Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/57d2923e-17c1-4032-bff8-041a85a6f302.roa
File:                     57d2923e-17c1-4032-bff8-041a85a6f302.roa (raw, json)
Hash identifier:          3ZS35d44g4m2DYcK00wU5uHaTQD5VDmzkh0Cog+BVLI=
Subject key identifier:   DD:56:A1:6A:24:EA:14:68:1D:32:24:49:72:EB:DF:B5:B9:63:67:EF
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       68EEADA882EB34D3A5B41AD3048565A0BC6385C7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/57d2923e-17c1-4032-bff8-041a85a6f302.roa
Signing time:             Sat 16 May 2026 01:10:51 +0000
ROA not before:           Sat 16 May 2026 01:10:51 +0000
ROA not after:            Fri 14 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f38:3400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:ee:ad:a8:82:eb:34:d3:a5:b4:1a:d3:04:85:65:a0:bc:63:85:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 16 01:10:51 2026 GMT
            Not After : Aug 14 23:59:59 2026 GMT
        Subject: serialNumber=08c203f60ff7755698cf1855fa3fe0315a3c398893fe4974c740c1755bfdcd7e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f6:98:a1:21:23:74:5f:76:54:5b:b6:9c:41:
                    83:7b:e4:fc:9d:9a:11:40:d7:b1:31:be:bd:ab:1c:
                    d1:a6:2d:49:4c:87:59:91:7e:67:79:ba:eb:50:24:
                    6e:b6:7c:73:81:23:9a:ee:d0:46:07:19:f4:68:49:
                    e1:d1:ac:12:22:cb:7a:e2:c3:37:4f:5d:ef:e7:cd:
                    6d:b1:22:f3:ec:69:2f:2a:1a:90:b6:1a:fc:30:91:
                    11:a1:8f:9b:fe:db:34:c7:d2:b1:e4:f3:1a:01:d3:
                    8a:e8:85:12:1f:41:88:6a:c8:8e:9f:32:da:2f:19:
                    a6:19:63:13:e0:3a:39:24:11:07:8a:81:36:f3:d7:
                    ec:c1:a1:7c:31:b8:98:2f:bf:bf:9e:ce:2c:9e:25:
                    fb:5b:16:c3:50:74:70:ff:55:ec:cb:00:40:a7:1f:
                    8c:08:39:23:49:12:66:04:54:18:1d:77:34:e0:23:
                    77:53:48:e1:a8:33:42:ee:aa:6f:c3:04:bb:76:64:
                    35:df:f9:d4:da:3b:dc:77:ac:3a:2f:65:1c:05:aa:
                    9b:1e:18:fe:b1:e5:67:82:4c:6d:1b:a1:18:b7:71:
                    64:ac:fd:22:85:15:da:1b:43:a0:7e:7a:aa:3c:6d:
                    0b:37:a4:0a:e6:33:be:61:6e:28:1c:39:c0:70:af:
                    07:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:56:A1:6A:24:EA:14:68:1D:32:24:49:72:EB:DF:B5:B9:63:67:EF
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/57d2923e-17c1-4032-bff8-041a85a6f302.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f38:3400::/40

    Signature Algorithm: sha256WithRSAEncryption
         48:8e:99:bd:db:97:ca:d1:5a:9d:e2:fa:88:e8:6d:b5:86:09:
         9f:b5:b5:97:de:30:95:a3:5b:dc:70:bc:c1:cb:e1:b9:d7:dc:
         66:f4:7e:8a:fb:47:a5:a0:a7:cf:35:13:c5:40:14:1a:8f:82:
         fd:c9:3c:d9:ea:44:bb:19:ac:06:a7:6f:eb:2f:1e:0d:31:68:
         a7:0f:1c:03:94:bf:9e:ea:e6:b6:0c:04:06:c1:79:6f:81:1c:
         6c:e3:22:79:71:3f:09:a7:59:20:8a:0b:6e:ab:bf:2a:14:4e:
         99:af:70:42:9e:c3:fc:7f:9a:77:af:d5:02:40:96:c3:72:b6:
         ed:94:c8:00:ea:a5:59:70:f1:f8:35:db:f1:44:e8:4c:58:60:
         43:3b:21:0c:7e:a5:9d:0b:b5:09:6f:fa:61:22:0b:6e:2a:83:
         43:31:74:e4:1e:67:cd:85:39:25:fd:7a:68:df:8f:d9:13:a3:
         9d:b0:8d:9e:e8:c8:99:96:9c:aa:37:d1:1d:bb:1f:13:31:1d:
         0f:af:80:6d:e1:11:c6:fa:f2:4b:4a:06:41:b6:a0:f4:d0:70:
         0c:16:f7:41:e5:e4:42:68:56:04:12:b6:6f:e1:ba:df:4f:f1:
         ad:d7:57:60:6f:86:f7:d8:2a:5f:58:e8:69:6d:5f:45:85:6f:
         55:39:a2:9e
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUaO6tqILrNNOltBrTBIVloLxjhccwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE2MDExMDUxWhcNMjYwODE0MjM1OTU5
WjB6MUkwRwYDVQQFE0AwOGMyMDNmNjBmZjc3NTU2OThjZjE4NTVmYTNmZTAzMTVh
M2MzOTg4OTNmZTQ5NzRjNzQwYzE3NTViZmRjZDdlMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCM9pihISN0X3ZUW7acQYN75PydmhFA17Exvr2rHNGmLUlM
h1mRfmd5uutQJG62fHOBI5ru0EYHGfRoSeHRrBIiy3riwzdPXe/nzW2xIvPsaS8q
GpC2GvwwkRGhj5v+2zTH0rHk8xoB04rohRIfQYhqyI6fMtovGaYZYxPgOjkkEQeK
gTbz1+zBoXwxuJgvv7+eziyeJftbFsNQdHD/VezLAECnH4wIOSNJEmYEVBgddzTg
I3dTSOGoM0Luqm/DBLt2ZDXf+dTaO9x3rDovZRwFqpseGP6x5WeCTG0boRi3cWSs
/SKFFdobQ6B+eqo8bQs3pArmM75hbigcOcBwrwcpAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQU3VahaiTqFGgdMiRJcuvftbljZ+8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzU3ZDI5MjNlLTE3YzEtNDAzMi1iZmY4LTA0MWE4NWE2ZjMwMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB84NDANBgkqhkiG9w0BAQsFAAOCAQEASI6ZvduXytFaneL6iOhttYYJ
n7W1l94wlaNb3HC8wcvhudfcZvR+ivtHpaCnzzUTxUAUGo+C/ck82epEuxmsBqdv
6y8eDTFopw8cA5S/nurmtgwEBsF5b4EcbOMieXE/CadZIIoLbqu/KhROma9wQp7D
/H+ad6/VAkCWw3K27ZTIAOqlWXDx+DXb8UToTFhgQzshDH6lnQu1CW/6YSILbiqD
QzF05B5nzYU5Jf16aN+P2ROjnbCNnujImZacqjfRHbsfEzEdD6+AbeERxvryS0oG
Qbag9NBwDBb3QeXkQmhWBBK2b+G630/xrddXYG+G99gqX1joaW1fRYVvVTming==
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:51:50 2026 by rpki-client