Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/6790bc13-b439-424c-8aec-900aae1aaabe.roa
File:                     6790bc13-b439-424c-8aec-900aae1aaabe.roa (raw, json)
Hash identifier:          CMd98NXH40Tf2MQsc4yUw3SsJZq9OEtPuQ9X5rN7zpY=
Subject key identifier:   06:C0:AC:35:37:48:10:DE:F6:01:C2:B8:18:E6:5F:ED:B8:D7:04:B1
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       26032CA3AA551AF2B6038CEFB8764FEF70351A98
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/6790bc13-b439-424c-8aec-900aae1aaabe.roa
Signing time:             Wed 05 Aug 2026 01:50:20 +0000
ROA not before:           Wed 05 Aug 2026 01:50:20 +0000
ROA not after:            Tue 03 Nov 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2606:7b40:1f00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:03:2c:a3:aa:55:1a:f2:b6:03:8c:ef:b8:76:4f:ef:70:35:1a:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: Aug  5 01:50:20 2026 GMT
            Not After : Nov  3 23:59:59 2026 GMT
        Subject: serialNumber=5bb8112c74b6e2558e509d57574d547988e9eea4850e61beb78560fce7849899, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:cc:2d:11:c6:50:64:d3:35:0b:ba:76:0a:39:
                    d2:85:d4:b5:c6:f7:36:f7:7e:03:72:dc:ec:ed:92:
                    4b:11:ad:c2:fe:48:ee:27:92:72:45:d8:a7:d4:9d:
                    c0:1b:b9:1e:7b:33:a9:ea:ff:5f:87:b9:78:8e:18:
                    00:78:d5:f9:20:b4:72:bd:15:d1:57:3c:a8:13:b3:
                    c3:81:04:e8:ea:61:8a:8d:20:03:92:9e:1f:13:e6:
                    09:de:af:92:91:47:10:d0:34:8f:b2:76:89:73:10:
                    c9:4f:81:19:82:a3:a1:f0:d5:25:63:ce:7f:0e:10:
                    d0:db:c2:8e:11:11:f2:92:6c:f0:da:2e:63:29:de:
                    25:c5:c4:ba:0a:cf:3a:8a:a9:0a:4c:07:a0:75:cf:
                    7e:4f:55:8f:f9:04:dd:d5:d9:8c:3a:5e:be:e5:e2:
                    e0:14:62:b5:5a:05:23:37:f9:81:51:f5:d7:c6:cb:
                    c5:d2:31:c3:7e:80:a6:42:d7:6a:e1:49:1f:9d:3f:
                    78:a3:fd:10:c7:a1:7c:a2:be:96:8c:bd:be:24:9b:
                    a4:77:19:2e:88:a6:74:e2:21:32:4a:07:f0:d6:2e:
                    31:35:c1:9f:af:3a:f3:b0:da:b6:c0:35:3f:df:b2:
                    f7:b8:00:33:5f:df:a5:6e:d7:66:51:bc:02:6a:ac:
                    a3:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:C0:AC:35:37:48:10:DE:F6:01:C2:B8:18:E6:5F:ED:B8:D7:04:B1
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/6790bc13-b439-424c-8aec-900aae1aaabe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7b40:1f00::/48

    Signature Algorithm: sha256WithRSAEncryption
         31:63:0d:d3:27:92:f2:16:e8:de:9d:65:4d:3d:84:36:b4:fb:
         97:4e:bc:ff:e9:9c:4c:e4:db:95:c6:8a:7f:a9:4d:0d:b3:d9:
         74:b3:f0:e0:3c:73:bd:27:b8:bd:b1:7a:9b:fb:43:ed:ed:03:
         0b:d6:ef:26:0d:39:82:7e:72:84:75:35:f2:42:ce:f4:d7:d2:
         2c:cf:dc:5a:2e:b1:0a:3c:bd:e2:21:9e:f4:92:fa:04:6d:b2:
         d3:86:33:f8:e6:ac:fc:c4:15:39:f8:55:53:aa:87:8a:c4:58:
         af:90:6f:a2:07:f7:a4:51:ba:6e:69:0e:2b:b6:85:24:8c:ce:
         f7:fb:90:6d:78:9c:26:89:3e:ed:d3:ea:c2:1f:8e:cb:05:34:
         de:dd:6a:0a:1b:13:5b:b7:d7:3c:2f:e4:b9:c5:f2:32:12:33:
         5a:c5:e9:1e:3a:f7:9f:95:99:f4:fa:30:d1:ec:0f:ea:82:cd:
         4b:4f:f0:14:25:27:54:42:99:3f:2c:c7:98:b6:4c:23:6e:df:
         5c:94:f0:cd:ef:c2:3a:61:3d:ee:ff:b6:58:e8:e1:7a:70:af:
         d5:58:05:92:ff:c0:26:43:10:e0:b3:bf:ee:d4:c3:8e:72:d4:
         98:db:2f:02:89:3d:16:6f:25:02:7f:07:63:97:fd:0a:7f:a1:
         bb:b8:3e:d5
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUJgMso6pVGvK2A4zvuHZP73A1GpgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh
MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwODA1MDE1MDIwWhcNMjYxMTAzMjM1OTU5
WjB6MUkwRwYDVQQFE0A1YmI4MTEyYzc0YjZlMjU1OGU1MDlkNTc1NzRkNTQ3OTg4
ZTllZWE0ODUwZTYxYmViNzg1NjBmY2U3ODQ5ODk5MS0wKwYDVQQDEyQ4Y2Q4NDQy
Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC7zC0RxlBk0zULunYKOdKF1LXG9zb3fgNy3OztkksRrcL+
SO4nknJF2KfUncAbuR57M6nq/1+HuXiOGAB41fkgtHK9FdFXPKgTs8OBBOjqYYqN
IAOSnh8T5gner5KRRxDQNI+ydolzEMlPgRmCo6Hw1SVjzn8OENDbwo4REfKSbPDa
LmMp3iXFxLoKzzqKqQpMB6B1z35PVY/5BN3V2Yw6Xr7l4uAUYrVaBSM3+YFR9dfG
y8XSMcN+gKZC12rhSR+dP3ij/RDHoXyivpaMvb4km6R3GS6IpnTiITJKB/DWLjE1
wZ+vOvOw2rbANT/fsve4ADNf36Vu12ZRvAJqrKMZAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUBsCsNTdIEN72AcK4GOZf7bjXBLEwHwYDVR0jBBgwFoAUasw+faLnbZkR
D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00
NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1
Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx
MTI5ODY2MzYyLzY3OTBiYzEzLWI0MzktNDI0Yy04YWVjLTkwMGFhZTFhYWFiZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4
LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmBntAHwAwDQYJKoZIhvcNAQELBQADggEBADFjDdMnkvIW6N6dZU09hDa0
+5dOvP/pnEzk25XGin+pTQ2z2XSz8OA8c70nuL2xepv7Q+3tAwvW7yYNOYJ+coR1
NfJCzvTX0izP3FousQo8veIhnvSS+gRtstOGM/jmrPzEFTn4VVOqh4rEWK+Qb6IH
96RRum5pDiu2hSSMzvf7kG14nCaJPu3T6sIfjssFNN7dagobE1u31zwv5LnF8jIS
M1rF6R4695+VmfT6MNHsD+qCzUtP8BQlJ1RCmT8sx5i2TCNu31yU8M3vwjphPe7/
tljo4Xpwr9VYBZL/wCZDEOCzv+7Uw45y1JjbLwKJPRZvJQJ/B2OX/Qp/obu4PtU=
-----END CERTIFICATE-----
Generated at Thu Aug 20 22:53:26 2026 by rpki-client