNJBFVioq3pp+Gz0JRJsnA
sHqYZooAuvq5T84KnTDcdX2YtG3yVZIzflE2UWXWYBQoZI3bCdn6aiHQgyJiAE87
klBbEc2R28PLaMwrzAUi/ldoYY8FQ3xpblCo6lcGakxkyF0C8VwO7x+nRUg3k02h
FXotLR+tW9lCxxDbRc4JR0kEqjvHv2kiN6o2lrh1VpvPskoOWStxPKV+KUd3Tfk9
ai2uWxQEbaUskTbK8tpgfgOIhsELbKiAags0R0BPAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUpSGz/EgySw5hTOLkAC3xMZ+Kub0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2I4YjEyZjNlLWRjYjAtNDFjNy04NTJlLTM3M2FlM2Y4YjBiNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB/6gDANBgkqhkiG9w0BAQsFAAOCAQEAp5KktV19vvDArXqjNzrUhRyP
XmgJPhl1MgiR40aFFAMBLplUKNnx9pgVMknYPAE314YEJp5LE/T+whibAlkequpA
2igStJum/vwPW9INXPZTGWo50uDr6qWsL8jmcmc2f2N6rNmCHfxFI9GaIlTSruys
Ba2hyJ2MvU57pQ/Fr8pVKyfI+1zQJDew57JxyjmnB9r7iRw7Rff0sOyDW5OCFJ6O
osnXULoYaoMKWACPzwoi5g4w07AJzB+52bWRt37xN3Y48/TuwypzzY7Zk8zZEFpc
cGdyH+P2xoXaGwMSJk+5VWoCjcLyKx6A7vMZzuZRyCgtqlAINvhfDFreRuYLMA==
-----END CERTIFICATE-----
Generated at Fri Oct 30 14:23:06 2026 by rpki-client