Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2605e5f-34b7-4bbc-a379-c2626958ef3a.roa
File:                     a2605e5f-34b7-4bbc-a379-c2626958ef3a.roa (raw, json)
Hash identifier:          5mSQ9oSCoRTSJHfKTuCQy9bsTmPuLMc0JJlIvyV5fWs=
Subject key identifier:   FC:F8:B9:4D:13:F6:04:29:49:55:E7:33:95:3E:3D:27:19:D6:5B:37
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6F35C177806C20F0724AF183C1D516B7D9AE8294
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2605e5f-34b7-4bbc-a379-c2626958ef3a.roa
Signing time:             Sat 16 May 2026 01:30:14 +0000
ROA not before:           Sat 16 May 2026 01:30:14 +0000
ROA not after:            Fri 14 Aug 2026 23:59:59 +0000
asID:                     8987
IP address blocks:        2600:1f15::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:35:c1:77:80:6c:20:f0:72:4a:f1:83:c1:d5:16:b7:d9:ae:82:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 16 01:30:14 2026 GMT
            Not After : Aug 14 23:59:59 2026 GMT
        Subject: serialNumber=58a9aafb57f96b59c68730b319519abad0d68220b93a1ccfacf7ceaddc36489e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:2c:16:cf:cc:e8:2b:a4:81:b2:97:70:10:ef:
                    d4:b4:7d:a9:a1:2c:ca:a1:f9:49:5b:70:17:d7:44:
                    74:32:01:0b:27:85:90:53:9f:02:40:a3:25:dc:6f:
                    bc:06:3e:66:16:67:89:45:ac:b7:aa:9c:4f:d3:f0:
                    54:63:ea:bf:a5:45:e9:45:96:11:88:b3:76:ae:16:
                    52:7d:38:ef:7d:54:03:f8:fc:66:fa:8e:54:56:f1:
                    16:af:36:a1:01:53:8b:e5:95:b9:01:0b:1e:79:1d:
                    e0:6d:3d:ac:cc:f5:47:16:1a:98:2f:39:3a:01:3e:
                    22:cf:45:05:3a:b7:24:09:1b:58:06:c6:dc:4a:ae:
                    d4:c5:54:c9:12:b7:df:49:28:25:02:c4:0a:ed:de:
                    59:df:cc:a3:79:fb:64:1c:4d:d1:97:be:80:0b:58:
                    33:d6:d9:13:c6:bd:bc:69:ab:ce:0d:cb:ae:7c:41:
                    62:9a:f4:0e:a4:81:64:1a:72:14:a0:64:a7:ca:5b:
                    6e:40:ac:9c:d8:4a:73:12:32:6d:1b:e1:14:0d:1d:
                    2b:38:73:10:3f:aa:48:b6:db:63:58:82:09:1c:74:
                    c7:f4:7e:b7:6b:18:e5:49:78:22:11:14:9e:59:0e:
                    ab:a9:e3:1c:85:19:ec:22:ef:63:42:6a:75:1c:eb:
                    78:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:F8:B9:4D:13:F6:04:29:49:55:E7:33:95:3E:3D:27:19:D6:5B:37
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2605e5f-34b7-4bbc-a379-c2626958ef3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f15::/38

    Signature Algorithm: sha256WithRSAEncryption
         3b:28:68:71:fb:a4:a3:a1:0a:3b:d5:54:ac:0b:7a:c5:46:43:
         db:d7:bb:8f:9e:d7:fb:5e:11:65:5f:e8:0d:d8:90:06:f9:4b:
         3f:3b:66:fe:58:37:0d:8c:11:d0:95:7d:a0:ad:46:29:5d:2b:
         47:e6:0c:af:f5:67:36:b4:57:6a:c4:8f:0a:17:22:90:cf:1f:
         ec:f0:29:fc:a5:6d:b5:cf:c3:1b:e5:f8:f6:72:1d:1d:4f:cd:
         71:77:3e:0d:b5:c4:86:f1:27:2e:b1:49:ca:11:5d:97:10:90:
         73:68:bc:0e:e0:b2:5e:96:20:d1:75:e5:b9:1b:01:bc:28:10:
         d7:51:94:2c:e9:fe:9f:3b:90:14:7b:61:9f:b8:9e:5b:46:8c:
         60:5f:4a:3c:d8:6f:34:74:b7:08:63:a6:ac:e3:e0:85:77:33:
         a5:50:ac:40:98:24:a8:f6:eb:c2:70:dd:ce:1c:f3:53:ca:13:
         77:a2:80:03:03:22:2a:43:ca:cb:84:61:22:f9:15:48:a3:49:
         85:5f:be:de:68:00:ae:31:48:40:1a:09:78:61:ec:91:65:b8:
         ee:60:17:22:84:7e:ae:df:1b:6d:3e:d8:0d:96:3c:3e:25:64:
         b2:4b:cf:2b:dd:6d:44:56:16:e2:9a:46:22:e7:f5:d0:60:54:
         aa:3c:fb:d0
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUbzXBd4BsIPBySvGDwdUWt9mugpQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE2MDEzMDE0WhcNMjYwODE0MjM1OTU5
WjB6MUkwRwYDVQQFE0A1OGE5YWFmYjU3Zjk2YjU5YzY4NzMwYjMxOTUxOWFiYWQw
ZDY4MjIwYjkzYTFjY2ZhY2Y3Y2VhZGRjMzY0ODllMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDiLBbPzOgrpIGyl3AQ79S0famhLMqh+UlbcBfXRHQyAQsn
hZBTnwJAoyXcb7wGPmYWZ4lFrLeqnE/T8FRj6r+lRelFlhGIs3auFlJ9OO99VAP4
/Gb6jlRW8RavNqEBU4vllbkBCx55HeBtPazM9UcWGpgvOToBPiLPRQU6tyQJG1gG
xtxKrtTFVMkSt99JKCUCxArt3lnfzKN5+2QcTdGXvoALWDPW2RPGvbxpq84Ny658
QWKa9A6kgWQachSgZKfKW25ArJzYSnMSMm0b4RQNHSs4cxA/qki222NYggkcdMf0
frdrGOVJeCIRFJ5ZDqup4xyFGewi72NCanUc63hnAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQU/Pi5TRP2BClJVeczlT49JxnWWzcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2EyNjA1ZTVmLTM0YjctNGJiYy1hMzc5LWMyNjI2OTU4ZWYzYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgImAB8VADANBgkqhkiG9w0BAQsFAAOCAQEAOyhocfuko6EKO9VUrAt6xUZD
29e7j57X+14RZV/oDdiQBvlLPztm/lg3DYwR0JV9oK1GKV0rR+YMr/VnNrRXasSP
ChcikM8f7PAp/KVttc/DG+X49nIdHU/NcXc+DbXEhvEnLrFJyhFdlxCQc2i8DuCy
XpYg0XXluRsBvCgQ11GULOn+nzuQFHthn7ieW0aMYF9KPNhvNHS3CGOmrOPghXcz
pVCsQJgkqPbrwnDdzhzzU8oTd6KAAwMiKkPKy4RhIvkVSKNJhV++3mgArjFIQBoJ
eGHskWW47mAXIoR+rt8bbT7YDZY8PiVkskvPK91tRFYW4ppGIuf10GBUqjz70A==
-----END CERTIFICATE-----
Generated at Sat Jun 13 11:19:41 2026 by rpki-client