Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1d875efc-9c2f-4d49-87e6-ad3ebee32018.roa
File:                     1d875efc-9c2f-4d49-87e6-ad3ebee32018.roa (raw, json)
Hash identifier:          2kKt8ISAwC8kxSVm+5L+e3uJ61FlOtl1a+KHwJBY+s8=
Subject key identifier:   D1:B3:A3:F2:36:A5:F2:7E:65:D5:10:A2:6D:3D:EA:62:92:14:93:B2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       45409D8F5A24B96A03A77699CC8825C6A7036E95
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1d875efc-9c2f-4d49-87e6-ad3ebee32018.roa
Signing time:             Sat 16 May 2026 01:40:08 +0000
ROA not before:           Sat 16 May 2026 01:40:08 +0000
ROA not after:            Fri 14 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fb9:6000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:40:9d:8f:5a:24:b9:6a:03:a7:76:99:cc:88:25:c6:a7:03:6e:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 16 01:40:08 2026 GMT
            Not After : Aug 14 23:59:59 2026 GMT
        Subject: serialNumber=a4530ec97e1ffa984ee56f65464d0bb2cc4c56dfb8d2d5d97b4512320f9ac908, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:7f:ca:b0:cf:c5:b5:49:a9:b9:d2:6b:44:dc:
                    67:aa:04:d1:b4:ab:bf:72:d0:42:0c:e9:88:4a:22:
                    32:ce:ac:2a:23:c5:09:8b:10:67:f0:42:9d:61:3b:
                    a9:68:43:84:1f:f6:75:87:11:11:14:d9:94:fa:6a:
                    0c:2b:bc:bc:82:de:ea:c2:87:48:6a:93:3d:8a:7b:
                    04:37:b0:32:31:5a:47:a1:73:b4:3d:cf:6f:3b:66:
                    27:22:1c:6a:35:06:2e:da:2a:83:c0:e6:65:0f:7b:
                    f7:00:d0:3f:3f:fe:43:f3:b8:a1:8b:c8:4b:39:cb:
                    e7:94:c4:b4:2b:f2:c5:24:a9:bb:46:c6:13:3a:62:
                    c4:42:56:2c:dc:ec:41:7a:07:a5:a2:66:ca:ff:56:
                    96:c4:76:b7:51:16:8d:12:70:d8:ea:1a:8d:ab:a2:
                    38:c3:0d:74:59:8c:eb:e4:1a:6a:06:3c:c5:3a:9b:
                    93:23:d3:8d:63:31:11:0d:de:b0:f2:03:c7:43:62:
                    be:e2:5f:43:77:fb:6c:67:2a:ef:88:5e:65:fb:9b:
                    2b:c8:64:d5:de:d4:9c:97:0f:ef:0f:b3:1d:b3:3b:
                    d4:cc:2a:66:dd:36:39:64:1c:2f:11:2f:61:1d:47:
                    c0:c1:5d:b2:f7:ad:a6:59:09:92:3b:3d:bf:de:95:
                    7e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:B3:A3:F2:36:A5:F2:7E:65:D5:10:A2:6D:3D:EA:62:92:14:93:B2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1d875efc-9c2f-4d49-87e6-ad3ebee32018.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fb9:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         b9:33:40:bc:38:33:73:b5:fd:6a:57:d7:ed:a2:c9:92:9c:db:
         49:7b:1b:5d:a7:ce:72:6f:fe:fc:57:2f:6f:50:c1:80:98:50:
         e8:3c:66:4b:d1:f7:f3:e3:3c:a2:d3:eb:38:4f:e1:6b:3b:92:
         54:44:8d:45:69:c3:e2:8c:6b:00:1b:e0:05:35:12:66:a3:77:
         a6:3e:5c:67:d7:d1:36:cd:a0:21:6d:04:b8:53:03:fa:cc:0f:
         6f:3f:31:fd:91:15:4c:e2:45:14:2a:4a:b0:d4:15:55:d3:37:
         f4:18:a5:20:13:07:3d:dc:05:7d:66:ee:c6:8b:58:4a:df:b8:
         ab:c1:26:fb:53:52:12:a4:b6:33:3b:f6:55:e9:37:2d:49:4b:
         11:f8:ec:ca:5c:0a:a3:c6:a4:c6:dd:30:f9:92:fa:78:b2:06:
         67:aa:f4:1f:5a:db:2c:69:b0:49:77:8b:43:93:37:d3:22:d6:
         46:1d:d7:ad:67:f7:9a:37:ad:ec:61:3b:5d:d8:c8:4f:a8:bd:
         2b:0f:1f:87:54:78:62:16:0b:65:11:7d:8e:ec:cd:49:8c:a8:
         45:7c:c8:07:12:1a:c4:11:ea:e8:14:98:73:51:ac:9b:ef:c8:
         12:93:28:06:8d:cf:30:0e:a6:43:1d:16:01:a9:75:82:e9:b1:
         ed:a9:2a:ea
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIURUCdj1okuWoDp3aZzIglxqcDbpUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE2MDE0MDA4WhcNMjYwODE0MjM1OTU5
WjB6MUkwRwYDVQQFE0BhNDUzMGVjOTdlMWZmYTk4NGVlNTZmNjU0NjRkMGJiMmNj
NGM1NmRmYjhkMmQ1ZDk3YjQ1MTIzMjBmOWFjOTA4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCSf8qwz8W1Sam50mtE3GeqBNG0q79y0EIM6YhKIjLOrCoj
xQmLEGfwQp1hO6loQ4Qf9nWHEREU2ZT6agwrvLyC3urCh0hqkz2KewQ3sDIxWkeh
c7Q9z287ZiciHGo1Bi7aKoPA5mUPe/cA0D8//kPzuKGLyEs5y+eUxLQr8sUkqbtG
xhM6YsRCVizc7EF6B6WiZsr/VpbEdrdRFo0ScNjqGo2rojjDDXRZjOvkGmoGPMU6
m5Mj041jMREN3rDyA8dDYr7iX0N3+2xnKu+IXmX7myvIZNXe1JyXD+8Psx2zO9TM
KmbdNjlkHC8RL2EdR8DBXbL3raZZCZI7Pb/elX6FAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQU0bOj8jal8n5l1RCibT3qYpIUk7IwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzFkODc1ZWZjLTljMmYtNGQ0OS04N2U2LWFkM2ViZWUzMjAxOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB+5YDANBgkqhkiG9w0BAQsFAAOCAQEAuTNAvDgzc7X9alfX7aLJkpzb
SXsbXafOcm/+/Fcvb1DBgJhQ6DxmS9H38+M8otPrOE/hazuSVESNRWnD4oxrABvg
BTUSZqN3pj5cZ9fRNs2gIW0EuFMD+swPbz8x/ZEVTOJFFCpKsNQVVdM39BilIBMH
PdwFfWbuxotYSt+4q8Em+1NSEqS2Mzv2Vek3LUlLEfjsylwKo8akxt0w+ZL6eLIG
Z6r0H1rbLGmwSXeLQ5M30yLWRh3XrWf3mjet7GE7XdjIT6i9Kw8fh1R4YhYLZRF9
juzNSYyoRXzIBxIaxBHq6BSYc1Gsm+/IEpMoBo3PMA6mQx0WAal1gumx7akq6g==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:29:32 2026 by rpki-client