Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/862dd605-a5bf-4ee0-8d36-8a35cda9fe09.roa
File:                     862dd605-a5bf-4ee0-8d36-8a35cda9fe09.roa (raw, json)
Hash identifier:          0mqTi5dKKH2PjY91BCnsqi0HEfuU22LPpLMEzukahmI=
Subject key identifier:   72:23:D1:7D:34:EB:6B:17:A3:6F:AD:04:3B:45:48:77:53:91:2B:1E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       62220B3FA44F3B4BAD6C83184217600019DBDA55
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/862dd605-a5bf-4ee0-8d36-8a35cda9fe09.roa
Signing time:             Sat 16 May 2026 02:20:44 +0000
ROA not before:           Sat 16 May 2026 02:20:44 +0000
ROA not after:            Fri 14 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f14::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:22:0b:3f:a4:4f:3b:4b:ad:6c:83:18:42:17:60:00:19:db:da:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 16 02:20:44 2026 GMT
            Not After : Aug 14 23:59:59 2026 GMT
        Subject: serialNumber=afabf81b221a2aedc2c8831069ff8a1f7ae86f35b077a7f7d0b1879e9d3420c9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7c:ff:d4:8b:f9:68:5e:11:93:00:fc:06:4c:
                    a5:39:54:b7:dc:99:9b:7f:17:7d:d4:c0:59:42:48:
                    64:5c:a8:70:57:ea:9d:52:1f:e3:e9:f7:3b:fe:5d:
                    04:4e:36:2c:25:1d:d2:2a:5c:8f:5f:ab:c2:98:68:
                    74:64:9e:96:74:f4:86:cb:4e:50:a5:82:fb:df:89:
                    1c:a5:d3:cb:bf:e2:60:17:36:b7:6e:2f:65:84:8b:
                    29:2b:2b:0e:fb:9f:56:7e:a7:3e:41:7b:76:bb:a4:
                    e0:2a:21:c1:f8:7e:70:36:c5:d0:4e:53:26:21:26:
                    02:c5:65:38:b5:a9:0f:45:39:f6:b4:d4:ab:6a:3a:
                    dd:a3:cc:bc:da:cf:bd:29:3c:de:4f:97:d0:35:4f:
                    e6:ed:61:c9:7a:f6:a6:a9:47:ad:f0:82:18:b8:ff:
                    56:d8:ad:a8:86:57:e5:c1:4a:95:b8:45:5a:77:d9:
                    b4:3c:43:d6:52:79:3a:14:2b:97:d8:9a:32:2a:42:
                    92:e5:bb:0c:84:de:5b:3b:98:33:a4:c4:a6:29:3a:
                    1a:78:ae:e6:98:59:41:37:91:61:fa:e4:c9:eb:1f:
                    1e:ab:e7:66:62:81:d9:0f:b3:bb:27:0c:bc:b8:80:
                    3e:de:82:55:90:c5:8c:49:ef:a2:a5:00:02:99:bb:
                    cb:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:23:D1:7D:34:EB:6B:17:A3:6F:AD:04:3B:45:48:77:53:91:2B:1E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/862dd605-a5bf-4ee0-8d36-8a35cda9fe09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f14::/37

    Signature Algorithm: sha256WithRSAEncryption
         44:2f:5b:17:80:81:4e:11:1d:f2:34:d6:2d:b9:47:24:e3:1b:
         4e:fa:a5:ff:91:7c:da:68:3a:cf:44:90:c1:b7:2b:f0:b1:f1:
         5d:da:c1:0a:5b:ed:34:82:e6:11:bb:0f:4f:bb:f7:f0:84:a5:
         ac:dc:cf:be:9f:9e:af:a2:a9:33:09:cc:be:bc:67:98:93:15:
         a2:1f:be:7d:51:4b:c1:21:74:e4:6d:12:94:c7:b4:19:71:da:
         0a:f9:e2:21:3e:cb:8c:f7:44:7e:ff:73:88:67:ee:b5:ae:44:
         48:31:39:89:a6:6a:a8:3b:54:12:d4:81:6e:2b:3f:9a:53:14:
         1f:e5:3b:50:a4:11:c9:2c:d8:01:13:3c:a2:3d:14:1a:85:1a:
         14:aa:c0:02:1f:aa:17:50:9f:47:1f:ce:e4:b1:80:73:38:39:
         f7:e1:01:39:cf:91:1d:7b:b2:39:ec:b9:ad:55:28:fa:28:5a:
         fe:ea:b7:33:4c:30:d6:27:83:d0:99:de:da:24:60:cd:f8:2a:
         05:58:48:50:39:16:46:54:ac:a5:88:e2:93:c0:8c:22:b2:72:
         ab:fb:76:1b:12:86:8a:e4:56:ec:1d:c1:bc:f0:6b:c7:52:02:
         43:01:64:4f:06:db:a0:8f:92:e2:2e:90:c3:b3:92:d1:18:52:
         e9:92:7c:9c
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUYiILP6RPO0utbIMYQhdgABnb2lUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE2MDIyMDQ0WhcNMjYwODE0MjM1OTU5
WjB6MUkwRwYDVQQFE0BhZmFiZjgxYjIyMWEyYWVkYzJjODgzMTA2OWZmOGExZjdh
ZTg2ZjM1YjA3N2E3ZjdkMGIxODc5ZTlkMzQyMGM5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDHfP/Ui/loXhGTAPwGTKU5VLfcmZt/F33UwFlCSGRcqHBX
6p1SH+Pp9zv+XQRONiwlHdIqXI9fq8KYaHRknpZ09IbLTlClgvvfiRyl08u/4mAX
NrduL2WEiykrKw77n1Z+pz5Be3a7pOAqIcH4fnA2xdBOUyYhJgLFZTi1qQ9FOfa0
1KtqOt2jzLzaz70pPN5Pl9A1T+btYcl69qapR63wghi4/1bYraiGV+XBSpW4RVp3
2bQ8Q9ZSeToUK5fYmjIqQpLluwyE3ls7mDOkxKYpOhp4ruaYWUE3kWH65MnrHx6r
52ZigdkPs7snDLy4gD7eglWQxYxJ76KlAAKZu8uTAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUciPRfTTraxejb60EO0VId1ORKx4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzg2MmRkNjA1LWE1YmYtNGVlMC04ZDM2LThhMzVjZGE5ZmUwOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgMmAB8UADANBgkqhkiG9w0BAQsFAAOCAQEARC9bF4CBThEd8jTWLblHJOMb
Tvql/5F82mg6z0SQwbcr8LHxXdrBClvtNILmEbsPT7v38ISlrNzPvp+er6KpMwnM
vrxnmJMVoh++fVFLwSF05G0SlMe0GXHaCvniIT7LjPdEfv9ziGfuta5ESDE5iaZq
qDtUEtSBbis/mlMUH+U7UKQRySzYARM8oj0UGoUaFKrAAh+qF1CfRx/O5LGAczg5
9+EBOc+RHXuyOey5rVUo+iha/uq3M0ww1ieD0Jne2iRgzfgqBVhIUDkWRlSspYji
k8CMIrJyq/t2GxKGiuRW7B3BvPBrx1ICQwFkTwbboI+S4i6Qw7OS0RhS6ZJ8nA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:46:23 2026 by rpki-client