Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c003343e-41bf-42ba-98b5-5121f5202310.roa
File:                     c003343e-41bf-42ba-98b5-5121f5202310.roa (raw, json)
Hash identifier:          deDGeZpPVGX2+x4wtqqw2ZhRkHKCqd0IL3IrTwd18qw=
Subject key identifier:   A2:01:DC:04:C8:C4:70:92:A2:7B:85:5A:F3:F9:85:68:6A:BD:51:ED
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7B8CFCD7A5902FF748A7233ABF61E512AE0320F3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c003343e-41bf-42ba-98b5-5121f5202310.roa
Signing time:             Sat 16 May 2026 00:50:42 +0000
ROA not before:           Sat 16 May 2026 00:50:42 +0000
ROA not after:            Fri 14 Aug 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f2d:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:8c:fc:d7:a5:90:2f:f7:48:a7:23:3a:bf:61:e5:12:ae:03:20:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 16 00:50:42 2026 GMT
            Not After : Aug 14 23:59:59 2026 GMT
        Subject: serialNumber=bf129926f3ea75837461211e4db6e985c478c5df4b46df78dfb31597f25ffa89, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f6:77:69:82:58:63:f7:09:07:e3:39:af:76:
                    1a:2c:87:8b:6e:40:c9:7a:ce:8e:24:d8:dd:69:bb:
                    e4:1d:4a:1c:54:61:d7:c7:63:35:11:28:51:7f:34:
                    65:3d:5f:cd:52:65:95:1c:74:92:f5:ba:fe:99:55:
                    39:53:0c:54:f8:71:dd:a3:6d:6a:b6:bd:a3:e2:c8:
                    2f:43:a8:ff:79:56:a1:67:f9:3d:0c:04:7e:a4:e9:
                    a6:da:a0:e5:9c:21:a0:1a:b1:a2:d1:3b:fe:ae:c2:
                    59:71:ca:d9:60:b5:18:30:39:e2:85:ca:72:8e:bb:
                    2f:a5:08:31:b5:e4:cb:66:2f:68:11:54:22:a2:ce:
                    65:76:c3:e1:9f:bf:f4:30:7b:47:1c:bd:46:73:a7:
                    14:cd:e8:4f:2f:20:76:88:90:6f:c6:19:0f:90:25:
                    a2:f3:1c:1c:0b:a6:c9:fb:b9:a0:df:5a:1b:33:d0:
                    28:b8:9a:58:cf:e0:f8:b8:05:8e:d4:ea:0d:ef:cd:
                    7c:44:17:84:1a:1c:6f:a0:ee:49:e2:96:cd:94:4d:
                    4e:5e:2b:d0:8e:69:39:4f:79:b4:72:1f:3f:d8:6f:
                    b8:25:11:cd:a6:0a:75:b8:8b:3f:3b:a0:0b:95:b5:
                    e6:ec:b0:37:e2:3b:b6:f3:9b:fa:54:82:33:cb:40:
                    45:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:01:DC:04:C8:C4:70:92:A2:7B:85:5A:F3:F9:85:68:6A:BD:51:ED
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c003343e-41bf-42ba-98b5-5121f5202310.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f2d:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         7e:a3:8f:30:49:87:23:9d:ce:c3:9b:98:6c:b8:77:3e:b9:67:
         67:80:6e:eb:1e:0f:0a:13:89:97:97:37:05:c4:86:d1:c2:ab:
         c2:61:90:a4:41:7f:12:56:6b:a5:9d:c1:1a:db:d5:aa:26:06:
         ea:06:95:e9:e3:4c:65:94:4e:dd:c7:5d:e3:33:ef:27:71:51:
         df:55:5a:5d:a6:e8:91:c1:45:eb:56:ea:0a:79:0a:6f:e0:91:
         c0:b6:0a:d0:f4:d7:b9:f7:ed:2d:ed:d6:e9:d3:fb:ce:13:aa:
         fd:e8:ea:3f:b4:ea:64:76:0b:ed:2e:25:6c:87:97:2b:23:14:
         5b:65:8d:65:4a:05:fb:88:82:29:c4:b4:8d:7e:02:2a:c4:78:
         58:7d:51:73:16:4d:1b:3b:66:c1:bd:d7:9e:56:95:1f:0a:0e:
         48:8c:7e:b9:fa:04:41:ee:20:6d:fe:c6:7f:36:5f:cc:63:b3:
         2a:49:74:62:05:f9:fb:b2:b6:8e:cc:23:7e:88:5f:9f:aa:83:
         20:2a:6c:f7:a0:46:f1:fa:a7:e8:00:82:7b:54:94:1a:69:ad:
         77:32:9b:9a:4c:5d:d2:9e:17:3f:01:da:9d:c0:a1:71:2f:f4:
         9d:e2:32:c3:4a:03:0d:e5:ff:48:f2:57:10:96:21:9a:c3:cb:
         e7:8d:28:e3
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUe4z816WQL/dIpyM6v2HlEq4DIPMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE2MDA1MDQyWhcNMjYwODE0MjM1OTU5
WjB6MUkwRwYDVQQFE0BiZjEyOTkyNmYzZWE3NTgzNzQ2MTIxMWU0ZGI2ZTk4NWM0
NzhjNWRmNGI0NmRmNzhkZmIzMTU5N2YyNWZmYTg5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCR9ndpglhj9wkH4zmvdhosh4tuQMl6zo4k2N1pu+QdShxU
YdfHYzURKFF/NGU9X81SZZUcdJL1uv6ZVTlTDFT4cd2jbWq2vaPiyC9DqP95VqFn
+T0MBH6k6abaoOWcIaAasaLRO/6uwllxytlgtRgwOeKFynKOuy+lCDG15MtmL2gR
VCKizmV2w+Gfv/Qwe0ccvUZzpxTN6E8vIHaIkG/GGQ+QJaLzHBwLpsn7uaDfWhsz
0Ci4mljP4Pi4BY7U6g3vzXxEF4QaHG+g7knils2UTU5eK9COaTlPebRyHz/Yb7gl
Ec2mCnW4iz87oAuVtebssDfiO7bzm/pUgjPLQEUnAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUogHcBMjEcJKie4Va8/mFaGq9Ue0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2MwMDMzNDNlLTQxYmYtNDJiYS05OGI1LTUxMjFmNTIwMjMxMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgQmAB8tQDANBgkqhkiG9w0BAQsFAAOCAQEAfqOPMEmHI53Ow5uYbLh3Prln
Z4Bu6x4PChOJl5c3BcSG0cKrwmGQpEF/ElZrpZ3BGtvVqiYG6gaV6eNMZZRO3cdd
4zPvJ3FR31VaXabokcFF61bqCnkKb+CRwLYK0PTXufftLe3W6dP7zhOq/ejqP7Tq
ZHYL7S4lbIeXKyMUW2WNZUoF+4iCKcS0jX4CKsR4WH1RcxZNGztmwb3XnlaVHwoO
SIx+ufoEQe4gbf7GfzZfzGOzKkl0YgX5+7K2jswjfohfn6qDICps96BG8fqn6ACC
e1SUGmmtdzKbmkxd0p4XPwHancChcS/0neIyw0oDDeX/SPJXEJYhmsPL540o4w==
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:12:32 2026 by rpki-client