Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab2c5b4c-5318-4a5e-a629-9bea0f4ea85c.roa
File:                     ab2c5b4c-5318-4a5e-a629-9bea0f4ea85c.roa (raw, json)
Hash identifier:          F2sYui64e93u6WMZTm/soxnyvzGLCF+/5LqYJFsb9nI=
Subject key identifier:   C5:9A:7F:B6:35:B8:3A:04:EF:16:BA:CE:2D:F9:C0:E7:E6:17:09:D8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1637DA13959F210997E3820A214A6A9F1E3C55CE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab2c5b4c-5318-4a5e-a629-9bea0f4ea85c.roa
Signing time:             Sat 16 May 2026 00:30:49 +0000
ROA not before:           Sat 16 May 2026 00:30:49 +0000
ROA not after:            Fri 14 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f2d:4000::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:37:da:13:95:9f:21:09:97:e3:82:0a:21:4a:6a:9f:1e:3c:55:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 16 00:30:49 2026 GMT
            Not After : Aug 14 23:59:59 2026 GMT
        Subject: serialNumber=1ed823e3610048911452858cf7f92c01b474bacb3612c5c70a23242782c46444, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:80:8c:5b:9d:c6:1b:bf:ea:9b:cf:55:e5:7e:
                    2f:2a:f3:8d:71:44:37:5b:ef:c6:cd:b3:a6:91:1f:
                    35:2e:4b:f9:54:8c:3e:2c:23:f1:d3:6d:ca:8f:a8:
                    a3:0d:ad:2b:f6:6a:eb:f9:99:d3:70:6e:27:5f:d3:
                    df:d7:2c:ca:46:a8:0b:15:45:bf:0d:00:a6:e1:db:
                    8e:73:cc:06:4a:a8:aa:9a:66:09:71:08:ee:fd:1d:
                    3b:34:c6:f5:d3:89:57:3a:eb:33:0e:10:7c:1d:c8:
                    39:2d:1f:96:48:c8:79:3c:81:70:7d:90:9c:cb:ee:
                    8d:23:77:9d:60:9e:97:f0:3b:0d:77:c2:d9:25:f0:
                    a8:e5:74:1b:0d:e8:f2:17:23:47:68:fa:84:41:ba:
                    24:d1:8c:8c:06:c6:7e:07:49:1b:3f:66:fc:52:bc:
                    e6:0a:f3:a4:20:37:17:4c:fe:1c:59:84:d8:47:6a:
                    16:51:90:02:37:53:bd:55:d6:91:dd:13:16:f0:5d:
                    d0:68:c8:d3:9e:a8:77:c4:52:27:c3:08:96:51:bc:
                    73:b7:7c:f8:66:c8:71:63:43:8d:14:6e:08:d9:73:
                    8d:64:56:90:66:99:44:92:49:bf:c7:91:e6:84:d7:
                    65:73:0d:15:0a:eb:49:b5:45:f3:75:cd:be:4a:9a:
                    7d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:9A:7F:B6:35:B8:3A:04:EF:16:BA:CE:2D:F9:C0:E7:E6:17:09:D8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab2c5b4c-5318-4a5e-a629-9bea0f4ea85c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f2d:4000::/37

    Signature Algorithm: sha256WithRSAEncryption
         94:17:d3:bc:6b:ac:3d:c9:02:a3:c1:9a:d4:6b:83:48:dd:62:
         9e:07:22:0c:ee:7f:fc:82:aa:5d:ae:98:7d:50:94:c9:93:ec:
         6c:e3:4d:e6:96:42:b3:bb:d4:62:38:7f:29:1f:f3:9c:a7:e9:
         eb:c9:8d:3d:9a:ed:39:f5:44:f7:8b:e3:e5:b4:cc:7e:98:ab:
         e1:0c:b7:fc:ba:ae:29:d8:61:a2:aa:cb:39:e3:96:e8:63:74:
         37:18:91:32:78:53:18:3e:ac:ff:bf:0c:2a:d1:84:3e:31:e0:
         02:3b:d8:07:d2:3a:c0:29:a3:47:ba:9d:f8:46:8b:8e:ee:51:
         78:df:b2:8f:96:01:b9:dc:5f:0f:49:cf:83:e4:6b:6a:91:f9:
         98:ad:b8:46:7a:17:5d:82:31:fb:cb:df:ec:35:2b:56:8a:76:
         e3:8a:5f:15:c1:41:99:52:60:57:c4:1f:0a:ba:f6:af:8d:ea:
         25:8e:37:05:a6:e4:9d:22:b0:44:bf:93:4c:a3:70:88:86:9c:
         1d:e2:ec:3e:3e:9a:6e:86:28:e3:1d:2f:1b:3f:67:47:58:76:
         c4:eb:76:68:c2:6e:18:f7:25:7e:6e:da:d1:cd:61:aa:7e:27:
         4e:17:c8:e3:e7:5b:2b:77:e6:15:b0:ca:ce:f4:c4:6c:aa:32:
         0c:f2:a6:0e
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUFjfaE5WfIQmX44IKIUpqnx48Vc4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE2MDAzMDQ5WhcNMjYwODE0MjM1OTU5
WjB6MUkwRwYDVQQFE0AxZWQ4MjNlMzYxMDA0ODkxMTQ1Mjg1OGNmN2Y5MmMwMWI0
NzRiYWNiMzYxMmM1YzcwYTIzMjQyNzgyYzQ2NDQ0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCYgIxbncYbv+qbz1Xlfi8q841xRDdb78bNs6aRHzUuS/lU
jD4sI/HTbcqPqKMNrSv2auv5mdNwbidf09/XLMpGqAsVRb8NAKbh245zzAZKqKqa
ZglxCO79HTs0xvXTiVc66zMOEHwdyDktH5ZIyHk8gXB9kJzL7o0jd51gnpfwOw13
wtkl8KjldBsN6PIXI0do+oRBuiTRjIwGxn4HSRs/ZvxSvOYK86QgNxdM/hxZhNhH
ahZRkAI3U71V1pHdExbwXdBoyNOeqHfEUifDCJZRvHO3fPhmyHFjQ40UbgjZc41k
VpBmmUSSSb/HkeaE12VzDRUK60m1RfN1zb5Kmn29AgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUxZp/tjW4OgTvFrrOLfnA5+YXCdgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2FiMmM1YjRjLTUzMTgtNGE1ZS1hNjI5LTliZWEwZjRlYTg1Yy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgMmAB8tQDANBgkqhkiG9w0BAQsFAAOCAQEAlBfTvGusPckCo8Ga1GuDSN1i
ngciDO5//IKqXa6YfVCUyZPsbONN5pZCs7vUYjh/KR/znKfp68mNPZrtOfVE94vj
5bTMfpir4Qy3/LquKdhhoqrLOeOW6GN0NxiRMnhTGD6s/78MKtGEPjHgAjvYB9I6
wCmjR7qd+EaLju5ReN+yj5YBudxfD0nPg+RrapH5mK24RnoXXYIx+8vf7DUrVop2
44pfFcFBmVJgV8QfCrr2r43qJY43BabknSKwRL+TTKNwiIacHeLsPj6aboYo4x0v
Gz9nR1h2xOt2aMJuGPclfm7a0c1hqn4nThfI4+dbK3fmFbDKzvTEbKoyDPKmDg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:16:39 2026 by rpki-client