Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e1c8c053-5660-4b24-8aaa-28cebd569f74.roa
File:                     e1c8c053-5660-4b24-8aaa-28cebd569f74.roa (raw, json)
Hash identifier:          Mr2DtmH6Q+/t2t4FNNTnXOmdNAqyz77pwzAfAG8zmG0=
Subject key identifier:   26:7E:89:25:02:58:84:67:28:EC:94:E1:24:4D:72:E1:10:AB:98:54
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3F3DFB802615B6561C9553CFF78E71FA4B7568C5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e1c8c053-5660-4b24-8aaa-28cebd569f74.roa
Signing time:             Fri 23 Oct 2026 01:51:17 +0000
ROA not before:           Fri 23 Oct 2026 01:51:17 +0000
ROA not after:            Thu 21 Jan 2027 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1ff5:8000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:3d:fb:80:26:15:b6:56:1c:95:53:cf:f7:8e:71:fa:4b:75:68:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 23 01:51:17 2026 GMT
            Not After : Jan 21 23:59:59 2027 GMT
        Subject: serialNumber=cc0a60b9f7ee7c10a1b40d1d3fca4dc237ca57a22487172790d9a66cb9e97065, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b3:8d:cf:ca:70:7b:52:a0:fa:ea:d8:67:78:
                    40:6e:b5:1b:e6:c4:af:48:66:8d:7e:05:75:b5:92:
                    2a:cf:b0:4c:9e:a7:23:f5:f5:25:41:84:ce:a3:56:
                    18:a8:09:8d:8b:3b:0f:1d:d9:3d:66:ba:72:86:34:
                    5a:40:86:a0:63:ee:bf:a8:f1:db:75:94:c3:88:42:
                    7c:a1:82:9d:75:28:1c:9a:1b:cc:17:e2:4e:24:74:
                    28:86:28:06:b2:7b:d2:ca:23:61:25:90:ff:17:ae:
                    74:97:b9:aa:4b:de:2e:48:a8:c0:c7:86:c2:9f:08:
                    a4:ac:24:16:43:98:c6:80:b2:8e:37:ef:d5:e9:ca:
                    87:4b:58:3c:17:81:bf:ac:c5:66:a1:a2:70:53:32:
                    e2:53:b5:1c:f6:bf:18:6b:c6:e3:10:99:24:d7:0c:
                    f8:eb:28:cd:7f:59:d3:09:7f:3a:7e:87:39:49:48:
                    b8:7b:04:b1:ab:43:11:31:db:6e:c2:d4:a4:06:d7:
                    00:2c:ba:01:1a:f7:c7:64:4d:20:e8:9c:d6:a6:e7:
                    56:75:45:15:93:68:81:41:8a:df:45:17:5b:1d:4f:
                    c0:48:21:39:48:04:34:ee:12:88:ef:3b:65:84:a4:
                    72:82:2e:69:19:0c:96:6c:00:66:1c:a4:fe:49:a1:
                    12:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:7E:89:25:02:58:84:67:28:EC:94:E1:24:4D:72:E1:10:AB:98:54
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e1c8c053-5660-4b24-8aaa-28cebd569f74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff5:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         2a:18:aa:9d:0b:34:cf:82:79:b9:d8:26:1b:8b:d0:e5:0a:6a:
         2a:61:15:20:e6:91:ba:20:75:29:eb:b6:1e:ff:67:e8:69:b9:
         95:6d:8d:4d:a9:13:05:36:ab:61:f7:b4:00:01:50:4a:fd:36:
         c1:f2:a0:06:a2:37:dd:9e:9f:31:7f:fb:64:19:d6:42:85:83:
         a6:ea:10:a5:b7:0f:fd:ab:22:13:8f:d3:6e:3f:02:66:f6:ae:
         60:2b:63:a7:bf:31:15:5f:63:40:74:87:6c:05:60:5a:1e:cb:
         bd:44:13:33:bb:2a:87:b9:b3:89:9b:10:a0:63:af:5f:28:b7:
         54:54:ad:4d:14:c5:62:28:32:99:3f:d4:bd:7b:fd:59:c1:ae:
         f3:a2:a3:e0:bc:69:0c:27:4d:a5:1d:5f:d6:af:a2:c7:33:e7:
         a5:a3:ad:d4:34:30:87:cc:d0:38:bc:2c:5a:7f:b6:49:32:56:
         4a:95:b2:7b:ee:71:f1:bf:f8:32:cb:36:ef:23:d6:0d:70:24:
         0b:8b:e1:b1:ae:a0:20:b3:a8:99:17:95:70:50:3c:23:a6:01:
         eb:9c:5d:f3:76:47:d8:38:1a:75:9e:d0:dc:29:df:28:2e:68:
         46:50:95:d7:f5:bc:50:9f:54:b3:d2:be:b9:90:07:47:2c:d1:
         dc:9f:e2:a8
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUPz37gCYVtlYclVPP945x+kt1aMUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIzMDE1MTE3WhcNMjcwMTIxMjM1OTU5
WjB6MUkwRwYDVQQFE0BjYzBhNjBiOWY3ZWU3YzEwYTFiNDBkMWQzZmNhNGRjMjM3
Y2E1N2EyMjQ4NzE3Mjc5MGQ5YTY2Y2I5ZTk3MDY1MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDAs43PynB7UqD66thneEButRvmxK9IZo1+BXW1kirPsEye
pyP19SVBhM6jVhioCY2LOw8d2T1munKGNFpAhqBj7r+o8dt1lMOIQnyhgp11KBya
G8wX4k4kdCiGKAaye9LKI2ElkP8XrnSXuapL3i5IqMDHhsKfCKSsJBZDmMaAso43
79XpyodLWDwXgb+sxWahonBTMuJTtRz2vxhrxuMQmSTXDPjrKM1/WdMJfzp+hzlJ
SLh7BLGrQxEx227C1KQG1wAsugEa98dkTSDonNam51Z1RRWTaIFBit9FF1sdT8BI
ITlIBDTuEojvO2WEpHKCLmkZDJZsAGYcpP5JoRIJAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUJn6JJQJYhGco7JThJE1y4RCrmFQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2UxYzhjMDUzLTU2NjAtNGIyNC04YWFhLTI4Y2ViZDU2OWY3NC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB/1gDANBgkqhkiG9w0BAQsFAAOCAQEAKhiqnQs0z4J5udgmG4vQ5Qpq
KmEVIOaRuiB1Keu2Hv9n6Gm5lW2NTakTBTarYfe0AAFQSv02wfKgBqI33Z6fMX/7
ZBnWQoWDpuoQpbcP/asiE4/Tbj8CZvauYCtjp78xFV9jQHSHbAVgWh7LvUQTM7sq
h7mziZsQoGOvXyi3VFStTRTFYigymT/UvXv9WcGu86Kj4LxpDCdNpR1f1q+ixzPn
paOt1DQwh8zQOLwsWn+2STJWSpWye+5x8b/4Mss27yPWDXAkC4vhsa6gILOomReV
cFA8I6YB65xd83ZH2DgadZ7Q3CnfKC5oRlCV1/W8UJ9Us9K+uZAHRyzR3J/iqA==
-----END CERTIFICATE-----
Generated at Thu Nov 5 07:09:02 2026 by rpki-client