Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98210af0-508f-49b8-a5e8-71d021460617.roa
File:                     98210af0-508f-49b8-a5e8-71d021460617.roa (raw, json)
Hash identifier:          Vhu9/UfqMBj9GcqJMKH4fEmsV4e51GiTdDhbPt7IwyM=
Subject key identifier:   61:A4:02:F3:BD:AC:BF:60:36:62:CA:D2:22:C0:25:84:12:44:9F:8F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       06E3AF7711DD3E9F384334A4997F432E9A19BD1F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98210af0-508f-49b8-a5e8-71d021460617.roa
Signing time:             Sat 16 May 2026 02:10:10 +0000
ROA not before:           Sat 16 May 2026 02:10:10 +0000
ROA not after:            Fri 14 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f18:6000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:e3:af:77:11:dd:3e:9f:38:43:34:a4:99:7f:43:2e:9a:19:bd:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 16 02:10:10 2026 GMT
            Not After : Aug 14 23:59:59 2026 GMT
        Subject: serialNumber=dfbf7c11309024ce395ba969c9ce9950685e9a0b27a82b1e05754ec0216eb338, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d6:8b:92:f7:b6:0d:1a:a8:b8:08:3b:b1:11:
                    1f:50:9d:91:32:9c:ae:91:a0:3c:ea:03:48:a3:d7:
                    28:27:e2:f7:f2:de:60:00:ce:98:9b:13:30:fc:86:
                    e9:f3:f1:cd:7d:aa:5d:0f:9f:fb:c7:48:14:95:8b:
                    06:6e:9a:18:b1:eb:f6:e6:9a:5e:f6:ba:04:72:94:
                    f7:67:46:18:18:a3:5c:db:79:e3:b2:33:ed:17:28:
                    1b:22:05:a6:e2:c8:20:2d:8e:51:fe:2f:1a:2b:92:
                    1e:c0:ac:58:ee:a4:3e:03:36:a2:04:59:4d:1d:41:
                    db:d8:74:b8:8c:88:78:c9:47:34:2a:f0:30:14:a2:
                    6c:21:1d:78:f3:25:2c:3a:9f:12:c7:0c:07:26:d3:
                    4c:b0:3d:59:bd:c4:e1:81:bc:38:b5:6e:3b:f6:7e:
                    ae:8e:43:84:09:48:a7:db:ab:54:c8:83:b6:99:ee:
                    5e:53:5b:01:90:fc:33:12:3e:7e:ee:32:8b:f9:42:
                    ba:4f:44:ca:c0:97:de:ed:11:15:08:5a:2e:2f:77:
                    24:15:d6:ed:ec:4a:ca:a5:33:2b:e9:72:88:2a:33:
                    70:66:2a:f4:02:44:c3:56:9c:e5:99:ca:b2:08:72:
                    b9:62:70:35:9e:8e:21:b6:4e:51:64:93:38:7a:ca:
                    74:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:A4:02:F3:BD:AC:BF:60:36:62:CA:D2:22:C0:25:84:12:44:9F:8F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98210af0-508f-49b8-a5e8-71d021460617.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f18:6000::/35

    Signature Algorithm: sha256WithRSAEncryption
         bf:b3:67:9b:03:06:b9:3c:2a:0a:94:50:25:37:a7:10:a8:b8:
         2b:91:d6:aa:79:6e:c1:1c:e2:9d:95:24:c6:34:67:f3:a7:b3:
         30:82:70:79:6b:ce:3e:06:02:52:d9:e7:d2:1c:2c:ce:e5:b0:
         bc:f2:87:4f:95:ed:21:4f:45:bd:55:bf:a8:06:65:36:a7:2e:
         ff:87:bd:ab:37:ae:8c:95:93:50:0e:d7:a9:67:b2:89:97:60:
         b5:c0:91:60:10:6d:74:56:3a:3e:8e:9c:3a:98:60:14:45:df:
         1f:a1:49:78:00:9f:42:cb:fd:4b:09:0e:10:a7:e6:b0:54:74:
         4c:24:2d:6e:ff:8a:4c:04:b2:6d:f1:df:4d:88:0c:de:48:2c:
         d4:a5:da:1b:78:df:0b:1f:80:0d:0a:ba:75:bf:9b:f3:0c:66:
         57:83:7e:83:64:52:f6:e1:0e:40:98:b3:69:26:c4:b9:8f:1f:
         01:71:fa:f9:b8:db:7f:d7:0f:46:9e:c1:5b:b8:ae:a4:b6:d7:
         ac:a4:9f:95:5c:ce:1b:05:81:57:49:e6:02:52:a3:24:2f:34:
         54:2d:36:69:10:26:39:74:82:62:52:a8:d8:24:fd:7c:61:06:
         59:31:0b:b5:d4:a1:b6:e8:34:8e:44:78:3f:11:87:34:b2:4a:
         f1:a7:61:8e
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUBuOvdxHdPp84QzSkmX9DLpoZvR8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE2MDIxMDEwWhcNMjYwODE0MjM1OTU5
WjB6MUkwRwYDVQQFE0BkZmJmN2MxMTMwOTAyNGNlMzk1YmE5NjljOWNlOTk1MDY4
NWU5YTBiMjdhODJiMWUwNTc1NGVjMDIxNmViMzM4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDW1ouS97YNGqi4CDuxER9QnZEynK6RoDzqA0ij1ygn4vfy
3mAAzpibEzD8hunz8c19ql0Pn/vHSBSViwZumhix6/bmml72ugRylPdnRhgYo1zb
eeOyM+0XKBsiBabiyCAtjlH+Lxorkh7ArFjupD4DNqIEWU0dQdvYdLiMiHjJRzQq
8DAUomwhHXjzJSw6nxLHDAcm00ywPVm9xOGBvDi1bjv2fq6OQ4QJSKfbq1TIg7aZ
7l5TWwGQ/DMSPn7uMov5QrpPRMrAl97tERUIWi4vdyQV1u3sSsqlMyvpcogqM3Bm
KvQCRMNWnOWZyrIIcrlicDWejiG2TlFkkzh6ynQtAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUYaQC872sv2A2YsrSIsAlhBJEn48wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzk4MjEwYWYwLTUwOGYtNDliOC1hNWU4LTcxZDAyMTQ2MDYxNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgUmAB8YYDANBgkqhkiG9w0BAQsFAAOCAQEAv7NnmwMGuTwqCpRQJTenEKi4
K5HWqnluwRzinZUkxjRn86ezMIJweWvOPgYCUtnn0hwszuWwvPKHT5XtIU9FvVW/
qAZlNqcu/4e9qzeujJWTUA7XqWeyiZdgtcCRYBBtdFY6Po6cOphgFEXfH6FJeACf
Qsv9SwkOEKfmsFR0TCQtbv+KTASybfHfTYgM3kgs1KXaG3jfCx+ADQq6db+b8wxm
V4N+g2RS9uEOQJizaSbEuY8fAXH6+bjbf9cPRp7BW7iupLbXrKSflVzOGwWBV0nm
AlKjJC80VC02aRAmOXSCYlKo2CT9fGEGWTELtdShtug0jkR4PxGHNLJK8adhjg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:15:29 2026 by rpki-client