Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/61d4007f-5601-4ca9-a61d-17544b310bad.roa
File:                     61d4007f-5601-4ca9-a61d-17544b310bad.roa (raw, json)
Hash identifier:          16jW6gdm2FlnBukhdlrtUH8p2zpqoexzprTeJc9LTEs=
Subject key identifier:   C9:57:43:B2:3F:0C:4B:ED:0A:FD:48:17:B0:DC:7F:4A:CA:77:79:F7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3A9251860BC2619C07623A9677AFA8E32D7211D7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/61d4007f-5601-4ca9-a61d-17544b310bad.roa
Signing time:             Sat 16 May 2026 01:50:37 +0000
ROA not before:           Sat 16 May 2026 01:50:37 +0000
ROA not after:            Fri 14 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f1c:400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:92:51:86:0b:c2:61:9c:07:62:3a:96:77:af:a8:e3:2d:72:11:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 16 01:50:37 2026 GMT
            Not After : Aug 14 23:59:59 2026 GMT
        Subject: serialNumber=ba61773ffab0e8863ad6e72bd3fb2696dee3b2f8145a93a08406b5b60c2ec77e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4f:42:12:8a:f2:9e:bd:77:41:ea:2a:78:36:
                    e1:f3:08:36:1a:7f:63:54:92:41:eb:c7:2e:17:e1:
                    7f:a8:50:8a:88:f4:ca:63:cc:1a:e0:d5:71:9f:c2:
                    ed:e8:22:15:35:c0:e0:5c:21:aa:78:a1:c9:9e:16:
                    04:bd:be:f2:ce:7d:df:56:21:fd:51:30:d7:9c:58:
                    57:ca:d8:f6:e4:15:f7:71:e0:71:9a:1f:2b:bc:18:
                    ad:d0:bf:70:4c:d9:1e:e4:34:a8:93:18:34:96:6d:
                    35:49:bf:50:b1:ce:38:8b:a2:f4:7e:c9:d6:db:18:
                    d0:0b:ee:bd:26:16:b0:38:b7:b0:80:77:c9:14:4e:
                    db:7b:d2:e0:68:e9:69:b7:0f:b2:ce:e3:6e:76:0c:
                    f5:a9:b8:50:36:a0:b8:b1:41:e1:12:42:3b:42:19:
                    aa:ad:57:77:1b:c4:bd:e2:32:bc:70:a0:99:b4:f4:
                    03:68:21:bd:74:a9:18:8f:1c:7b:6d:a8:b5:46:dd:
                    5f:02:92:22:24:9c:b8:7b:3b:a1:bf:9c:35:39:ff:
                    29:74:d7:29:94:da:85:34:5e:90:04:d1:f7:2f:f0:
                    e0:4d:fc:4a:be:f8:35:66:2e:e6:51:e8:32:0c:67:
                    b1:5b:6a:88:73:8d:5a:d3:dd:b2:66:c4:48:1e:58:
                    59:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:57:43:B2:3F:0C:4B:ED:0A:FD:48:17:B0:DC:7F:4A:CA:77:79:F7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/61d4007f-5601-4ca9-a61d-17544b310bad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f1c:400::/38

    Signature Algorithm: sha256WithRSAEncryption
         3e:89:9a:1c:6f:6d:b9:25:3d:40:a6:ab:f8:d2:c3:f8:12:31:
         d8:ff:7b:f4:7a:d9:08:db:5e:e1:0c:14:05:b8:07:5a:f5:b5:
         97:2c:cd:0c:b0:2b:9b:88:84:6c:d0:26:e7:62:07:46:3d:19:
         00:22:9e:b3:20:2d:b5:fc:db:51:64:62:a8:69:8b:46:d7:0f:
         ab:fe:5e:f2:05:fc:6f:e6:4c:23:c7:38:2d:8c:c5:8a:4d:36:
         67:ec:66:1d:4d:e6:ed:23:9a:0a:c6:01:ed:78:98:40:df:00:
         14:fb:6d:43:70:98:45:82:1f:fe:58:a4:c9:64:ed:37:27:92:
         1b:3e:60:ef:ef:d4:72:f9:4e:61:8d:1c:99:36:03:5d:00:82:
         89:cf:4f:cd:11:fc:30:35:6b:41:bf:e9:e0:5e:d7:7a:65:e6:
         43:03:09:a9:8b:76:d0:46:69:32:fe:e9:21:ff:49:b9:21:37:
         f0:37:a2:6c:c4:b2:7b:23:78:39:ce:85:33:52:06:72:99:c3:
         84:26:d9:62:92:18:98:78:fc:e5:c3:77:ff:2e:5e:32:a1:69:
         bf:db:d3:af:48:a3:20:22:e9:1f:07:e6:19:20:e3:e0:da:d0:
         e7:57:4d:c0:9c:47:b0:49:84:5e:90:48:d4:2e:7d:12:0f:66:
         07:73:e7:24
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUOpJRhgvCYZwHYjqWd6+o4y1yEdcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE2MDE1MDM3WhcNMjYwODE0MjM1OTU5
WjB6MUkwRwYDVQQFE0BiYTYxNzczZmZhYjBlODg2M2FkNmU3MmJkM2ZiMjY5NmRl
ZTNiMmY4MTQ1YTkzYTA4NDA2YjViNjBjMmVjNzdlMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCwT0ISivKevXdB6ip4NuHzCDYaf2NUkkHrxy4X4X+oUIqI
9MpjzBrg1XGfwu3oIhU1wOBcIap4ocmeFgS9vvLOfd9WIf1RMNecWFfK2PbkFfdx
4HGaHyu8GK3Qv3BM2R7kNKiTGDSWbTVJv1CxzjiLovR+ydbbGNAL7r0mFrA4t7CA
d8kUTtt70uBo6Wm3D7LO4252DPWpuFA2oLixQeESQjtCGaqtV3cbxL3iMrxwoJm0
9ANoIb10qRiPHHttqLVG3V8CkiIknLh7O6G/nDU5/yl01ymU2oU0XpAE0fcv8OBN
/Eq++DVmLuZR6DIMZ7FbaohzjVrT3bJmxEgeWFn9AgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUyVdDsj8MS+0K/UgXsNx/Ssp3efcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzYxZDQwMDdmLTU2MDEtNGNhOS1hNjFkLTE3NTQ0YjMxMGJhZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgImAB8cBDANBgkqhkiG9w0BAQsFAAOCAQEAPomaHG9tuSU9QKar+NLD+BIx
2P979HrZCNte4QwUBbgHWvW1lyzNDLArm4iEbNAm52IHRj0ZACKesyAttfzbUWRi
qGmLRtcPq/5e8gX8b+ZMI8c4LYzFik02Z+xmHU3m7SOaCsYB7XiYQN8AFPttQ3CY
RYIf/likyWTtNyeSGz5g7+/UcvlOYY0cmTYDXQCCic9PzRH8MDVrQb/p4F7XemXm
QwMJqYt20EZpMv7pIf9JuSE38DeibMSyeyN4Oc6FM1IGcpnDhCbZYpIYmHj85cN3
/y5eMqFpv9vTr0ijICLpHwfmGSDj4NrQ51dNwJxHsEmEXpBI1C59Eg9mB3PnJA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:22:33 2026 by rpki-client