Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/63e2842f-3b08-431e-b27b-922097dd5d02.roa
File:                     63e2842f-3b08-431e-b27b-922097dd5d02.roa (raw, json)
Hash identifier:          vErZPEsof/JiUcJRapYpCqAOPrHO+0FQtM3hnjprKGU=
Subject key identifier:   3F:E8:31:AD:28:8A:D9:38:0F:BB:B4:05:31:0A:E3:6B:45:07:C0:FA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6FD90AAAD952F74AC21791CA014CA26B85CB3411
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/63e2842f-3b08-431e-b27b-922097dd5d02.roa
Signing time:             Sat 16 May 2026 01:51:03 +0000
ROA not before:           Sat 16 May 2026 01:51:03 +0000
ROA not after:            Fri 14 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff6:2000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:d9:0a:aa:d9:52:f7:4a:c2:17:91:ca:01:4c:a2:6b:85:cb:34:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 16 01:51:03 2026 GMT
            Not After : Aug 14 23:59:59 2026 GMT
        Subject: serialNumber=8e9ae24f02f9d3e0e129fd1d0f4b53b102bcf219c17756f5a73cf90598b93509, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3d:18:59:6b:88:b5:9a:54:11:58:98:e2:c7:
                    b0:f2:74:ab:98:70:00:7e:1b:9f:41:de:21:f1:fe:
                    bb:a4:66:8b:b6:f3:36:8b:e5:e1:f5:80:00:4b:43:
                    a9:f4:67:19:71:6e:01:c1:81:87:62:9f:fa:ca:65:
                    a0:75:b4:b9:ca:75:e4:7a:37:a6:87:eb:87:e1:5e:
                    2d:dc:32:dd:cf:62:48:05:c4:bd:00:e0:d7:9e:d1:
                    00:40:b2:87:54:5a:04:78:bb:8a:b9:2e:88:0e:59:
                    60:6e:2d:2c:93:de:62:54:a6:c3:0f:c3:a1:f5:43:
                    fa:4b:3f:3e:2b:9d:ce:2c:71:6e:8a:54:9a:80:f5:
                    33:d6:a6:3e:e5:46:03:96:7f:66:54:f9:da:66:f4:
                    86:1b:ef:98:79:4c:e9:3a:d1:81:f1:cf:1f:a1:43:
                    34:1a:f9:cd:29:98:be:1d:26:03:f8:2f:2d:cf:df:
                    05:af:c7:00:6c:8e:b8:bc:d6:dc:c8:b0:ee:7b:10:
                    e1:38:bd:a5:c4:ee:29:f6:79:9d:99:ae:4c:cd:9c:
                    f6:a3:f9:39:48:69:df:af:35:96:90:58:6c:6d:f4:
                    70:2f:50:d9:3f:d4:d8:30:93:27:e4:4f:4a:d7:4a:
                    ab:fd:88:c9:b7:6d:4f:fc:6a:2f:47:c1:97:c6:13:
                    65:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:E8:31:AD:28:8A:D9:38:0F:BB:B4:05:31:0A:E3:6B:45:07:C0:FA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/63e2842f-3b08-431e-b27b-922097dd5d02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff6:2000::/48

    Signature Algorithm: sha256WithRSAEncryption
         b1:f8:d1:89:2d:fc:9c:cb:1d:a9:7d:63:fe:00:56:24:c5:d1:
         52:c2:8d:b4:26:cf:75:ef:c8:83:5c:76:49:73:c6:ef:e7:b3:
         c5:2e:ed:4d:d1:4a:2b:a4:fc:24:8d:20:d1:3c:6b:94:f5:77:
         78:03:2c:a1:3d:e1:79:f0:5f:f3:25:2b:2f:bf:3f:26:4e:14:
         19:70:93:ec:65:b9:62:59:7c:ab:2b:35:9c:d8:9c:9d:2b:c8:
         43:16:bd:2d:46:26:93:fd:22:48:5a:47:07:5a:a8:85:29:5c:
         3a:94:79:a2:55:34:c8:0c:9d:53:f8:96:bd:b1:bc:a7:3c:17:
         9a:fe:ab:69:af:90:1c:d8:fd:01:26:95:2f:9c:58:3a:47:7a:
         b5:1e:52:c2:af:01:a4:a8:b7:91:1c:91:54:80:d2:32:82:18:
         4a:7c:7e:e5:bf:f5:cd:3d:c5:4c:07:33:e3:13:8f:a0:69:5a:
         3f:53:c2:52:83:b3:cf:30:5f:ce:60:09:24:f1:17:63:6a:10:
         33:50:ad:0a:ed:0e:e8:1e:d8:08:d8:5e:de:e6:3c:54:f8:44:
         bc:5d:30:a9:9b:db:19:f6:a3:d2:a8:d2:00:e6:bf:f9:8c:b7:
         c7:36:76:44:0c:de:4b:07:32:cc:52:49:45:68:e4:67:53:3a:
         f4:e6:56:2c
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUb9kKqtlS90rCF5HKAUyia4XLNBEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE2MDE1MTAzWhcNMjYwODE0MjM1OTU5
WjB6MUkwRwYDVQQFE0A4ZTlhZTI0ZjAyZjlkM2UwZTEyOWZkMWQwZjRiNTNiMTAy
YmNmMjE5YzE3NzU2ZjVhNzNjZjkwNTk4YjkzNTA5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC7PRhZa4i1mlQRWJjix7DydKuYcAB+G59B3iHx/rukZou2
8zaL5eH1gABLQ6n0ZxlxbgHBgYdin/rKZaB1tLnKdeR6N6aH64fhXi3cMt3PYkgF
xL0A4Nee0QBAsodUWgR4u4q5LogOWWBuLSyT3mJUpsMPw6H1Q/pLPz4rnc4scW6K
VJqA9TPWpj7lRgOWf2ZU+dpm9IYb75h5TOk60YHxzx+hQzQa+c0pmL4dJgP4Ly3P
3wWvxwBsjri81tzIsO57EOE4vaXE7in2eZ2ZrkzNnPaj+TlIad+vNZaQWGxt9HAv
UNk/1NgwkyfkT0rXSqv9iMm3bU/8ai9HwZfGE2WlAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUP+gxrSiK2TgPu7QFMQrja0UHwPowHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzYzZTI4NDJmLTNiMDgtNDMxZS1iMjdiLTkyMjA5N2RkNWQwMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB/2IAAwDQYJKoZIhvcNAQELBQADggEBALH40Ykt/JzLHal9Y/4AViTF
0VLCjbQmz3XvyINcdklzxu/ns8Uu7U3RSiuk/CSNINE8a5T1d3gDLKE94XnwX/Ml
Ky+/PyZOFBlwk+xluWJZfKsrNZzYnJ0ryEMWvS1GJpP9IkhaRwdaqIUpXDqUeaJV
NMgMnVP4lr2xvKc8F5r+q2mvkBzY/QEmlS+cWDpHerUeUsKvAaSot5EckVSA0jKC
GEp8fuW/9c09xUwHM+MTj6BpWj9TwlKDs88wX85gCSTxF2NqEDNQrQrtDuge2AjY
Xt7mPFT4RLxdMKmb2xn2o9Ko0gDmv/mMt8c2dkQM3ksHMsxSSUVo5GdTOvTmViw=
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:09:46 2026 by rpki-client