Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f9c1c2eb-5203-4606-9bf1-51bde59fa3d7.roa
File:                     f9c1c2eb-5203-4606-9bf1-51bde59fa3d7.roa (raw, json)
Hash identifier:          Yeq9ekm5cTeQLrSyxndffWDpcmN1t0KfRfM6OxLwQmw=
Subject key identifier:   3A:27:A7:EF:10:06:D0:17:F5:1A:B6:7D:22:D1:B1:78:C6:45:01:EE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3B9E0F8039DA908A5EE4D9B9A40A674B4A14621F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f9c1c2eb-5203-4606-9bf1-51bde59fa3d7.roa
Signing time:             Fri 31 Jul 2026 01:31:19 +0000
ROA not before:           Fri 31 Jul 2026 01:31:19 +0000
ROA not after:            Thu 29 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ffb:e000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:9e:0f:80:39:da:90:8a:5e:e4:d9:b9:a4:0a:67:4b:4a:14:62:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 31 01:31:19 2026 GMT
            Not After : Oct 29 23:59:59 2026 GMT
        Subject: serialNumber=adccca74809c281a9ea9ee0375bca153841339887cb7701d8ad0f9a66eb291b2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6e:48:9d:ef:16:b5:93:14:a0:1c:e2:60:c1:
                    2a:c5:5c:5f:ca:52:41:b0:8c:9b:0b:ce:0a:cf:f7:
                    75:28:81:eb:9f:19:69:9b:c1:44:5a:2d:48:e2:3d:
                    a5:e2:aa:4e:b0:eb:34:69:d3:e7:10:68:e2:27:69:
                    df:e7:26:bb:ad:f5:f9:61:f2:f6:0c:36:55:88:16:
                    3e:13:fb:67:18:e0:59:af:56:2b:e3:89:2f:18:5c:
                    81:07:dd:a7:11:34:55:85:6b:49:ec:c7:3a:14:ca:
                    b7:6c:4b:f4:f0:33:86:c1:91:5f:3a:19:a3:ef:f1:
                    52:ec:b0:76:b3:d9:9d:27:6b:44:b0:74:bf:e2:34:
                    72:13:f2:22:ea:c6:95:00:df:50:1e:f5:94:f5:b9:
                    a6:0b:52:2e:b2:84:35:63:e2:4f:d7:1b:eb:0f:1c:
                    b2:ec:42:92:c3:d9:65:db:35:ee:bd:b3:63:3c:da:
                    66:50:70:d5:ad:b0:2a:bb:3f:70:23:1c:62:cc:41:
                    c8:02:59:5a:88:e6:07:42:ca:a1:1f:03:8b:42:e1:
                    b1:63:71:1c:67:9c:3d:a2:95:d6:da:9b:86:01:a6:
                    70:50:7a:74:fc:ae:ce:0e:f7:31:b7:73:d1:3d:aa:
                    23:4a:75:aa:27:b7:20:03:c0:70:68:37:0a:5a:ea:
                    a3:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:27:A7:EF:10:06:D0:17:F5:1A:B6:7D:22:D1:B1:78:C6:45:01:EE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f9c1c2eb-5203-4606-9bf1-51bde59fa3d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ffb:e000::/40

    Signature Algorithm: sha256WithRSAEncryption
         7e:d8:98:64:1a:b4:f6:f9:59:29:59:ae:3e:13:0b:66:51:cd:
         d7:9b:24:d1:3d:ea:4e:a3:05:ef:00:a7:4f:c8:77:3b:af:70:
         c9:bc:71:ef:de:6f:b2:7d:4c:a8:a9:86:db:00:e5:55:e9:ed:
         a5:9a:5f:18:11:7f:f6:99:b0:10:13:29:68:23:c3:0b:09:7f:
         0c:2c:38:9f:82:61:0d:ee:15:c3:f0:42:83:47:d2:ba:bf:5e:
         00:36:da:2a:25:03:00:a3:30:bc:b6:8b:92:b1:9d:84:1c:25:
         d3:86:15:ef:ed:e6:60:ff:43:91:a0:e8:5e:87:1a:89:24:42:
         25:ce:27:e7:c1:7a:83:45:00:80:28:fb:32:28:ab:37:a0:10:
         10:e0:eb:c2:fe:17:40:78:77:69:5f:11:76:bc:b5:b9:6b:92:
         69:48:5c:ea:c1:26:55:cb:98:2f:d5:d9:bc:62:fe:11:44:78:
         06:6e:a4:94:1c:de:7d:c4:af:e6:65:e8:5a:bc:08:2f:df:0f:
         cd:7f:b1:c9:f1:0d:1f:f7:f4:72:84:28:0a:b3:e4:17:84:4a:
         52:37:bf:a3:12:3d:40:4d:d9:8c:6d:bc:54:48:1d:87:49:68:
         a5:16:e1:39:e3:f9:e5:cb:20:23:3c:3b:4f:b4:31:32:e5:9c:
         0b:a0:d7:2f
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUO54PgDnakIpe5Nm5pApnS0oUYh8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzMxMDEzMTE5WhcNMjYxMDI5MjM1OTU5
WjB6MUkwRwYDVQQFE0BhZGNjY2E3NDgwOWMyODFhOWVhOWVlMDM3NWJjYTE1Mzg0
MTMzOTg4N2NiNzcwMWQ4YWQwZjlhNjZlYjI5MWIyMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC1bkid7xa1kxSgHOJgwSrFXF/KUkGwjJsLzgrP93Uogeuf
GWmbwURaLUjiPaXiqk6w6zRp0+cQaOInad/nJrut9flh8vYMNlWIFj4T+2cY4Fmv
VivjiS8YXIEH3acRNFWFa0nsxzoUyrdsS/TwM4bBkV86GaPv8VLssHaz2Z0na0Sw
dL/iNHIT8iLqxpUA31Ae9ZT1uaYLUi6yhDVj4k/XG+sPHLLsQpLD2WXbNe69s2M8
2mZQcNWtsCq7P3AjHGLMQcgCWVqI5gdCyqEfA4tC4bFjcRxnnD2ildbam4YBpnBQ
enT8rs4O9zG3c9E9qiNKdaontyADwHBoNwpa6qPhAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUOien7xAG0Bf1GrZ9ItGxeMZFAe4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2Y5YzFjMmViLTUyMDMtNDYwNi05YmYxLTUxYmRlNTlmYTNkNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB/74DANBgkqhkiG9w0BAQsFAAOCAQEAftiYZBq09vlZKVmuPhMLZlHN
15sk0T3qTqMF7wCnT8h3O69wybxx795vsn1MqKmG2wDlVentpZpfGBF/9pmwEBMp
aCPDCwl/DCw4n4JhDe4Vw/BCg0fSur9eADbaKiUDAKMwvLaLkrGdhBwl04YV7+3m
YP9DkaDoXocaiSRCJc4n58F6g0UAgCj7MiirN6AQEODrwv4XQHh3aV8Rdry1uWuS
aUhc6sEmVcuYL9XZvGL+EUR4Bm6klBzefcSv5mXoWrwIL98PzX+xyfENH/f0coQo
CrPkF4RKUje/oxI9QE3ZjG28VEgdh0lopRbhOeP55csgIzw7T7QxMuWcC6DXLw==
-----END CERTIFICATE-----
Generated at Tue Sep 15 13:20:56 2026 by rpki-client