Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46808403-41a2-43ff-8f88-017e8f731e15.roa
File:                     46808403-41a2-43ff-8f88-017e8f731e15.roa (raw, json)
Hash identifier:          IVC//kKKmvQjInw6OwGpYNbppStQoviRG9jkDG1AL1I=
Subject key identifier:   D5:0C:3E:C7:4F:83:E3:F9:0F:CD:B4:50:CE:54:8A:B3:D0:9A:5A:42
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       47465FB863FDAE38678A64F81073F75008712C1C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46808403-41a2-43ff-8f88-017e8f731e15.roa
Signing time:             Sun 31 May 2026 00:40:08 +0000
ROA not before:           Sun 31 May 2026 00:40:08 +0000
ROA not after:            Sat 29 Aug 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1fe9:80e0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:46:5f:b8:63:fd:ae:38:67:8a:64:f8:10:73:f7:50:08:71:2c:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 31 00:40:08 2026 GMT
            Not After : Aug 29 23:59:59 2026 GMT
        Subject: serialNumber=b993cb3861bd3943914e051331f84fcb949efdad427ed740e4cba1187858615f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b8:50:b0:7c:47:c7:d3:86:29:16:38:dc:62:
                    38:8c:b5:3f:5c:17:8f:11:04:1a:f5:32:a5:fe:80:
                    87:a5:47:bb:f8:6c:5d:d8:c4:3a:9e:8a:d8:55:55:
                    9e:a5:6d:74:9e:37:fb:18:e5:6c:f9:1b:0c:3a:94:
                    4e:6d:e8:01:1a:1d:57:3e:6e:e6:ea:cb:02:d6:ed:
                    f3:78:f8:a7:43:62:c3:cd:1d:47:e4:c5:02:4a:52:
                    e5:44:f5:8a:5b:92:57:86:bd:71:b3:2c:d9:a3:11:
                    73:a5:90:a7:3b:d9:b1:e2:49:a9:c2:2f:95:54:6c:
                    6a:ec:83:03:03:20:00:09:2d:82:16:3d:c7:b6:e9:
                    a6:6a:59:e6:a4:5e:93:0f:90:44:15:bd:7e:01:37:
                    8b:9b:2e:18:91:10:7e:bf:fd:e0:72:f8:b9:31:f0:
                    9a:54:3d:8e:a9:79:f6:ad:26:3e:9c:50:bc:6d:05:
                    25:ed:bf:42:31:e3:7d:62:08:0d:3c:3c:24:2d:c7:
                    f5:00:eb:0c:de:e7:e1:5c:38:c7:9b:53:4b:e3:f9:
                    75:5e:08:e8:82:32:17:91:3d:bb:fc:e4:52:5d:d0:
                    97:09:12:6f:84:ec:91:07:35:ed:73:06:93:e3:85:
                    1f:aa:e0:f3:0c:0b:0a:32:2f:ce:a0:8e:d3:1d:34:
                    2e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:0C:3E:C7:4F:83:E3:F9:0F:CD:B4:50:CE:54:8A:B3:D0:9A:5A:42
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46808403-41a2-43ff-8f88-017e8f731e15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fe9:80e0::/48

    Signature Algorithm: sha256WithRSAEncryption
         b5:f2:96:7e:dd:ab:07:f9:6e:c7:10:73:f4:5c:5e:51:ad:70:
         61:34:75:17:ac:4f:b5:d6:da:24:61:21:0c:66:b2:fd:99:c2:
         89:6a:08:db:fe:4a:08:c5:da:31:f7:e9:16:88:dd:35:64:e5:
         66:33:dc:d6:bf:cf:15:d8:bd:2a:58:e3:b9:c8:16:3e:cd:87:
         59:89:c6:f6:c6:ff:86:d3:e9:27:fc:dc:58:49:ea:e3:c2:a9:
         0c:57:0b:ea:8e:a5:77:4f:59:ac:4f:89:c6:dc:6a:50:c8:41:
         31:ab:d3:ed:62:71:f2:bd:cb:80:70:4b:2a:e6:01:0c:4b:f3:
         cb:36:5d:d3:c8:c9:2c:b5:1c:14:58:f4:a8:01:d5:fe:37:b9:
         64:bc:2f:2d:b1:5f:72:f8:a8:5e:2b:65:9b:3b:32:32:49:98:
         83:ef:9e:b1:52:30:fe:5a:bc:67:7d:29:fc:92:13:34:b7:d1:
         68:e2:16:2b:8c:fe:85:1c:90:4b:ce:bd:94:7b:a3:c3:ba:d8:
         67:dd:f1:ea:15:6b:4c:cf:72:7b:16:7a:13:e8:e8:e5:99:3d:
         65:73:74:57:e3:1d:a0:d8:ce:0d:d7:1a:19:82:a2:a3:e3:1c:
         64:99:ec:72:6b:92:8d:58:6e:5e:25:0c:5f:b9:f7:12:b3:3e:
         c0:2e:79:b0
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUR0ZfuGP9rjhnimT4EHP3UAhxLBwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTMxMDA0MDA4WhcNMjYwODI5MjM1OTU5
WjB6MUkwRwYDVQQFE0BiOTkzY2IzODYxYmQzOTQzOTE0ZTA1MTMzMWY4NGZjYjk0
OWVmZGFkNDI3ZWQ3NDBlNGNiYTExODc4NTg2MTVmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC2uFCwfEfH04YpFjjcYjiMtT9cF48RBBr1MqX+gIelR7v4
bF3YxDqeithVVZ6lbXSeN/sY5Wz5Gww6lE5t6AEaHVc+bubqywLW7fN4+KdDYsPN
HUfkxQJKUuVE9YpbkleGvXGzLNmjEXOlkKc72bHiSanCL5VUbGrsgwMDIAAJLYIW
Pce26aZqWeakXpMPkEQVvX4BN4ubLhiREH6//eBy+Lkx8JpUPY6pefatJj6cULxt
BSXtv0Ix431iCA08PCQtx/UA6wze5+FcOMebU0vj+XVeCOiCMheRPbv85FJd0JcJ
Em+E7JEHNe1zBpPjhR+q4PMMCwoyL86gjtMdNC5lAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU1Qw+x0+D4/kPzbRQzlSKs9CaWkIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzQ2ODA4NDAzLTQxYTItNDNmZi04Zjg4LTAxN2U4ZjczMWUxNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB/pgOAwDQYJKoZIhvcNAQELBQADggEBALXyln7dqwf5bscQc/RcXlGt
cGE0dResT7XW2iRhIQxmsv2ZwolqCNv+SgjF2jH36RaI3TVk5WYz3Na/zxXYvSpY
47nIFj7Nh1mJxvbG/4bT6Sf83FhJ6uPCqQxXC+qOpXdPWaxPicbcalDIQTGr0+1i
cfK9y4BwSyrmAQxL88s2XdPIySy1HBRY9KgB1f43uWS8Ly2xX3L4qF4rZZs7MjJJ
mIPvnrFSMP5avGd9KfySEzS30WjiFiuM/oUckEvOvZR7o8O62Gfd8eoVa0zPcnsW
ehPo6OWZPWVzdFfjHaDYzg3XGhmCoqPjHGSZ7HJrko1Ybl4lDF+59xKzPsAuebA=
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:51:55 2026 by rpki-client