Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1fdcca5-f240-49aa-97c6-cc2821561223.roa
File:                     c1fdcca5-f240-49aa-97c6-cc2821561223.roa (raw, json)
Hash identifier:          Zh0Ks7q8BekQK4cHxJcZ6IGvs2NE7Tat8ALKt4GksjM=
Subject key identifier:   79:EC:2D:3A:99:D8:0D:58:AC:63:F1:3B:7E:5B:9B:54:4A:B2:E0:09
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2BA03CF5C556D7CDC5DFB1C6AEDCD8582CC8175F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1fdcca5-f240-49aa-97c6-cc2821561223.roa
Signing time:             Mon 19 Oct 2026 00:41:08 +0000
ROA not before:           Mon 19 Oct 2026 00:41:08 +0000
ROA not after:            Sun 17 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f69:3400::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:a0:3c:f5:c5:56:d7:cd:c5:df:b1:c6:ae:dc:d8:58:2c:c8:17:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 19 00:41:08 2026 GMT
            Not After : Jan 17 23:59:59 2027 GMT
        Subject: serialNumber=7ada1a71b707a855775265b003eb9dbd48b15c5c5781e7b4ac9f80b97436d5f5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fa:54:3b:5c:1a:4c:e6:23:49:1f:40:1b:82:
                    31:68:be:d0:ac:17:20:03:75:0e:1e:ea:76:ac:eb:
                    e1:4f:0a:85:b1:02:fd:20:bf:c9:c9:af:b8:be:ad:
                    aa:f6:aa:a2:f7:81:a3:91:50:c9:92:1f:c9:e3:bf:
                    d6:b1:d1:1d:20:fe:64:0e:d4:08:ec:1b:72:78:f4:
                    16:3d:20:50:f4:4e:2e:db:04:6a:d6:6e:38:40:16:
                    f4:cc:e8:4e:68:87:7b:a3:1e:f2:1c:5e:7f:12:bb:
                    94:fa:0d:82:c7:ba:48:78:fb:d9:88:1e:f3:8b:a6:
                    d7:9e:4f:1e:ec:cf:b2:3d:9d:73:bb:58:5a:1b:86:
                    1c:b5:a0:93:72:38:6e:d6:ea:f6:e6:af:20:a7:a3:
                    a1:90:a7:dc:83:ce:d9:a6:da:f0:a9:6e:74:d3:e9:
                    5c:c4:bf:81:56:80:bb:82:72:e0:80:c0:a0:e8:ba:
                    59:80:6f:27:d4:a0:d9:ef:62:8d:44:9a:4d:46:88:
                    58:e7:2d:eb:0e:7d:c4:1d:74:60:20:6f:dd:38:8c:
                    c3:41:08:2d:a3:d2:1d:57:6c:a0:c9:be:04:9c:02:
                    55:c0:07:fd:c4:cd:0f:24:20:52:2d:2b:8c:e5:f9:
                    43:bd:ee:60:6c:80:e1:ba:85:e1:e7:db:85:09:05:
                    b6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:EC:2D:3A:99:D8:0D:58:AC:63:F1:3B:7E:5B:9B:54:4A:B2:E0:09
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1fdcca5-f240-49aa-97c6-cc2821561223.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f69:3400::/40

    Signature Algorithm: sha256WithRSAEncryption
         99:0f:ef:ea:44:0d:08:10:c2:03:e1:49:fb:fd:05:de:2b:12:
         83:6c:ad:c9:f1:aa:23:ef:48:ec:94:8c:6c:55:f9:06:d3:a4:
         33:95:0f:7d:2f:49:c4:ab:ad:cc:26:e1:e7:99:79:ef:68:41:
         7e:2e:3a:6b:49:af:5a:79:1f:92:6e:5f:f1:f5:31:be:31:c3:
         82:07:66:70:87:c6:d9:f5:61:3c:20:27:fb:63:86:77:c0:66:
         1c:21:87:e1:1a:f1:7c:21:d6:93:7a:01:6f:f0:d5:6c:ba:08:
         85:d3:62:73:bd:47:8a:d2:11:b9:91:23:f8:52:2e:fc:34:fa:
         78:29:65:8e:5e:93:82:f3:fe:fc:18:18:a5:ab:05:42:c8:1e:
         0b:2e:6e:08:f3:bf:ed:cc:70:92:ba:fc:d2:12:af:7d:9b:47:
         e1:e9:90:60:e2:b4:df:7f:6b:81:d4:f7:be:72:76:da:d7:6c:
         bb:f0:f2:ed:4f:32:7f:b4:aa:05:1c:ad:7f:84:f7:0a:79:4f:
         f9:d4:aa:21:89:48:e2:16:35:e6:7c:6b:dd:87:01:f7:60:30:
         27:32:e4:a5:48:31:31:89:d1:ba:82:bc:f5:ab:24:2b:38:7a:
         f0:99:cc:d7:f5:de:4a:35:3f:df:f5:65:ae:56:d5:5c:d5:85:
         c9:1c:da:80
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUK6A89cVW183F37HGrtzYWCzIF18wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDE5MDA0MTA4WhcNMjcwMTE3MjM1OTU5
WjB6MUkwRwYDVQQFE0A3YWRhMWE3MWI3MDdhODU1Nzc1MjY1YjAwM2ViOWRiZDQ4
YjE1YzVjNTc4MWU3YjRhYzlmODBiOTc0MzZkNWY1MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDN+lQ7XBpM5iNJH0AbgjFovtCsFyADdQ4e6nas6+FPCoWx
Av0gv8nJr7i+rar2qqL3gaORUMmSH8njv9ax0R0g/mQO1AjsG3J49BY9IFD0Ti7b
BGrWbjhAFvTM6E5oh3ujHvIcXn8Su5T6DYLHukh4+9mIHvOLpteeTx7sz7I9nXO7
WFobhhy1oJNyOG7W6vbmryCno6GQp9yDztmm2vCpbnTT6VzEv4FWgLuCcuCAwKDo
ulmAbyfUoNnvYo1Emk1GiFjnLesOfcQddGAgb904jMNBCC2j0h1XbKDJvgScAlXA
B/3EzQ8kIFItK4zl+UO97mBsgOG6heHn24UJBbYTAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUeewtOpnYDVisY/E7flubVEqy4AkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2MxZmRjY2E1LWYyNDAtNDlhYS05N2M2LWNjMjgyMTU2MTIyMy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB9pNDANBgkqhkiG9w0BAQsFAAOCAQEAmQ/v6kQNCBDCA+FJ+/0F3isS
g2ytyfGqI+9I7JSMbFX5BtOkM5UPfS9JxKutzCbh55l572hBfi46a0mvWnkfkm5f
8fUxvjHDggdmcIfG2fVhPCAn+2OGd8BmHCGH4RrxfCHWk3oBb/DVbLoIhdNic71H
itIRuZEj+FIu/DT6eClljl6TgvP+/BgYpasFQsgeCy5uCPO/7cxwkrr80hKvfZtH
4emQYOK0339rgdT3vnJ22tdsu/Dy7U8yf7SqBRytf4T3CnlP+dSqIYlI4hY15nxr
3YcB92AwJzLkpUgxMYnRuoK89askKzh68JnM1/XeSjU/3/VlrlbVXNWFyRzagA==
-----END CERTIFICATE-----
Generated at Sat Oct 31 08:46:48 2026 by rpki-client