Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/abd74f01-0844-40c3-b6e5-ef0435c0830c.roa
File:                     abd74f01-0844-40c3-b6e5-ef0435c0830c.roa (raw, json)
Hash identifier:          TBBCenpsaKp5Hy0SlqhxgZcuCx+/zTBkW8yA3D0298U=
Subject key identifier:   56:E4:91:1B:C3:C9:F5:8C:03:72:0A:A3:97:48:37:10:40:AF:23:F0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6F140C32F859A74F6BE12873F4611B11D2C03CF0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/abd74f01-0844-40c3-b6e5-ef0435c0830c.roa
Signing time:             Tue 19 May 2026 00:30:54 +0000
ROA not before:           Tue 19 May 2026 00:30:54 +0000
ROA not after:            Mon 17 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f60:2000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:14:0c:32:f8:59:a7:4f:6b:e1:28:73:f4:61:1b:11:d2:c0:3c:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 19 00:30:54 2026 GMT
            Not After : Aug 17 23:59:59 2026 GMT
        Subject: serialNumber=fc598362ddbdcccb1a27d0f36f66b5c911f64af9f971d9115dc94a63aa4c1726, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d5:f2:22:9a:43:4c:32:c7:24:87:1c:9b:cc:
                    04:c5:6f:ee:36:e4:63:5a:08:a9:92:0b:60:4c:93:
                    fa:09:4e:94:92:6f:af:2c:5a:56:8d:9d:b9:8c:a5:
                    d5:02:c3:b7:55:87:cf:49:1e:18:d7:ca:f2:40:2e:
                    0e:98:fb:c1:90:61:2a:71:11:98:99:56:2c:6d:86:
                    df:f1:85:54:33:02:a2:49:8a:b5:c9:58:98:83:6c:
                    17:1c:a3:28:bf:ea:30:5a:08:c9:ac:8f:da:d2:c2:
                    a1:ac:e3:aa:fb:f4:9d:f7:e0:83:08:c7:a3:a1:7f:
                    04:33:12:d5:45:6f:fe:3b:04:ea:d1:06:04:68:32:
                    b2:81:42:ce:43:24:74:54:21:ab:2f:fc:47:52:2e:
                    8e:d1:a2:96:d6:d9:e6:76:8d:f5:e1:18:6a:ad:c8:
                    a0:53:53:3c:29:7b:8b:99:8d:c4:67:4c:7d:84:2b:
                    8a:4a:4a:3e:58:c7:3c:a7:10:7b:2c:8b:6e:81:d8:
                    78:10:a5:b0:b6:61:be:7f:8f:07:f4:a1:d6:1d:ea:
                    2a:1b:40:77:6c:58:5e:5e:20:96:07:2a:30:da:65:
                    ee:86:05:22:87:63:e9:de:ef:26:7c:99:b2:e1:67:
                    59:20:83:d6:2b:fd:f6:f3:5e:45:09:c8:50:3c:f5:
                    41:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:E4:91:1B:C3:C9:F5:8C:03:72:0A:A3:97:48:37:10:40:AF:23:F0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/abd74f01-0844-40c3-b6e5-ef0435c0830c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f60:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         83:76:00:d6:7e:eb:36:3d:74:10:b7:73:09:2c:1e:66:67:32:
         e5:13:2d:0c:59:07:77:24:a2:e9:d0:5e:1d:2a:6f:56:da:ef:
         d1:7e:17:06:eb:9b:d0:ac:6f:10:5f:a8:d5:70:c9:66:fe:2a:
         79:41:16:63:d7:87:fa:71:54:2a:5e:74:eb:8e:89:a5:71:7a:
         ae:b4:a7:4c:22:bc:06:f2:0a:18:a3:44:f0:8a:77:7b:64:85:
         0d:0b:45:b7:78:26:66:71:c5:20:6b:cb:7b:9d:2f:d2:50:b8:
         68:5a:32:9f:8f:7c:91:40:18:7f:23:1d:70:1d:35:48:93:4d:
         03:13:6e:04:a8:d8:71:bd:7d:35:77:c5:be:86:c0:de:f0:4f:
         7b:ad:98:14:42:8e:98:cb:36:5e:6c:58:76:92:d3:18:9b:91:
         fa:e8:44:80:c5:4f:64:8f:a3:6d:e5:04:0d:11:82:a1:04:63:
         f8:53:46:d3:85:8d:d5:18:83:b8:1e:5e:12:5e:bc:12:8e:33:
         79:01:52:88:8b:ba:be:4c:28:4f:21:94:71:65:1e:c1:c3:8b:
         12:f9:58:a9:82:ed:2d:53:ac:45:9e:c4:54:b9:51:01:b4:1d:
         4d:63:43:aa:9c:50:90:df:53:b2:e5:f8:13:e5:53:c3:7e:a8:
         43:4a:ce:86
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUbxQMMvhZp09r4Shz9GEbEdLAPPAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE5MDAzMDU0WhcNMjYwODE3MjM1OTU5
WjB6MUkwRwYDVQQFE0BmYzU5ODM2MmRkYmRjY2NiMWEyN2QwZjM2ZjY2YjVjOTEx
ZjY0YWY5Zjk3MWQ5MTE1ZGM5NGE2M2FhNGMxNzI2MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCr1fIimkNMMsckhxybzATFb+425GNaCKmSC2BMk/oJTpSS
b68sWlaNnbmMpdUCw7dVh89JHhjXyvJALg6Y+8GQYSpxEZiZVixtht/xhVQzAqJJ
irXJWJiDbBccoyi/6jBaCMmsj9rSwqGs46r79J334IMIx6OhfwQzEtVFb/47BOrR
BgRoMrKBQs5DJHRUIasv/EdSLo7RopbW2eZ2jfXhGGqtyKBTUzwpe4uZjcRnTH2E
K4pKSj5YxzynEHssi26B2HgQpbC2Yb5/jwf0odYd6iobQHdsWF5eIJYHKjDaZe6G
BSKHY+ne7yZ8mbLhZ1kgg9Yr/fbzXkUJyFA89UGTAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUVuSRG8PJ9YwDcgqjl0g3EECvI/AwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2FiZDc0ZjAxLTA4NDQtNDBjMy1iNmU1LWVmMDQzNWMwODMwYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB9gIDANBgkqhkiG9w0BAQsFAAOCAQEAg3YA1n7rNj10ELdzCSweZmcy
5RMtDFkHdySi6dBeHSpvVtrv0X4XBuub0KxvEF+o1XDJZv4qeUEWY9eH+nFUKl50
646JpXF6rrSnTCK8BvIKGKNE8Ip3e2SFDQtFt3gmZnHFIGvLe50v0lC4aFoyn498
kUAYfyMdcB01SJNNAxNuBKjYcb19NXfFvobA3vBPe62YFEKOmMs2XmxYdpLTGJuR
+uhEgMVPZI+jbeUEDRGCoQRj+FNG04WN1RiDuB5eEl68Eo4zeQFSiIu6vkwoTyGU
cWUewcOLEvlYqYLtLVOsRZ7EVLlRAbQdTWNDqpxQkN9TsuX4E+VTw36oQ0rOhg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:50:03 2026 by rpki-client