Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a4c1fcb0-2d51-499e-8638-473e8e04c8ae.roa
File:                     a4c1fcb0-2d51-499e-8638-473e8e04c8ae.roa (raw, json)
Hash identifier:          FjRo0B+W9Sfp2ZBeeFxzl2oq39g54p3tLDrEo1G6ALs=
Subject key identifier:   8A:EA:EF:37:BE:CB:B7:E2:2B:BB:46:DD:F4:B5:FF:B0:EB:3B:F1:15
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       31E4164F30ACB672B796607A5000FCEF172190C7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a4c1fcb0-2d51-499e-8638-473e8e04c8ae.roa
Signing time:             Tue 19 May 2026 00:20:41 +0000
ROA not before:           Tue 19 May 2026 00:20:41 +0000
ROA not after:            Mon 17 Aug 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1fef:2000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:e4:16:4f:30:ac:b6:72:b7:96:60:7a:50:00:fc:ef:17:21:90:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 19 00:20:41 2026 GMT
            Not After : Aug 17 23:59:59 2026 GMT
        Subject: serialNumber=06068c4d066fc461da31b6d735e2c93a495b671e7cafdaf883d892499ce0c7bd, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1c:41:04:81:9b:13:7c:56:ba:d8:70:ee:38:
                    81:80:53:91:c3:4a:68:22:85:6f:eb:d6:4d:74:95:
                    0c:c7:3a:be:95:62:b2:aa:61:2f:c8:05:85:e1:cd:
                    34:f4:27:12:d4:e6:30:68:f4:0e:8e:35:8d:9e:aa:
                    66:32:32:fa:54:f5:18:e9:de:fa:ad:41:80:8f:c0:
                    1b:4d:20:09:14:1d:9b:48:4a:f2:87:0e:81:0c:fe:
                    09:eb:12:f6:88:6d:2a:5c:09:23:8f:11:e6:6c:ab:
                    9d:4b:47:5f:68:ad:ad:c2:d2:72:11:e8:05:37:21:
                    58:27:8e:1a:69:25:aa:b7:e8:06:10:a7:69:fc:ab:
                    7d:3b:bc:b3:c2:48:da:3b:91:1f:73:4f:3b:c3:35:
                    f5:86:5c:b2:f3:ae:de:ee:a4:d6:13:75:11:0a:c6:
                    76:8d:d0:d9:15:75:a2:f2:82:a4:1e:34:e6:d4:c2:
                    21:6c:92:9d:0f:b9:f9:d1:a6:37:e1:39:cc:01:12:
                    a2:98:a8:9c:07:b4:74:a1:4f:dd:32:49:2b:c9:ad:
                    cf:46:a4:57:47:a1:54:ff:e4:8b:0c:70:41:e4:ce:
                    f3:0c:ac:75:3b:5b:b0:9b:4b:00:73:89:a0:d6:3d:
                    ea:91:f5:9e:f5:ad:75:9c:d9:8a:f9:a1:e6:05:5e:
                    55:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:EA:EF:37:BE:CB:B7:E2:2B:BB:46:DD:F4:B5:FF:B0:EB:3B:F1:15
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a4c1fcb0-2d51-499e-8638-473e8e04c8ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fef:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         b9:12:57:ff:52:13:9d:b2:08:49:e2:43:cf:62:f8:b4:e1:c7:
         d5:c3:f2:df:06:21:96:d8:b1:a1:70:c0:e5:c8:83:05:da:54:
         69:c2:54:6f:ef:55:81:55:78:c0:f5:68:45:09:58:47:ba:8f:
         23:96:24:a3:0a:ac:c9:94:b7:1a:33:b8:ea:0d:41:1d:03:bb:
         95:18:20:62:b7:ec:0d:77:ca:cf:f5:4d:72:73:3f:bd:4b:1f:
         f5:94:d5:9e:66:86:84:ba:5a:0c:3d:30:1e:51:64:39:3c:8e:
         21:fe:2c:e0:ee:eb:e3:82:3b:b3:71:58:73:7e:2d:6a:ce:4a:
         b9:f5:84:4a:2f:74:a8:1f:92:94:67:7c:70:0a:15:85:24:6c:
         2b:e2:ba:b0:1c:36:70:04:50:35:5c:2e:9b:86:65:fe:14:f8:
         fc:90:a2:84:3d:79:45:17:bf:19:1b:38:93:f3:79:f2:17:82:
         ee:a3:c9:65:85:5b:59:4d:9a:8d:98:66:98:47:5f:4a:6d:29:
         e1:44:b3:f1:44:ca:84:2d:2f:5f:4e:88:be:3f:a1:ba:fd:85:
         42:59:ad:2f:34:b6:0c:bb:f4:f9:55:35:89:9f:a5:d9:e0:f1:
         87:57:54:82:95:2e:26:09:98:33:39:58:c9:da:c2:5a:a7:87:
         9e:83:f2:bb
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUMeQWTzCstnK3lmB6UAD87xchkMcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE5MDAyMDQxWhcNMjYwODE3MjM1OTU5
WjB6MUkwRwYDVQQFE0AwNjA2OGM0ZDA2NmZjNDYxZGEzMWI2ZDczNWUyYzkzYTQ5
NWI2NzFlN2NhZmRhZjg4M2Q4OTI0OTljZTBjN2JkMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQClHEEEgZsTfFa62HDuOIGAU5HDSmgihW/r1k10lQzHOr6V
YrKqYS/IBYXhzTT0JxLU5jBo9A6ONY2eqmYyMvpU9Rjp3vqtQYCPwBtNIAkUHZtI
SvKHDoEM/gnrEvaIbSpcCSOPEeZsq51LR19ora3C0nIR6AU3IVgnjhppJaq36AYQ
p2n8q307vLPCSNo7kR9zTzvDNfWGXLLzrt7upNYTdREKxnaN0NkVdaLygqQeNObU
wiFskp0PufnRpjfhOcwBEqKYqJwHtHShT90ySSvJrc9GpFdHoVT/5IsMcEHkzvMM
rHU7W7CbSwBziaDWPeqR9Z71rXWc2Yr5oeYFXlUXAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUiurvN77Lt+Iru0bd9LX/sOs78RUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2E0YzFmY2IwLTJkNTEtNDk5ZS04NjM4LTQ3M2U4ZTA0YzhhZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB/vIDANBgkqhkiG9w0BAQsFAAOCAQEAuRJX/1ITnbIISeJDz2L4tOHH
1cPy3wYhltixoXDA5ciDBdpUacJUb+9VgVV4wPVoRQlYR7qPI5YkowqsyZS3GjO4
6g1BHQO7lRggYrfsDXfKz/VNcnM/vUsf9ZTVnmaGhLpaDD0wHlFkOTyOIf4s4O7r
44I7s3FYc34tas5KufWESi90qB+SlGd8cAoVhSRsK+K6sBw2cARQNVwum4Zl/hT4
/JCihD15RRe/GRs4k/N58heC7qPJZYVbWU2ajZhmmEdfSm0p4USz8UTKhC0vX06I
vj+huv2FQlmtLzS2DLv0+VU1iZ+l2eDxh1dUgpUuJgmYMzlYydrCWqeHnoPyuw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:06:15 2026 by rpki-client