Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2e6500f3-a539-4d94-90c5-d0e3ca90135a.roa
File:                     2e6500f3-a539-4d94-90c5-d0e3ca90135a.roa (raw, json)
Hash identifier:          GuJXigxYwvsvJN/XqzmaaQgwX4HkrJcXFibIggmUX1Y=
Subject key identifier:   B3:DC:A7:41:0C:94:39:DD:8D:65:95:C4:0F:B8:8C:FA:ED:01:56:91
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0167BFADD649F1D37855C677D0F86EBD40AF3D50
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2e6500f3-a539-4d94-90c5-d0e3ca90135a.roa
Signing time:             Mon 27 Jul 2026 00:21:14 +0000
ROA not before:           Mon 27 Jul 2026 00:21:14 +0000
ROA not after:            Sun 25 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f25:c800::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:67:bf:ad:d6:49:f1:d3:78:55:c6:77:d0:f8:6e:bd:40:af:3d:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 27 00:21:14 2026 GMT
            Not After : Oct 25 23:59:59 2026 GMT
        Subject: serialNumber=b45313c8632df6b4f4597b2dad7a01f6097202f653fa891499420a4eeb02eb1c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ce:ce:9d:f1:dc:f0:c0:7e:c0:bd:ca:0d:7e:
                    79:22:6a:ab:93:2c:59:34:21:94:ac:ef:bd:dd:90:
                    9e:58:64:d2:f1:18:57:ea:66:c5:a4:25:36:01:8c:
                    8e:da:44:65:11:05:d6:2a:10:30:23:3a:32:fe:1c:
                    dd:e7:19:9b:fd:a9:f1:c0:dd:ec:45:5d:ff:91:c8:
                    64:cf:ca:ef:6e:69:61:ee:3b:0d:d8:39:c1:f9:c1:
                    1d:80:3f:5f:3d:99:9d:1c:4a:36:ed:8c:96:30:16:
                    93:1c:f8:75:50:88:a6:da:0f:5b:67:b6:dd:e6:66:
                    c8:b7:27:30:41:90:50:14:eb:2b:59:d2:a1:16:58:
                    d3:86:b0:1a:f4:e3:0c:46:c6:4a:76:69:7f:fb:fb:
                    3d:d5:ea:c6:8e:46:3e:46:c7:97:7b:0a:a4:42:b9:
                    b1:a3:5d:37:b4:0e:76:fa:63:c3:e0:78:0a:7d:e5:
                    f9:09:8f:48:19:ec:df:41:43:c0:f3:5e:75:39:7d:
                    99:f0:6f:9b:f7:09:d9:26:77:03:c0:09:f2:42:06:
                    14:17:31:3c:69:8f:ef:3e:4d:ce:97:68:af:08:87:
                    b0:cd:68:8b:e0:45:03:4a:bc:d9:23:8a:f3:f1:53:
                    29:e9:41:43:1c:2c:36:e0:0b:1d:b7:e0:c3:f5:e6:
                    0d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:DC:A7:41:0C:94:39:DD:8D:65:95:C4:0F:B8:8C:FA:ED:01:56:91
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2e6500f3-a539-4d94-90c5-d0e3ca90135a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f25:c800::/37

    Signature Algorithm: sha256WithRSAEncryption
         50:3d:f8:dd:37:b3:7e:02:6d:ad:7e:24:eb:57:14:dd:56:98:
         53:0d:cb:2c:58:ec:38:59:0b:9f:04:aa:ed:3e:11:b0:f5:8a:
         f8:94:2f:23:25:63:25:25:a6:ca:e8:b8:71:f5:a3:9b:82:d1:
         14:36:8f:e6:b5:d6:8b:c1:50:c9:af:df:ca:b7:24:6b:72:6c:
         a0:b6:cd:e1:5e:4a:7f:9e:b4:ae:c1:9f:0b:13:52:02:61:c1:
         76:d6:ff:cd:43:52:1d:a6:c1:77:00:e3:93:12:2f:24:58:be:
         60:0b:9c:71:c2:02:41:6a:18:6c:a5:ec:5f:05:2b:52:ab:61:
         2e:50:f1:10:df:e7:9b:c3:6e:9a:8e:43:3a:a9:b0:ca:1a:0b:
         ec:76:80:41:63:6c:c5:a6:a0:89:26:f0:87:62:d2:c3:d7:94:
         96:5d:68:46:2d:b8:02:1c:59:c8:c5:66:e8:f3:94:f0:73:a2:
         ff:09:70:73:be:4b:7f:08:80:e2:4a:0a:c2:ae:11:9a:89:50:
         88:a0:60:5b:5a:89:f3:7a:00:16:8a:e6:6c:58:f2:d9:c2:7e:
         e9:84:db:9e:69:a7:cd:31:91:64:43:85:41:17:2e:82:ac:76:
         c8:ec:71:4b:6c:c0:13:f8:d7:c8:8a:83:e5:6c:41:92:93:5d:
         49:13:52:6b
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUAWe/rdZJ8dN4VcZ30PhuvUCvPVAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzI3MDAyMTE0WhcNMjYxMDI1MjM1OTU5
WjB6MUkwRwYDVQQFE0BiNDUzMTNjODYzMmRmNmI0ZjQ1OTdiMmRhZDdhMDFmNjA5
NzIwMmY2NTNmYTg5MTQ5OTQyMGE0ZWViMDJlYjFjMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC1zs6d8dzwwH7AvcoNfnkiaquTLFk0IZSs773dkJ5YZNLx
GFfqZsWkJTYBjI7aRGURBdYqEDAjOjL+HN3nGZv9qfHA3exFXf+RyGTPyu9uaWHu
Ow3YOcH5wR2AP189mZ0cSjbtjJYwFpMc+HVQiKbaD1tntt3mZsi3JzBBkFAU6ytZ
0qEWWNOGsBr04wxGxkp2aX/7+z3V6saORj5Gx5d7CqRCubGjXTe0Dnb6Y8PgeAp9
5fkJj0gZ7N9BQ8DzXnU5fZnwb5v3CdkmdwPACfJCBhQXMTxpj+8+Tc6XaK8Ih7DN
aIvgRQNKvNkjivPxUynpQUMcLDbgCx234MP15g0BAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUs9ynQQyUOd2NZZXED7iM+u0BVpEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzJlNjUwMGYzLWE1MzktNGQ5NC05MGM1LWQwZTNjYTkwMTM1YS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgMmAB8lyDANBgkqhkiG9w0BAQsFAAOCAQEAUD343TezfgJtrX4k61cU3VaY
Uw3LLFjsOFkLnwSq7T4RsPWK+JQvIyVjJSWmyui4cfWjm4LRFDaP5rXWi8FQya/f
yrcka3JsoLbN4V5Kf560rsGfCxNSAmHBdtb/zUNSHabBdwDjkxIvJFi+YAucccIC
QWoYbKXsXwUrUqthLlDxEN/nm8Numo5DOqmwyhoL7HaAQWNsxaagiSbwh2LSw9eU
ll1oRi24AhxZyMVm6POU8HOi/wlwc75LfwiA4koKwq4RmolQiKBgW1qJ83oAForm
bFjy2cJ+6YTbnmmnzTGRZEOFQRcugqx2yOxxS2zAE/jXyIqD5WxBkpNdSRNSaw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 16:01:46 2026 by rpki-client