Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f5c5bf91-efdd-4637-835c-85159155c913.roa
File:                     f5c5bf91-efdd-4637-835c-85159155c913.roa (raw, json)
Hash identifier:          8WLgHCiUtZhrbUWj3G0RwDqlrdTo3LMrilOBOiat3bo=
Subject key identifier:   6C:40:0A:6F:64:BC:5F:21:A9:97:0D:AB:26:56:C0:FD:F0:B5:D0:0F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7FEA8C752DD6648FD130A63DE1CA245B06B4736F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f5c5bf91-efdd-4637-835c-85159155c913.roa
Signing time:             Wed 09 Sep 2026 16:07:00 +0000
ROA not before:           Wed 09 Sep 2026 16:07:00 +0000
ROA not after:            Tue 08 Dec 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f6a:9800::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:ea:8c:75:2d:d6:64:8f:d1:30:a6:3d:e1:ca:24:5b:06:b4:73:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep  9 16:07:00 2026 GMT
            Not After : Dec  8 23:59:59 2026 GMT
        Subject: serialNumber=f5726b4925c438563f5506a4fcb78fc7bfb4c9f34cd9a79c1f40c4a49077267f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:13:ab:85:2c:5e:27:b7:76:29:30:03:08:74:
                    02:95:d4:21:39:74:84:71:73:13:31:c2:e7:9d:ac:
                    7f:f7:29:77:36:5a:d0:55:c5:aa:63:ed:9d:f8:36:
                    e0:ff:09:1d:43:5c:20:b1:17:f0:17:18:2e:20:b5:
                    2e:ae:56:08:d0:64:fa:be:c7:c1:7e:b8:60:80:6c:
                    b8:49:0b:a2:6b:c2:df:80:dd:66:33:56:9c:43:6d:
                    3b:32:46:43:ca:28:a8:b0:68:95:56:a1:5c:6d:f6:
                    60:bd:61:82:d2:20:00:f6:5b:e3:fc:50:10:14:ad:
                    54:c5:74:94:33:1e:d4:e3:a6:5c:e6:84:44:43:fa:
                    29:d3:38:fc:06:96:1e:c1:51:28:d7:7f:d6:ee:86:
                    d0:ab:69:71:e9:d6:9b:51:7f:08:e9:d1:7f:4b:bb:
                    16:6f:ca:9e:80:0d:28:d3:86:04:fa:98:fa:7f:a5:
                    24:c1:ac:cc:59:4e:99:32:35:f7:45:2e:e8:e1:e6:
                    76:f3:e8:95:1e:9c:51:fe:4d:fa:6b:a5:a1:e4:a5:
                    f6:d2:c4:0c:87:3c:9a:d2:1a:e0:7c:d2:36:a8:c1:
                    95:f1:03:8a:cb:08:bf:e4:27:9a:3b:8a:12:23:b8:
                    12:fa:f7:ac:18:03:33:59:91:0d:ac:d5:89:21:c3:
                    f9:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:40:0A:6F:64:BC:5F:21:A9:97:0D:AB:26:56:C0:FD:F0:B5:D0:0F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f5c5bf91-efdd-4637-835c-85159155c913.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f6a:9800::/46

    Signature Algorithm: sha256WithRSAEncryption
         08:3e:84:f8:1a:96:9c:c4:7b:c0:1d:e9:10:e0:55:30:2e:f5:
         9b:82:b8:30:29:de:1d:6a:09:f3:7f:91:bc:37:ce:7c:2e:f2:
         b6:7e:32:af:5f:3b:a1:cd:09:21:0a:5c:f6:cd:c3:10:b5:33:
         73:d9:34:27:fe:1e:4c:5c:86:23:d8:7d:51:9f:3c:89:93:07:
         0e:a3:00:4d:2a:a7:e5:75:75:f6:1f:ed:84:2a:cc:e2:2e:49:
         36:31:4a:82:b8:16:4b:82:8b:55:dc:b4:b3:fa:04:6a:49:23:
         1f:88:61:95:85:3b:e9:33:22:c3:0d:9b:8b:22:e1:25:0a:04:
         05:d1:93:f0:91:92:9a:5d:d1:f0:2e:c7:e8:4f:4f:ed:9c:49:
         f5:cd:66:be:e9:fd:de:95:b2:b5:21:63:43:d2:5f:7b:77:c6:
         51:f5:b3:5a:10:40:62:38:1c:4f:32:67:a1:ca:e6:c0:96:2b:
         61:a6:2a:86:80:8e:85:33:3b:e7:cf:22:aa:32:6f:a5:a4:30:
         97:f5:3e:78:fb:1e:fb:41:e5:94:22:89:8a:8c:91:38:b2:e9:
         78:5f:00:79:90:bb:44:8b:d1:3d:01:98:2f:86:0c:bd:51:3a:
         48:44:93:79:6a:f9:e9:f3:9a:2f:e3:83:60:3d:d5:d2:b8:87:
         7c:1d:8b:2e
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUf+qMdS3WZI/RMKY94cokWwa0c28wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwOTA5MTYwNzAwWhcNMjYxMjA4MjM1OTU5
WjB6MUkwRwYDVQQFE0BmNTcyNmI0OTI1YzQzODU2M2Y1NTA2YTRmY2I3OGZjN2Jm
YjRjOWYzNGNkOWE3OWMxZjQwYzRhNDkwNzcyNjdmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDWE6uFLF4nt3YpMAMIdAKV1CE5dIRxcxMxwuedrH/3KXc2
WtBVxapj7Z34NuD/CR1DXCCxF/AXGC4gtS6uVgjQZPq+x8F+uGCAbLhJC6Jrwt+A
3WYzVpxDbTsyRkPKKKiwaJVWoVxt9mC9YYLSIAD2W+P8UBAUrVTFdJQzHtTjplzm
hERD+inTOPwGlh7BUSjXf9buhtCraXHp1ptRfwjp0X9LuxZvyp6ADSjThgT6mPp/
pSTBrMxZTpkyNfdFLujh5nbz6JUenFH+TfprpaHkpfbSxAyHPJrSGuB80jaowZXx
A4rLCL/kJ5o7ihIjuBL696wYAzNZkQ2s1Ykhw/k5AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUbEAKb2S8XyGplw2rJlbA/fC10A8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2Y1YzViZjkxLWVmZGQtNDYzNy04MzVjLTg1MTU5MTU1YzkxMy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImAB9qmAAwDQYJKoZIhvcNAQELBQADggEBAAg+hPgalpzEe8Ad6RDgVTAu
9ZuCuDAp3h1qCfN/kbw3znwu8rZ+Mq9fO6HNCSEKXPbNwxC1M3PZNCf+HkxchiPY
fVGfPImTBw6jAE0qp+V1dfYf7YQqzOIuSTYxSoK4FkuCi1XctLP6BGpJIx+IYZWF
O+kzIsMNm4si4SUKBAXRk/CRkppd0fAux+hPT+2cSfXNZr7p/d6VsrUhY0PSX3t3
xlH1s1oQQGI4HE8yZ6HK5sCWK2GmKoaAjoUzO+fPIqoyb6WkMJf1Pnj7HvtB5ZQi
iYqMkTiy6XhfAHmQu0SL0T0BmC+GDL1ROkhEk3lq+enzmi/jg2A91dK4h3wdiy4=
-----END CERTIFICATE-----
Generated at Tue Sep 15 13:17:04 2026 by rpki-client