Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/09f53be8-3eb1-472a-9d79-dad807a72234.roa
File:                     09f53be8-3eb1-472a-9d79-dad807a72234.roa (raw, json)
Hash identifier:          sqtK5jOe09jmXjQsGn9IuY1jH3jG7DBrayezZmsJNvQ=
Subject key identifier:   09:69:26:10:FE:CE:C1:97:43:F9:F2:11:DF:63:72:36:8F:F9:1A:30
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2C141D26D726CF3D7D5E1C7BB34A830A1CFE4224
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/09f53be8-3eb1-472a-9d79-dad807a72234.roa
Signing time:             Wed 25 Feb 2026 02:01:12 +0000
ROA not before:           Wed 25 Feb 2026 02:01:12 +0000
ROA not after:            Tue 26 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f70:8000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:14:1d:26:d7:26:cf:3d:7d:5e:1c:7b:b3:4a:83:0a:1c:fe:42:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 25 02:01:12 2026 GMT
            Not After : May 26 23:59:59 2026 GMT
        Subject: serialNumber=f358190bfabd9a1b9ae799b6502fa546e0a7ceec8178118994a046e7f2ce701e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:97:ab:4b:7b:37:82:20:63:b2:5e:22:f1:80:
                    90:e6:bb:fa:ef:bf:e0:f8:21:1f:d9:98:bf:87:6d:
                    9e:70:44:12:4e:38:2b:f0:75:b0:8e:5e:9a:58:21:
                    29:a8:37:a4:9c:7c:3d:36:e7:fe:0e:99:bc:b2:99:
                    ea:83:dd:96:72:a3:6f:b9:bd:95:0c:71:d2:51:03:
                    4f:af:8d:90:a9:d2:e8:31:a5:59:8e:1e:03:20:1b:
                    a2:4f:b2:9a:33:01:4f:13:e4:6b:43:cf:88:5c:ef:
                    78:84:ff:24:80:ae:a2:f7:46:dd:36:9a:20:19:8b:
                    15:b2:72:63:fa:f0:90:9a:35:ef:b3:e4:a8:b2:b0:
                    d5:29:d4:c7:47:33:a8:5a:db:d7:d4:3f:5d:9e:b8:
                    7f:f8:cf:b2:81:7c:e1:6b:45:8b:5b:eb:79:22:d0:
                    29:61:fc:0a:49:70:eb:87:6c:9d:4a:37:2d:0e:69:
                    30:56:52:a7:2c:b5:10:52:e3:97:d2:da:9d:07:c3:
                    4a:b0:6c:dc:78:49:93:58:58:58:c6:7c:a2:47:17:
                    6b:14:4b:07:26:d8:90:d5:52:4a:7c:c3:fa:c7:29:
                    f4:69:82:c4:4c:f9:22:35:c1:5c:67:57:e1:fd:bb:
                    05:56:cd:52:39:68:1e:a9:d7:17:8b:ef:47:6b:10:
                    01:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:69:26:10:FE:CE:C1:97:43:F9:F2:11:DF:63:72:36:8F:F9:1A:30
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/09f53be8-3eb1-472a-9d79-dad807a72234.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f70:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         9c:ae:a2:e7:bc:a9:dc:eb:ed:7c:33:96:6e:96:19:90:02:96:
         42:af:56:b2:e4:58:a0:2c:f1:06:b1:cd:0d:dd:42:20:7a:d7:
         cc:e1:d2:bf:fa:3c:b1:50:42:a3:ea:19:c3:10:cc:92:f1:fe:
         ff:ea:41:f4:85:bc:f4:7b:59:eb:1d:c7:41:19:c1:f4:e8:8a:
         fc:b1:7a:0d:14:a6:fc:ac:98:1d:ef:41:dc:54:e2:4c:05:1b:
         e2:ca:c2:82:8d:05:53:0e:75:0f:c9:4a:2b:ff:04:2c:59:a0:
         bd:ef:69:0a:d7:3f:5a:ee:6d:8f:0e:29:0f:5f:be:d7:54:c4:
         c0:3c:93:d1:24:2d:77:40:ea:7e:0f:2e:c1:ef:83:f9:33:14:
         d4:87:10:0d:22:6a:ec:14:aa:65:6e:1c:b8:db:60:67:22:7a:
         c4:26:58:cf:3f:a7:ba:39:6f:ac:41:c9:78:03:a6:32:b8:d5:
         ff:75:da:74:76:8a:98:03:34:39:b6:a0:c9:78:ed:98:dc:1e:
         70:40:3a:00:5e:4a:95:87:9c:a4:68:0c:62:63:f2:68:f9:05:
         89:3b:a8:7b:af:82:9a:36:25:cf:84:e6:3b:5e:23:e0:61:6f:
         bc:da:60:3b:d3:85:de:6b:b2:81:42:68:bd:b8:b5:3d:58:25:
         47:49:d3:25
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIULBQdJtcmzz19Xhx7s0qDChz+QiQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI1MDIwMTEyWhcNMjYwNTI2MjM1OTU5
WjB6MUkwRwYDVQQFE0BmMzU4MTkwYmZhYmQ5YTFiOWFlNzk5YjY1MDJmYTU0NmUw
YTdjZWVjODE3ODExODk5NGEwNDZlN2YyY2U3MDFlMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDvl6tLezeCIGOyXiLxgJDmu/rvv+D4IR/ZmL+HbZ5wRBJO
OCvwdbCOXppYISmoN6ScfD025/4OmbyymeqD3ZZyo2+5vZUMcdJRA0+vjZCp0ugx
pVmOHgMgG6JPspozAU8T5GtDz4hc73iE/ySArqL3Rt02miAZixWycmP68JCaNe+z
5KiysNUp1MdHM6ha29fUP12euH/4z7KBfOFrRYtb63ki0Clh/ApJcOuHbJ1KNy0O
aTBWUqcstRBS45fS2p0Hw0qwbNx4SZNYWFjGfKJHF2sUSwcm2JDVUkp8w/rHKfRp
gsRM+SI1wVxnV+H9uwVWzVI5aB6p1xeL70drEAF7AgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUCWkmEP7OwZdD+fIR32NyNo/5GjAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzA5ZjUzYmU4LTNlYjEtNDcyYS05ZDc5LWRhZDgwN2E3MjIzNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB9wgDANBgkqhkiG9w0BAQsFAAOCAQEAnK6i57yp3OvtfDOWbpYZkAKW
Qq9WsuRYoCzxBrHNDd1CIHrXzOHSv/o8sVBCo+oZwxDMkvH+/+pB9IW89HtZ6x3H
QRnB9OiK/LF6DRSm/KyYHe9B3FTiTAUb4srCgo0FUw51D8lKK/8ELFmgve9pCtc/
Wu5tjw4pD1++11TEwDyT0SQtd0Dqfg8uwe+D+TMU1IcQDSJq7BSqZW4cuNtgZyJ6
xCZYzz+nujlvrEHJeAOmMrjV/3XadHaKmAM0ObagyXjtmNwecEA6AF5KlYecpGgM
YmPyaPkFiTuoe6+CmjYlz4TmO14j4GFvvNpgO9OF3muygUJovbi1PVglR0nTJQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:34:37 2026 by rpki-client