Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e63b2280-ecf6-4452-8c83-edab89d5688b.roa
File:                     e63b2280-ecf6-4452-8c83-edab89d5688b.roa (raw, json)
Hash identifier:          NU3VyW68vwkTPl56GrxfGHFBWQteiUR31x93Vax7FOo=
Subject key identifier:   66:CE:2F:BD:88:F5:C7:D5:E4:EE:10:6A:29:EE:2A:92:5E:FA:8C:93
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       681E8A62F149EFF5FDBDFE9F41ACDD07F33396FF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e63b2280-ecf6-4452-8c83-edab89d5688b.roa
Signing time:             Sun 17 May 2026 00:30:50 +0000
ROA not before:           Sun 17 May 2026 00:30:50 +0000
ROA not after:            Sat 15 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fed:1000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:1e:8a:62:f1:49:ef:f5:fd:bd:fe:9f:41:ac:dd:07:f3:33:96:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 17 00:30:50 2026 GMT
            Not After : Aug 15 23:59:59 2026 GMT
        Subject: serialNumber=c734fbd40816b4da680556a2477f43d115793d13c91fae94914bda2d06aa5cb9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b1:3d:81:0d:49:02:08:6a:e4:c4:63:45:a1:
                    da:47:c8:d6:83:b5:3e:66:46:4c:80:64:25:34:fd:
                    52:9f:51:a9:d1:d5:68:f2:53:76:ce:ba:cd:10:62:
                    ee:b0:e4:66:d4:4e:31:4e:d6:ea:a3:ab:42:6f:04:
                    fd:f7:e1:0a:a2:98:40:a8:75:20:5a:85:a5:27:89:
                    87:6e:8a:6b:1e:5b:78:fd:bc:af:4b:12:06:b4:f4:
                    85:3a:a2:54:fa:6b:95:70:4a:bf:51:32:3e:b8:52:
                    10:3e:e5:56:01:db:4c:37:4c:34:38:f3:40:3c:ff:
                    27:72:72:e3:2d:24:d0:d7:2c:74:bc:ee:b3:a0:3f:
                    b9:27:00:d9:b1:4c:e1:0e:0d:b5:ba:d1:4c:c6:36:
                    29:56:fa:a0:d1:32:4d:f8:6a:ea:0f:b4:e9:59:ec:
                    52:27:5f:56:53:dd:09:ae:a8:11:25:d1:86:3c:06:
                    28:8a:4a:d8:47:4d:b5:0a:0e:72:f4:b7:3f:b5:98:
                    12:18:1e:8e:79:67:ea:ce:e1:bc:63:ba:78:83:8a:
                    b0:0b:bd:9f:9a:22:b7:56:a9:7d:ee:64:1c:02:e0:
                    2e:a7:09:59:c6:d2:33:cb:5c:5e:38:70:96:b5:45:
                    bb:fc:44:0f:6a:f9:79:cf:62:d1:ac:84:30:76:99:
                    74:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:CE:2F:BD:88:F5:C7:D5:E4:EE:10:6A:29:EE:2A:92:5E:FA:8C:93
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e63b2280-ecf6-4452-8c83-edab89d5688b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fed:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         33:36:a7:86:23:04:a2:6e:6d:f4:b8:da:98:08:57:ac:2b:a9:
         bb:2c:11:1c:0d:cd:b0:63:3b:49:1a:3d:c8:ab:96:7a:9d:4e:
         27:bd:93:90:8d:ed:52:94:f9:cd:b1:a4:3e:6f:5c:db:a1:45:
         34:a5:b3:0f:c9:42:36:a1:45:04:7e:06:14:64:be:6f:3b:fd:
         99:d1:46:af:cd:eb:92:0c:3e:86:11:70:a1:21:90:1a:32:57:
         c8:46:7e:5e:d7:98:b7:59:f9:46:b0:ac:f9:42:c1:e3:81:5e:
         40:10:c8:98:5b:c7:cb:ce:dd:4a:18:0f:1b:9a:36:17:16:2a:
         7f:b6:74:77:7a:4e:7b:93:bf:7a:20:09:54:ff:31:53:5a:02:
         e5:ee:07:54:4b:55:58:6a:c1:e6:a7:59:32:46:87:c8:ea:02:
         8d:30:56:79:72:d1:fb:3a:a4:e7:a9:5c:f9:7a:ca:53:9a:96:
         57:75:13:71:86:11:76:fc:d7:99:0d:5e:e9:9c:18:eb:b5:c7:
         ef:0b:98:0a:63:79:25:ca:d6:c4:af:3b:ec:3d:d6:10:b8:9c:
         d4:e7:dd:13:e9:26:14:2b:b5:c9:5d:b5:6a:a9:87:b2:79:43:
         5c:85:5e:b9:95:68:52:88:06:79:b8:45:b6:d0:be:f1:70:66:
         3a:5d:35:48
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUaB6KYvFJ7/X9vf6fQazdB/Mzlv8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE3MDAzMDUwWhcNMjYwODE1MjM1OTU5
WjB6MUkwRwYDVQQFE0BjNzM0ZmJkNDA4MTZiNGRhNjgwNTU2YTI0NzdmNDNkMTE1
NzkzZDEzYzkxZmFlOTQ5MTRiZGEyZDA2YWE1Y2I5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDGsT2BDUkCCGrkxGNFodpHyNaDtT5mRkyAZCU0/VKfUanR
1WjyU3bOus0QYu6w5GbUTjFO1uqjq0JvBP334QqimECodSBahaUniYduimseW3j9
vK9LEga09IU6olT6a5VwSr9RMj64UhA+5VYB20w3TDQ480A8/ydycuMtJNDXLHS8
7rOgP7knANmxTOEODbW60UzGNilW+qDRMk34auoPtOlZ7FInX1ZT3QmuqBEl0YY8
BiiKSthHTbUKDnL0tz+1mBIYHo55Z+rO4bxjuniDirALvZ+aIrdWqX3uZBwC4C6n
CVnG0jPLXF44cJa1Rbv8RA9q+XnPYtGshDB2mXRNAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUZs4vvYj1x9Xk7hBqKe4qkl76jJMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2U2M2IyMjgwLWVjZjYtNDQ1Mi04YzgzLWVkYWI4OWQ1Njg4Yi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB/tEDANBgkqhkiG9w0BAQsFAAOCAQEAMzanhiMEom5t9LjamAhXrCup
uywRHA3NsGM7SRo9yKuWep1OJ72TkI3tUpT5zbGkPm9c26FFNKWzD8lCNqFFBH4G
FGS+bzv9mdFGr83rkgw+hhFwoSGQGjJXyEZ+XteYt1n5RrCs+ULB44FeQBDImFvH
y87dShgPG5o2FxYqf7Z0d3pOe5O/eiAJVP8xU1oC5e4HVEtVWGrB5qdZMkaHyOoC
jTBWeXLR+zqk56lc+XrKU5qWV3UTcYYRdvzXmQ1e6ZwY67XH7wuYCmN5JcrWxK87
7D3WELic1OfdE+kmFCu1yV21aqmHsnlDXIVeuZVoUogGebhFttC+8XBmOl01SA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:11:01 2026 by rpki-client