Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da22f6ed-91b5-496a-92fc-485157f509f6.roa
File:                     da22f6ed-91b5-496a-92fc-485157f509f6.roa (raw, json)
Hash identifier:          MzCsUyF7ZZzlHvTxRYCVyhpU6WTf6QGyqy4thsf0WqY=
Subject key identifier:   D4:6A:26:69:EF:95:8A:2C:9D:08:24:AA:4F:71:1D:2B:C2:6D:29:DA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1448E58F973D5C248FE7C38546D9EAF615D29ACA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da22f6ed-91b5-496a-92fc-485157f509f6.roa
Signing time:             Fri 15 May 2026 00:21:02 +0000
ROA not before:           Fri 15 May 2026 00:21:02 +0000
ROA not after:            Thu 13 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fff:4140::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:48:e5:8f:97:3d:5c:24:8f:e7:c3:85:46:d9:ea:f6:15:d2:9a:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 15 00:21:02 2026 GMT
            Not After : Aug 13 23:59:59 2026 GMT
        Subject: serialNumber=a67a86abc89fcfb43fcf429f1987230afae0063076a86baab57e4b717e149173, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1e:c3:a0:9d:82:b5:63:79:fd:23:62:52:dc:
                    9c:ea:01:30:00:94:3d:86:10:62:01:ef:44:2a:36:
                    c6:44:07:9f:ee:24:0d:44:58:95:55:65:f5:11:54:
                    5e:66:4e:54:4e:40:58:6d:10:6b:c2:3c:02:10:e7:
                    1e:ad:58:ea:ec:f9:c4:d8:42:0d:49:6b:66:98:0b:
                    b0:51:29:4c:dd:73:90:0a:1a:ef:d5:6a:b3:de:ff:
                    ba:1a:b5:ac:c0:2f:49:ff:41:8f:5e:e1:f8:87:fe:
                    a4:5c:31:a3:8e:f6:4a:b2:27:dd:9b:06:d8:51:d0:
                    7e:9f:92:fd:f0:77:f4:cc:61:3f:07:ac:a0:1f:b1:
                    5c:9f:bb:d5:21:7c:53:ba:66:6e:ef:45:1f:94:28:
                    35:e0:f6:18:12:c1:9a:3b:a0:a0:91:c7:ca:9e:8b:
                    1c:ab:fe:29:1a:01:5d:02:6b:42:0f:4f:1b:60:33:
                    19:09:ec:a7:65:31:34:0b:96:24:b5:89:d8:e7:56:
                    c3:9f:ee:02:5d:2b:d4:c1:3b:30:ea:28:04:14:7a:
                    2c:60:ee:61:d4:cb:a9:a0:bb:0b:e1:95:98:3e:53:
                    27:c3:39:35:49:9a:80:19:3a:f0:b6:18:5a:32:a6:
                    cd:4f:b2:3c:84:87:ff:f4:b1:0c:7b:d9:a5:42:44:
                    35:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:6A:26:69:EF:95:8A:2C:9D:08:24:AA:4F:71:1D:2B:C2:6D:29:DA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da22f6ed-91b5-496a-92fc-485157f509f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fff:4140::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:5b:f4:ff:a0:9f:81:32:1c:8a:8d:13:b1:47:b6:2d:6a:98:
         7b:88:d3:1e:3d:6f:41:49:75:d4:db:f7:90:d5:0b:49:bc:21:
         4f:22:e5:8a:4f:5e:b5:c9:da:f9:6b:4b:dc:19:ce:b8:e6:de:
         3e:7d:f9:80:ff:e8:dd:ff:fc:47:97:10:ba:b8:fe:a3:8a:bc:
         19:99:bf:a3:6d:f6:51:28:93:b3:6f:9b:8b:2e:f3:e7:85:50:
         71:4f:6b:b6:15:34:b5:3c:74:07:22:4e:8c:02:71:08:cc:e6:
         07:17:33:fa:fd:2f:a3:c3:15:51:ec:8e:bb:15:c7:a5:26:c4:
         35:db:6c:f1:b1:3a:19:99:a1:79:06:7d:76:ff:df:ce:3d:b0:
         d5:ec:ea:36:67:89:8d:df:b5:44:fb:61:45:05:f2:7e:77:f7:
         6e:c9:6a:1b:51:05:13:b8:d2:07:a6:cc:62:8c:0b:0f:08:e6:
         4e:aa:c3:ce:06:55:2c:7b:8b:68:e1:be:73:1a:1e:64:54:1f:
         b6:50:37:e0:3c:8c:6e:d9:8c:10:76:16:a1:36:f3:6b:ff:d5:
         3e:f7:fc:57:fb:9f:32:2b:3b:94:5b:35:82:56:5d:db:5c:d1:
         36:36:47:76:b4:8c:07:eb:a6:c3:37:ac:1a:52:3b:d2:9f:5d:
         ac:10:41:8c
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUFEjlj5c9XCSP58OFRtnq9hXSmsowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE1MDAyMTAyWhcNMjYwODEzMjM1OTU5
WjB6MUkwRwYDVQQFE0BhNjdhODZhYmM4OWZjZmI0M2ZjZjQyOWYxOTg3MjMwYWZh
ZTAwNjMwNzZhODZiYWFiNTdlNGI3MTdlMTQ5MTczMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC0HsOgnYK1Y3n9I2JS3JzqATAAlD2GEGIB70QqNsZEB5/u
JA1EWJVVZfURVF5mTlROQFhtEGvCPAIQ5x6tWOrs+cTYQg1Ja2aYC7BRKUzdc5AK
Gu/VarPe/7oatazAL0n/QY9e4fiH/qRcMaOO9kqyJ92bBthR0H6fkv3wd/TMYT8H
rKAfsVyfu9UhfFO6Zm7vRR+UKDXg9hgSwZo7oKCRx8qeixyr/ikaAV0Ca0IPTxtg
MxkJ7KdlMTQLliS1idjnVsOf7gJdK9TBOzDqKAQUeixg7mHUy6mguwvhlZg+UyfD
OTVJmoAZOvC2GFoyps1PsjyEh//0sQx72aVCRDU5AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU1Gomae+ViiydCCSqT3EdK8JtKdowHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2RhMjJmNmVkLTkxYjUtNDk2YS05MmZjLTQ4NTE1N2Y1MDlmNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB//QUAwDQYJKoZIhvcNAQELBQADggEBAEVb9P+gn4EyHIqNE7FHti1q
mHuI0x49b0FJddTb95DVC0m8IU8i5YpPXrXJ2vlrS9wZzrjm3j59+YD/6N3//EeX
ELq4/qOKvBmZv6Nt9lEok7Nvm4su8+eFUHFPa7YVNLU8dAciTowCcQjM5gcXM/r9
L6PDFVHsjrsVx6UmxDXbbPGxOhmZoXkGfXb/3849sNXs6jZniY3ftUT7YUUF8n53
927JahtRBRO40gemzGKMCw8I5k6qw84GVSx7i2jhvnMaHmRUH7ZQN+A8jG7ZjBB2
FqE282v/1T73/Ff7nzIrO5RbNYJWXdtc0TY2R3a0jAfrpsM3rBpSO9KfXawQQYw=
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:11:10 2026 by rpki-client