Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dd18445e-9116-49ee-9fe6-e9a4b4c19586.roa
File:                     dd18445e-9116-49ee-9fe6-e9a4b4c19586.roa (raw, json)
Hash identifier:          pUQu+7nLMFaZfeUy4sYU5e0qxMkaQdlP655YzxzW2yw=
Subject key identifier:   63:48:22:37:EE:2C:69:49:C4:D0:89:E5:89:88:10:EE:CA:64:A7:5A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7F8A323B80B2E45A38125CF447C1DBE200CEB5A5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dd18445e-9116-49ee-9fe6-e9a4b4c19586.roa
Signing time:             Tue 04 Aug 2026 01:30:12 +0000
ROA not before:           Tue 04 Aug 2026 01:30:12 +0000
ROA not after:            Mon 02 Nov 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f15:4800::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:8a:32:3b:80:b2:e4:5a:38:12:5c:f4:47:c1:db:e2:00:ce:b5:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  4 01:30:12 2026 GMT
            Not After : Nov  2 23:59:59 2026 GMT
        Subject: serialNumber=369b62dd537951a84a66ca045cb72f0f239fb09577b71b2f5fa7b03700d93521, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:32:f0:a6:97:14:03:df:70:20:16:e9:d6:46:
                    68:f0:d6:a0:6a:a2:5c:98:57:c9:08:e6:1b:ae:93:
                    1b:be:75:74:f3:97:33:15:c1:74:b5:36:84:2d:18:
                    9b:ba:e6:9a:47:ad:74:c8:71:8d:43:73:eb:4b:37:
                    47:b0:34:57:10:66:31:9f:7c:05:8a:cb:24:bd:ab:
                    a0:72:55:00:2b:f8:a7:6c:0a:3e:cc:93:65:0f:1e:
                    18:b2:42:96:b9:b1:14:0c:64:c8:a1:dd:b7:ef:32:
                    c5:ad:78:2e:7b:35:ac:84:02:06:70:c9:b9:ab:a6:
                    f6:dc:e8:d4:da:4f:6a:55:bc:fb:9d:69:b2:41:67:
                    e4:36:a1:64:b3:0d:4e:39:ff:49:e7:ee:d5:6c:95:
                    c2:db:ee:43:15:57:f6:a5:36:9d:da:15:29:48:f7:
                    38:9b:3e:f0:1f:0b:cc:b2:8d:d1:53:e5:b4:86:35:
                    5e:94:d2:57:b2:9d:d0:0d:6e:36:f8:a6:1c:75:0c:
                    ce:5d:52:54:e3:a8:b8:01:9d:a3:05:e3:b9:00:0d:
                    d2:5e:12:66:61:3a:f7:22:4b:ba:8e:c4:24:bb:62:
                    d5:e9:e1:a2:00:38:5f:09:57:3f:77:74:60:b2:6e:
                    cb:1e:64:8f:66:6a:0f:73:72:3e:b0:c1:9b:8e:ee:
                    f9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:48:22:37:EE:2C:69:49:C4:D0:89:E5:89:88:10:EE:CA:64:A7:5A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dd18445e-9116-49ee-9fe6-e9a4b4c19586.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f15:4800::/37

    Signature Algorithm: sha256WithRSAEncryption
         52:da:ad:d0:25:90:e6:23:04:e6:0d:4c:9b:51:5f:81:d9:dc:
         27:b2:22:65:7a:81:08:f9:99:59:ec:61:39:5f:df:5f:dd:1e:
         50:f6:89:c8:fc:9a:47:1a:57:48:76:44:e5:fe:13:dd:9f:2c:
         b5:db:37:a7:c0:3e:41:22:b6:88:62:5e:b4:70:1f:d6:03:81:
         a4:db:0d:09:b4:1b:1e:5a:91:3c:ab:7b:9a:f2:3c:bb:41:39:
         c0:8c:af:39:5b:86:f8:69:3c:2f:49:69:46:86:2b:82:24:08:
         03:e3:dc:74:5e:3e:e6:a3:c8:7f:bf:21:36:29:03:85:47:03:
         a3:f8:e5:52:eb:27:fb:27:64:a4:8d:c6:91:44:48:da:53:15:
         bb:ad:9c:51:e7:c7:52:e2:6a:4f:27:13:9d:4c:80:f3:07:3d:
         67:dd:f5:6a:29:71:d7:e1:8d:01:23:ed:c1:bb:7c:a8:16:7a:
         8c:6d:b2:57:70:cc:7a:66:9f:f1:9e:b4:95:f1:48:2c:76:0c:
         75:05:ca:fc:3b:d5:dd:b7:9f:0b:6e:c4:93:e4:3b:5d:2d:dc:
         7c:f9:63:0d:84:6a:57:e4:88:70:c7:d1:fd:4e:da:54:d2:90:
         45:b8:86:2d:00:44:62:82:56:13:7f:f5:e3:8c:93:ac:f2:a5:
         8c:d5:bc:9e
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUf4oyO4Cy5Fo4Elz0R8Hb4gDOtaUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA0MDEzMDEyWhcNMjYxMTAyMjM1OTU5
WjB6MUkwRwYDVQQFE0AzNjliNjJkZDUzNzk1MWE4NGE2NmNhMDQ1Y2I3MmYwZjIz
OWZiMDk1NzdiNzFiMmY1ZmE3YjAzNzAwZDkzNTIxMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDPMvCmlxQD33AgFunWRmjw1qBqolyYV8kI5huukxu+dXTz
lzMVwXS1NoQtGJu65ppHrXTIcY1Dc+tLN0ewNFcQZjGffAWKyyS9q6ByVQAr+Kds
Cj7Mk2UPHhiyQpa5sRQMZMih3bfvMsWteC57NayEAgZwybmrpvbc6NTaT2pVvPud
abJBZ+Q2oWSzDU45/0nn7tVslcLb7kMVV/alNp3aFSlI9zibPvAfC8yyjdFT5bSG
NV6U0leyndANbjb4phx1DM5dUlTjqLgBnaMF47kADdJeEmZhOvciS7qOxCS7YtXp
4aIAOF8JVz93dGCybsseZI9mag9zcj6wwZuO7vl7AgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUY0giN+4saUnE0InliYgQ7spkp1owHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2RkMTg0NDVlLTkxMTYtNDllZS05ZmU2LWU5YTRiNGMxOTU4Ni5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgMmAB8VSDANBgkqhkiG9w0BAQsFAAOCAQEAUtqt0CWQ5iME5g1Mm1Ffgdnc
J7IiZXqBCPmZWexhOV/fX90eUPaJyPyaRxpXSHZE5f4T3Z8stds3p8A+QSK2iGJe
tHAf1gOBpNsNCbQbHlqRPKt7mvI8u0E5wIyvOVuG+Gk8L0lpRoYrgiQIA+PcdF4+
5qPIf78hNikDhUcDo/jlUusn+ydkpI3GkURI2lMVu62cUefHUuJqTycTnUyA8wc9
Z931ailx1+GNASPtwbt8qBZ6jG2yV3DMemaf8Z60lfFILHYMdQXK/DvV3befC27E
k+Q7XS3cfPljDYRqV+SIcMfR/U7aVNKQRbiGLQBEYoJWE3/144yTrPKljNW8ng==
-----END CERTIFICATE-----
Generated at Thu Aug 20 22:53:28 2026 by rpki-client