Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/14cf9082-2955-413b-a473-12f3b4acb6a6.roa
File:                     14cf9082-2955-413b-a473-12f3b4acb6a6.roa (raw, json)
Hash identifier:          1OdSkuTr6Ecj8hhmpGaTzk5TKKz4Abx77Ku/bF8/MY8=
Subject key identifier:   FF:6C:7C:8E:A3:A5:8C:39:5B:C6:52:98:80:67:8A:F5:F5:1D:E7:4D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       16BF449F8002AB54BED2EE79C7CCFCDE2FB03F03
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/14cf9082-2955-413b-a473-12f3b4acb6a6.roa
Signing time:             Sat 16 May 2026 00:50:38 +0000
ROA not before:           Sat 16 May 2026 00:50:38 +0000
ROA not after:            Fri 14 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f24:c000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:bf:44:9f:80:02:ab:54:be:d2:ee:79:c7:cc:fc:de:2f:b0:3f:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 16 00:50:38 2026 GMT
            Not After : Aug 14 23:59:59 2026 GMT
        Subject: serialNumber=99663312df5fe1f2b4dbf53c5ab253d34c10110800483734cf549e1c151cd88f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f3:8f:db:44:8d:05:fd:a1:2d:7c:56:15:b2:
                    98:ae:a3:08:96:d7:ea:bd:5f:b9:29:34:4b:ed:33:
                    35:b4:d7:eb:5c:35:35:dc:9e:2e:da:43:2e:23:bc:
                    27:65:97:ba:f9:fc:f6:5d:37:b1:fe:48:6d:58:10:
                    3e:8c:cf:74:97:1c:36:ca:50:34:5b:d3:d0:e5:af:
                    50:5e:61:16:c1:3e:f5:f0:83:99:2c:b0:3e:ba:70:
                    30:c8:1f:9c:4b:fd:1d:d1:88:4e:5f:3c:e0:70:d3:
                    16:32:99:3e:2f:11:3e:21:00:98:d9:c4:1a:df:98:
                    ea:ad:d0:b3:90:f8:3c:8d:50:ea:dd:9f:a8:b6:5b:
                    ea:42:a3:e5:98:d4:c5:47:bc:50:e1:b7:cc:9e:56:
                    43:59:7c:f3:69:ee:07:3f:08:12:1a:cb:03:ca:c3:
                    d0:b3:52:34:8d:39:30:c9:a5:dc:d8:35:d5:da:62:
                    09:0b:1f:96:e9:1a:60:0a:da:c3:4d:9e:a0:13:cc:
                    6d:01:8b:ac:57:35:8c:fa:ee:84:18:2d:6f:da:31:
                    b9:19:75:f7:49:91:ea:4b:96:fe:91:86:17:c1:ee:
                    84:a6:4b:28:dc:f9:42:f2:1c:b6:38:18:01:6f:4b:
                    d9:1a:0f:46:bf:66:c9:02:f0:17:5e:09:ff:80:91:
                    51:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:6C:7C:8E:A3:A5:8C:39:5B:C6:52:98:80:67:8A:F5:F5:1D:E7:4D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/14cf9082-2955-413b-a473-12f3b4acb6a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f24:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         97:7d:1f:6b:06:ce:1e:33:64:2b:a8:15:db:31:23:dc:65:0a:
         a0:e9:cc:28:db:92:40:a9:39:db:f9:88:e0:cf:44:0a:83:db:
         69:c5:c4:a4:7a:97:cb:b5:69:cc:b7:f0:97:b4:f9:0f:ec:a4:
         b6:1b:ff:d9:d2:a6:2c:ad:56:e1:b4:02:2e:2e:7f:0e:a8:7e:
         84:60:eb:49:ae:fa:c5:9d:db:7d:7b:43:f7:4e:84:d5:48:fa:
         a9:80:1e:43:c6:6c:ea:06:1a:17:43:20:dd:19:d3:36:cb:6a:
         0b:4e:25:a4:28:83:e7:32:e6:3b:21:9d:37:3d:5e:cc:8a:18:
         d6:cb:b8:29:b5:c4:97:2f:f8:a2:71:58:4c:f9:49:c1:88:6b:
         35:f8:66:b1:d7:fb:34:47:8b:a9:c5:f5:69:3e:74:8c:86:d8:
         89:7c:6b:57:e3:ed:35:aa:1a:45:6c:07:7f:1b:e8:3d:bb:36:
         0a:a8:58:c0:1f:82:3d:69:c9:50:54:68:50:05:3c:dc:24:50:
         52:14:ca:e7:fc:2c:7b:94:1c:4d:f8:15:1c:cf:91:65:33:3a:
         a8:0f:cb:ed:7a:5e:ce:81:68:41:3d:eb:94:bb:fc:fa:61:b2:
         e4:0f:c1:b2:be:28:61:7f:36:77:a6:5d:7b:f0:ca:7b:c6:a5:
         57:2b:7e:8e
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUFr9En4ACq1S+0u55x8z83i+wPwMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE2MDA1MDM4WhcNMjYwODE0MjM1OTU5
WjB6MUkwRwYDVQQFE0A5OTY2MzMxMmRmNWZlMWYyYjRkYmY1M2M1YWIyNTNkMzRj
MTAxMTA4MDA0ODM3MzRjZjU0OWUxYzE1MWNkODhmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCG84/bRI0F/aEtfFYVspiuowiW1+q9X7kpNEvtMzW01+tc
NTXcni7aQy4jvCdll7r5/PZdN7H+SG1YED6Mz3SXHDbKUDRb09Dlr1BeYRbBPvXw
g5kssD66cDDIH5xL/R3RiE5fPOBw0xYymT4vET4hAJjZxBrfmOqt0LOQ+DyNUOrd
n6i2W+pCo+WY1MVHvFDht8yeVkNZfPNp7gc/CBIaywPKw9CzUjSNOTDJpdzYNdXa
YgkLH5bpGmAK2sNNnqATzG0Bi6xXNYz67oQYLW/aMbkZdfdJkepLlv6RhhfB7oSm
Syjc+ULyHLY4GAFvS9kaD0a/ZskC8BdeCf+AkVEvAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQU/2x8jqOljDlbxlKYgGeK9fUd500wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzE0Y2Y5MDgyLTI5NTUtNDEzYi1hNDczLTEyZjNiNGFjYjZhNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgQmAB8kwDANBgkqhkiG9w0BAQsFAAOCAQEAl30fawbOHjNkK6gV2zEj3GUK
oOnMKNuSQKk52/mI4M9ECoPbacXEpHqXy7VpzLfwl7T5D+ykthv/2dKmLK1W4bQC
Li5/Dqh+hGDrSa76xZ3bfXtD906E1Uj6qYAeQ8Zs6gYaF0Mg3RnTNstqC04lpCiD
5zLmOyGdNz1ezIoY1su4KbXEly/4onFYTPlJwYhrNfhmsdf7NEeLqcX1aT50jIbY
iXxrV+PtNaoaRWwHfxvoPbs2CqhYwB+CPWnJUFRoUAU83CRQUhTK5/wse5QcTfgV
HM+RZTM6qA/L7XpezoFoQT3rlLv8+mGy5A/Bsr4oYX82d6Zde/DKe8alVyt+jg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:50:43 2026 by rpki-client