Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e867a4f3-7521-4397-9b70-b2828d71f600.roa
File:                     e867a4f3-7521-4397-9b70-b2828d71f600.roa (raw, json)
Hash identifier:          UdrbG7f/0p/3tgZ+t4KR01FQ4EBUIuLEc90hh8JMa9E=
Subject key identifier:   27:E3:5E:A3:1F:1A:AB:0B:C5:96:56:51:44:60:4C:EA:65:D6:51:D1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6A2D0DA9A47D1D6C2C4FAF1A43DAB5C1D3EBF023
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e867a4f3-7521-4397-9b70-b2828d71f600.roa
Signing time:             Tue 19 May 2026 00:21:05 +0000
ROA not before:           Tue 19 May 2026 00:21:05 +0000
ROA not after:            Mon 17 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f26:c800::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:2d:0d:a9:a4:7d:1d:6c:2c:4f:af:1a:43:da:b5:c1:d3:eb:f0:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 19 00:21:05 2026 GMT
            Not After : Aug 17 23:59:59 2026 GMT
        Subject: serialNumber=2a24896e702af3a36fe45e36c633cfd5e0b5568e4aa7197493e36054c24e6034, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:bd:66:9e:5e:dc:9e:5c:a4:d2:64:49:06:42:
                    d5:78:ee:ae:f2:79:f9:fc:45:c0:70:6d:31:6c:84:
                    39:81:2a:c0:e5:c2:d3:e5:2b:7b:9c:2d:98:1d:36:
                    75:6c:de:fc:c3:ff:b4:9c:ad:00:07:4b:62:22:97:
                    d4:89:54:8c:13:05:29:76:92:db:31:d7:bd:38:78:
                    75:03:87:62:67:be:e9:10:73:ff:b3:54:12:0d:32:
                    be:57:81:4d:85:e2:e4:b8:5a:ff:7b:94:42:6b:aa:
                    10:f0:93:82:a9:f1:28:b1:16:66:0e:5a:c7:f6:f3:
                    c9:21:0a:8c:c9:3c:27:50:30:71:a8:e6:8e:3e:21:
                    41:3c:62:bd:a1:34:4c:c7:b9:03:d9:59:1a:70:90:
                    0e:9c:51:da:48:bc:55:53:21:13:8e:29:39:27:15:
                    7f:f2:67:bd:aa:e6:bc:87:6a:66:3d:7d:64:a8:88:
                    e8:f2:06:0a:c8:2f:14:d0:14:b2:1d:cd:be:42:7e:
                    d6:01:84:ef:72:38:23:da:3d:94:21:6f:99:db:ba:
                    f8:72:fb:ed:e1:53:b4:d1:42:33:12:fe:71:72:bd:
                    d2:3f:87:25:4e:e0:5b:3f:08:c5:3f:65:ac:d0:72:
                    1d:a9:51:bd:22:0b:d9:4f:f6:8a:10:ea:26:65:c3:
                    37:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:E3:5E:A3:1F:1A:AB:0B:C5:96:56:51:44:60:4C:EA:65:D6:51:D1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e867a4f3-7521-4397-9b70-b2828d71f600.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f26:c800::/37

    Signature Algorithm: sha256WithRSAEncryption
         2a:c0:80:12:17:94:00:26:fa:c4:1f:61:a7:45:b1:59:39:0c:
         9e:c6:ea:b8:ed:bd:be:20:2d:55:c9:6d:11:86:99:3b:9f:1c:
         e9:dc:c9:e3:81:be:0d:6e:d3:17:32:6d:6f:96:9c:8e:88:88:
         0a:16:c8:f7:e3:e3:2c:a5:1f:99:1e:5c:6e:a9:dd:5f:1b:76:
         67:f8:dd:e6:7c:3a:90:7b:38:fa:24:a1:52:a3:63:b6:7e:e3:
         de:33:86:8f:94:6f:61:a6:5f:0e:e0:ad:53:0d:65:0d:d5:0c:
         dc:7c:5f:55:ce:e2:59:18:15:59:26:b4:c1:09:50:9e:f1:b5:
         9b:34:00:32:4b:2e:80:e4:2e:f1:e3:84:b4:91:64:23:ef:7a:
         71:88:f6:c6:83:60:76:01:50:cd:61:f9:03:3f:c3:36:7b:5f:
         31:d3:9f:03:d6:1c:38:f5:45:fb:fe:c9:b6:b9:b5:ec:7d:df:
         80:50:ae:40:92:26:ca:1d:d6:3a:28:46:87:f5:f2:b2:48:88:
         e2:5b:d0:df:95:c2:e0:24:9f:b0:3c:56:7e:07:87:1a:e1:7f:
         13:88:36:cb:41:2a:df:e4:1f:8b:2b:52:40:92:26:e6:02:94:
         67:fc:ad:20:0c:20:fe:d2:a0:26:7d:71:6b:cf:4f:29:b6:d1:
         7d:a8:f5:19
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUai0NqaR9HWwsT68aQ9q1wdPr8CMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE5MDAyMTA1WhcNMjYwODE3MjM1OTU5
WjB6MUkwRwYDVQQFE0AyYTI0ODk2ZTcwMmFmM2EzNmZlNDVlMzZjNjMzY2ZkNWUw
YjU1NjhlNGFhNzE5NzQ5M2UzNjA1NGMyNGU2MDM0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCxvWaeXtyeXKTSZEkGQtV47q7yefn8RcBwbTFshDmBKsDl
wtPlK3ucLZgdNnVs3vzD/7ScrQAHS2Iil9SJVIwTBSl2ktsx1704eHUDh2JnvukQ
c/+zVBINMr5XgU2F4uS4Wv97lEJrqhDwk4Kp8SixFmYOWsf288khCozJPCdQMHGo
5o4+IUE8Yr2hNEzHuQPZWRpwkA6cUdpIvFVTIROOKTknFX/yZ72q5ryHamY9fWSo
iOjyBgrILxTQFLIdzb5CftYBhO9yOCPaPZQhb5nbuvhy++3hU7TRQjMS/nFyvdI/
hyVO4Fs/CMU/ZazQch2pUb0iC9lP9ooQ6iZlwzelAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUJ+Neox8aqwvFllZRRGBM6mXWUdEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2U4NjdhNGYzLTc1MjEtNDM5Ny05YjcwLWIyODI4ZDcxZjYwMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgMmAB8myDANBgkqhkiG9w0BAQsFAAOCAQEAKsCAEheUACb6xB9hp0WxWTkM
nsbquO29viAtVcltEYaZO58c6dzJ44G+DW7TFzJtb5acjoiIChbI9+PjLKUfmR5c
bqndXxt2Z/jd5nw6kHs4+iShUqNjtn7j3jOGj5RvYaZfDuCtUw1lDdUM3HxfVc7i
WRgVWSa0wQlQnvG1mzQAMksugOQu8eOEtJFkI+96cYj2xoNgdgFQzWH5Az/DNntf
MdOfA9YcOPVF+/7Jtrm17H3fgFCuQJImyh3WOihGh/XyskiI4lvQ35XC4CSfsDxW
fgeHGuF/E4g2y0Eq3+QfiytSQJIm5gKUZ/ytIAwg/tKgJn1xa89PKbbRfaj1GQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:52:16 2026 by rpki-client