Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/133cebbb-23db-42e9-b847-3ba2de1bf914.roa
File:                     133cebbb-23db-42e9-b847-3ba2de1bf914.roa (raw, json)
Hash identifier:          hJ7smrYYQevOCunh6Drqa6twfrZMRi59lqAvRmPgRG4=
Subject key identifier:   A2:51:01:80:E0:3C:C5:ED:34:C7:18:CF:2D:72:49:EE:12:AD:E4:CC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4454F582A77C4A69B697192FAFFD6FB73D6FEDD3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/133cebbb-23db-42e9-b847-3ba2de1bf914.roa
Signing time:             Fri 15 May 2026 01:10:06 +0000
ROA not before:           Fri 15 May 2026 01:10:06 +0000
ROA not after:            Thu 13 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fff:a4c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:54:f5:82:a7:7c:4a:69:b6:97:19:2f:af:fd:6f:b7:3d:6f:ed:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 15 01:10:06 2026 GMT
            Not After : Aug 13 23:59:59 2026 GMT
        Subject: serialNumber=68440966fa535cb14f78454573ad5398a65d40c961f0c1af442786e149684874, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5a:75:a8:6f:29:00:9f:8a:6b:a5:b0:db:82:
                    5f:7b:d4:50:2e:e5:cd:f6:90:df:87:65:5e:5d:80:
                    ad:e5:fa:2f:bb:a5:cd:ec:c3:b4:31:ab:b9:ef:9f:
                    7e:1b:39:ae:c0:79:cf:ea:7d:c7:e3:75:38:69:ba:
                    85:bc:81:4c:2d:6d:4f:ce:ba:41:92:ea:f0:06:86:
                    14:fd:70:90:1a:48:2f:31:c6:c3:2f:41:80:1c:e0:
                    94:2a:6f:78:a1:7a:a4:cf:33:54:7a:88:91:10:76:
                    ab:e2:68:2d:4e:84:88:f6:83:12:80:e2:1c:3f:88:
                    dc:6f:18:28:b7:fa:e6:6c:e5:38:19:af:54:9a:17:
                    3c:a8:f9:fb:a9:d5:79:4f:3f:80:1c:cc:b5:86:a7:
                    a7:dd:dc:5f:a4:f3:c9:6e:9d:99:c1:1e:e0:82:9d:
                    85:c3:5c:40:83:b7:95:85:28:38:7e:40:be:4f:d0:
                    2e:0b:79:64:c6:e6:cf:06:69:6c:b6:b5:c2:26:98:
                    b7:48:fe:a1:91:b6:b6:f5:fe:d1:89:19:36:1f:9b:
                    81:87:47:94:e3:0e:b5:2d:57:a3:d2:7b:c3:aa:1f:
                    59:88:14:54:54:3a:73:5c:3b:ed:10:4c:1d:84:fe:
                    ae:e9:dd:46:33:a1:1b:e7:81:e6:61:d5:96:86:9c:
                    a6:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:51:01:80:E0:3C:C5:ED:34:C7:18:CF:2D:72:49:EE:12:AD:E4:CC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/133cebbb-23db-42e9-b847-3ba2de1bf914.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fff:a4c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:0a:95:17:8a:77:49:8a:c8:a6:61:f6:c9:bd:d8:20:39:a4:
         ac:ff:7b:4c:ab:32:11:4a:6a:75:b9:ee:6f:12:d4:19:0c:95:
         d6:14:4d:cf:a6:ab:d3:b2:fb:a4:85:5d:16:3a:65:0f:13:12:
         16:d7:40:01:1f:cd:60:74:68:72:f8:66:68:82:7d:e4:20:ca:
         f7:6e:84:f1:f6:7f:7e:e4:c1:07:20:e5:82:cd:c9:04:1c:d0:
         f7:8a:0b:99:25:6c:ee:11:fb:23:14:7d:62:89:9b:37:66:e5:
         23:d2:31:8c:93:47:21:b7:65:93:eb:e2:63:4e:fb:e4:92:c3:
         ca:b1:a6:e9:74:b3:f6:64:30:98:dc:e4:7c:07:d9:b8:e0:8c:
         e4:bd:d2:bb:60:fd:06:c1:e7:0e:a9:5e:a1:2e:8e:1b:7e:01:
         c8:8b:0d:88:52:86:9a:fa:dd:d3:82:1d:c8:0d:38:42:41:41:
         61:38:20:06:cd:ba:07:96:46:38:91:5b:bd:23:c3:3f:59:d6:
         82:e6:e9:e9:57:35:1c:73:87:f0:45:4e:1b:f0:c0:7a:ef:5b:
         61:42:cd:ef:7b:42:3b:ef:45:0b:42:89:df:1f:d1:99:17:0b:
         2e:b0:75:0d:30:3a:d3:aa:40:07:8f:04:02:10:a2:4a:39:4e:
         50:3e:00:9b
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIURFT1gqd8Smm2lxkvr/1vtz1v7dMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE1MDExMDA2WhcNMjYwODEzMjM1OTU5
WjB6MUkwRwYDVQQFE0A2ODQ0MDk2NmZhNTM1Y2IxNGY3ODQ1NDU3M2FkNTM5OGE2
NWQ0MGM5NjFmMGMxYWY0NDI3ODZlMTQ5Njg0ODc0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDTWnWobykAn4prpbDbgl971FAu5c32kN+HZV5dgK3l+i+7
pc3sw7Qxq7nvn34bOa7Aec/qfcfjdThpuoW8gUwtbU/OukGS6vAGhhT9cJAaSC8x
xsMvQYAc4JQqb3iheqTPM1R6iJEQdqviaC1OhIj2gxKA4hw/iNxvGCi3+uZs5TgZ
r1SaFzyo+fup1XlPP4AczLWGp6fd3F+k88lunZnBHuCCnYXDXECDt5WFKDh+QL5P
0C4LeWTG5s8GaWy2tcImmLdI/qGRtrb1/tGJGTYfm4GHR5TjDrUtV6PSe8OqH1mI
FFRUOnNcO+0QTB2E/q7p3UYzoRvngeZh1ZaGnKZPAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUolEBgOA8xe00xxjPLXJJ7hKt5MwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzEzM2NlYmJiLTIzZGItNDJlOS1iODQ3LTNiYTJkZTFiZjkxNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB//pMAwDQYJKoZIhvcNAQELBQADggEBAIEKlReKd0mKyKZh9sm92CA5
pKz/e0yrMhFKanW57m8S1BkMldYUTc+mq9Oy+6SFXRY6ZQ8TEhbXQAEfzWB0aHL4
ZmiCfeQgyvduhPH2f37kwQcg5YLNyQQc0PeKC5klbO4R+yMUfWKJmzdm5SPSMYyT
RyG3ZZPr4mNO++SSw8qxpul0s/ZkMJjc5HwH2bjgjOS90rtg/QbB5w6pXqEujht+
AciLDYhShpr63dOCHcgNOEJBQWE4IAbNugeWRjiRW70jwz9Z1oLm6elXNRxzh/BF
ThvwwHrvW2FCze97QjvvRQtCid8f0ZkXCy6wdQ0wOtOqQAePBAIQoko5TlA+AJs=
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:04:06 2026 by rpki-client