Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2ee35005-270a-4d69-a5d7-f6e6594e105b.roa
File:                     2ee35005-270a-4d69-a5d7-f6e6594e105b.roa (raw, json)
Hash identifier:          W61oYdgkm7aBw1+a1Ht0zXHgbFJ9tfYEk6LpZ2bAWDg=
Subject key identifier:   3E:A5:66:CC:B4:F3:6A:68:42:CF:0E:BC:2C:0D:8B:B9:BF:69:D8:30
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0CAF530C539FB075F69C9C78BA0A4975AD5F4B9E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2ee35005-270a-4d69-a5d7-f6e6594e105b.roa
Signing time:             Fri 15 May 2026 01:21:45 +0000
ROA not before:           Fri 15 May 2026 01:21:45 +0000
ROA not after:            Thu 13 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f38:5000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:af:53:0c:53:9f:b0:75:f6:9c:9c:78:ba:0a:49:75:ad:5f:4b:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 15 01:21:45 2026 GMT
            Not After : Aug 13 23:59:59 2026 GMT
        Subject: serialNumber=2150d35a766e72825a27b4cc0a5419c9ea898b34b43b73964b2d4d79a3953a81, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:26:32:07:64:03:a4:93:5d:19:84:a9:c5:06:
                    d7:46:83:40:a7:62:da:ab:48:9f:61:ae:cc:4b:2e:
                    dd:6b:71:f2:60:79:78:76:b6:64:b5:30:93:ae:73:
                    ed:86:fe:a9:4e:b4:ce:6f:9e:2a:52:eb:5f:64:d1:
                    f6:e3:33:72:03:9a:ab:c7:dc:af:ed:c7:ba:19:1d:
                    80:65:9d:4d:25:a2:d8:45:50:db:59:3f:b0:4e:e3:
                    ba:cf:9a:32:84:2d:bf:88:9f:0e:0f:5e:24:6a:4d:
                    23:f4:1e:d3:ba:9a:92:1c:bd:7c:a0:e9:14:97:c5:
                    1c:95:2b:f9:da:c8:fa:95:05:ab:7a:a3:c4:8c:c3:
                    41:e3:fc:b6:dc:3a:f5:f4:01:08:3a:a5:c3:e4:39:
                    65:6f:bb:66:d1:28:50:34:c6:52:b4:a6:8a:a6:6b:
                    1b:b7:a6:79:25:33:e9:6d:87:7a:ee:38:c2:ac:7e:
                    38:5d:46:0b:b6:d2:c3:77:eb:eb:07:84:d5:23:18:
                    50:85:d3:a9:6f:50:91:86:30:0d:c0:19:30:2c:2c:
                    4e:c0:21:94:d3:f0:20:cb:e7:ad:4d:10:54:26:89:
                    1e:ab:8b:1d:86:e1:bf:0f:ca:6e:63:e4:e4:36:f7:
                    94:52:42:27:c5:7c:86:de:04:fa:88:48:db:c3:df:
                    6f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:A5:66:CC:B4:F3:6A:68:42:CF:0E:BC:2C:0D:8B:B9:BF:69:D8:30
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2ee35005-270a-4d69-a5d7-f6e6594e105b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f38:5000::/40

    Signature Algorithm: sha256WithRSAEncryption
         3e:5b:44:1f:ad:0a:d1:b6:a9:1a:05:7b:97:3d:cd:e7:a4:92:
         30:aa:33:b8:f3:e2:a0:01:04:0e:b5:e2:43:70:34:b2:5f:a2:
         0d:cb:6d:48:ab:00:06:a1:68:a4:60:d2:67:dc:74:6e:31:68:
         81:c4:30:13:f2:f0:26:c3:f3:04:d9:3a:bf:15:db:33:40:50:
         ee:68:6d:7b:d9:75:c7:e2:f7:3f:e6:98:43:7e:32:b6:43:cb:
         a0:59:5c:4f:7a:7e:a0:09:04:bb:81:2d:82:57:7d:ae:39:95:
         ce:ed:db:15:1c:0d:fe:6d:5b:ff:08:b9:20:71:a9:7b:3d:d5:
         2c:01:06:ed:01:39:b1:8d:06:40:51:9d:7e:f8:55:9a:97:7b:
         1c:e7:1c:0e:5e:e8:5f:96:68:31:bf:57:b6:97:77:c9:cb:20:
         8c:49:5c:cf:a2:e7:37:3d:0f:e4:6f:4f:09:17:e6:a6:0f:5d:
         eb:2e:c6:dd:af:08:15:c5:2c:3f:4f:71:69:25:bf:de:9e:f4:
         11:90:17:50:59:25:1a:92:e1:f8:a7:80:9a:60:67:82:14:a3:
         cf:a8:c5:08:b2:ac:77:2b:78:bd:d0:64:90:d9:49:79:ac:2c:
         ad:0d:96:8e:4a:1e:e4:66:24:9c:25:02:01:eb:91:74:d7:6b:
         0a:82:28:e3
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUDK9TDFOfsHX2nJx4ugpJda1fS54wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE1MDEyMTQ1WhcNMjYwODEzMjM1OTU5
WjB6MUkwRwYDVQQFE0AyMTUwZDM1YTc2NmU3MjgyNWEyN2I0Y2MwYTU0MTljOWVh
ODk4YjM0YjQzYjczOTY0YjJkNGQ3OWEzOTUzYTgxMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDWJjIHZAOkk10ZhKnFBtdGg0CnYtqrSJ9hrsxLLt1rcfJg
eXh2tmS1MJOuc+2G/qlOtM5vnipS619k0fbjM3IDmqvH3K/tx7oZHYBlnU0lothF
UNtZP7BO47rPmjKELb+Inw4PXiRqTSP0HtO6mpIcvXyg6RSXxRyVK/nayPqVBat6
o8SMw0Hj/LbcOvX0AQg6pcPkOWVvu2bRKFA0xlK0poqmaxu3pnklM+lth3ruOMKs
fjhdRgu20sN36+sHhNUjGFCF06lvUJGGMA3AGTAsLE7AIZTT8CDL561NEFQmiR6r
ix2G4b8Pym5j5OQ295RSQifFfIbeBPqISNvD32/zAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUPqVmzLTzamhCzw68LA2Lub9p2DAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzJlZTM1MDA1LTI3MGEtNGQ2OS1hNWQ3LWY2ZTY1OTRlMTA1Yi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB84UDANBgkqhkiG9w0BAQsFAAOCAQEAPltEH60K0bapGgV7lz3N56SS
MKozuPPioAEEDrXiQ3A0sl+iDcttSKsABqFopGDSZ9x0bjFogcQwE/LwJsPzBNk6
vxXbM0BQ7mhte9l1x+L3P+aYQ34ytkPLoFlcT3p+oAkEu4Etgld9rjmVzu3bFRwN
/m1b/wi5IHGpez3VLAEG7QE5sY0GQFGdfvhVmpd7HOccDl7oX5ZoMb9Xtpd3ycsg
jElcz6LnNz0P5G9PCRfmpg9d6y7G3a8IFcUsP09xaSW/3p70EZAXUFklGpLh+KeA
mmBnghSjz6jFCLKsdyt4vdBkkNlJeawsrQ2Wjkoe5GYknCUCAeuRdNdrCoIo4w==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:36:58 2026 by rpki-client