Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6514ce9-596d-4d54-9813-69d4702c8a11.roa
File:                     f6514ce9-596d-4d54-9813-69d4702c8a11.roa (raw, json)
Hash identifier:          oAtT01XUUVwZZL/9voRM1rUzMUvJ0vhgHTAKa1KD+5U=
Subject key identifier:   CC:97:15:18:3E:87:B6:59:F4:A6:D6:6A:22:66:FD:92:EB:A7:57:17
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6FF3BAC2B5996FD1AE8ECC87E6D9EA06E450A605
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6514ce9-596d-4d54-9813-69d4702c8a11.roa
Signing time:             Tue 12 May 2026 01:20:55 +0000
ROA not before:           Tue 12 May 2026 01:20:55 +0000
ROA not after:            Mon 10 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff7:5000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:f3:ba:c2:b5:99:6f:d1:ae:8e:cc:87:e6:d9:ea:06:e4:50:a6:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 12 01:20:55 2026 GMT
            Not After : Aug 10 23:59:59 2026 GMT
        Subject: serialNumber=b5a52212d6c4684d58068ab19d78f5c7362c19b3825e9f05a3b4bf66aba771e4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b4:f7:06:d5:b2:7b:f5:02:2a:80:77:1b:07:
                    a8:ce:4d:ea:f7:3c:e8:ac:98:0a:e0:e5:dc:b6:37:
                    80:34:1c:7e:34:5b:26:de:b3:d7:4d:2a:b0:18:21:
                    bb:13:54:c2:2b:68:d7:6b:9a:9a:c0:6a:7f:5b:de:
                    46:e7:99:02:f6:ee:2c:d7:1e:89:60:a4:e4:de:28:
                    e0:2c:14:4f:ef:65:01:5c:e7:0c:b6:b4:4e:3b:e1:
                    0e:ae:33:30:d0:e6:6a:c6:00:ad:5c:68:50:b7:54:
                    00:09:96:05:e6:26:63:a3:28:68:8e:9d:cf:9c:7e:
                    88:49:29:23:6c:2c:1d:ee:ec:fa:71:e3:20:28:af:
                    7f:ac:86:22:7f:63:78:6a:84:73:e0:3b:d9:43:76:
                    68:66:e7:45:a2:64:7f:bf:ad:71:82:a3:d9:02:79:
                    a4:77:40:ec:11:e5:f6:72:55:1c:51:e8:4c:f1:c0:
                    d5:4d:d4:29:be:c5:6e:6f:88:92:50:5a:39:09:55:
                    de:0c:78:b9:98:38:cc:b5:13:4e:b6:ec:64:56:f4:
                    94:9f:d4:d5:df:56:f0:d3:bd:dd:65:45:c6:92:a7:
                    23:67:c1:4b:ee:a5:22:1f:40:7e:f5:a5:14:22:f2:
                    25:e5:81:f8:6e:2b:ae:c9:1a:07:7d:1d:72:de:d6:
                    cc:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:97:15:18:3E:87:B6:59:F4:A6:D6:6A:22:66:FD:92:EB:A7:57:17
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6514ce9-596d-4d54-9813-69d4702c8a11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff7:5000::/40

    Signature Algorithm: sha256WithRSAEncryption
         bf:c1:4f:48:a7:9f:dc:cc:53:e9:e2:83:4d:f2:92:d1:4c:70:
         27:3e:6d:f8:b8:31:02:99:76:db:f8:69:d2:41:1a:fc:71:de:
         bc:1b:ed:04:17:3f:68:45:46:a5:c6:a8:49:17:7d:cd:b4:03:
         23:53:ca:ee:18:d8:c5:42:be:54:1d:03:49:62:cd:b5:8d:2d:
         cb:d5:a8:6c:95:b1:a5:a9:f4:c6:3b:3a:e1:da:87:fb:92:f5:
         79:a1:04:c0:64:78:a6:36:af:60:39:2e:44:ee:97:ae:fe:7b:
         3c:ef:f3:41:46:ed:68:d7:3c:17:41:24:0b:0c:b4:76:9c:df:
         a4:1e:1e:53:29:c2:6f:dc:1e:aa:13:65:dd:ac:df:2f:95:92:
         03:ba:2d:df:07:28:c2:d8:0d:23:10:df:bb:62:f3:d1:0f:31:
         70:a2:f5:f3:1a:05:fe:36:5d:8a:c3:cf:5b:dd:81:bf:9f:ba:
         5a:ae:93:c2:2e:87:49:66:7d:ac:88:a7:cc:28:21:1f:be:48:
         2d:44:de:b6:dc:07:cb:2f:ca:bc:3c:70:c9:e3:c5:5b:f7:a5:
         43:bc:9d:9c:f6:21:e1:45:17:14:0d:30:38:b9:fd:d2:a9:be:
         1e:44:a6:25:f9:6e:6b:06:af:b5:6b:b4:30:90:16:8b:33:06:
         fb:e3:ce:b5
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUb/O6wrWZb9GujsyH5tnqBuRQpgUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTEyMDEyMDU1WhcNMjYwODEwMjM1OTU5
WjB6MUkwRwYDVQQFE0BiNWE1MjIxMmQ2YzQ2ODRkNTgwNjhhYjE5ZDc4ZjVjNzM2
MmMxOWIzODI1ZTlmMDVhM2I0YmY2NmFiYTc3MWU0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDHtPcG1bJ79QIqgHcbB6jOTer3POismArg5dy2N4A0HH40
Wybes9dNKrAYIbsTVMIraNdrmprAan9b3kbnmQL27izXHolgpOTeKOAsFE/vZQFc
5wy2tE474Q6uMzDQ5mrGAK1caFC3VAAJlgXmJmOjKGiOnc+cfohJKSNsLB3u7Ppx
4yAor3+shiJ/Y3hqhHPgO9lDdmhm50WiZH+/rXGCo9kCeaR3QOwR5fZyVRxR6Ezx
wNVN1Cm+xW5viJJQWjkJVd4MeLmYOMy1E0627GRW9JSf1NXfVvDTvd1lRcaSpyNn
wUvupSIfQH71pRQi8iXlgfhuK67JGgd9HXLe1sy1AgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUzJcVGD6Htln0ptZqImb9kuunVxcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2Y2NTE0Y2U5LTU5NmQtNGQ1NC05ODEzLTY5ZDQ3MDJjOGExMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB/3UDANBgkqhkiG9w0BAQsFAAOCAQEAv8FPSKef3MxT6eKDTfKS0Uxw
Jz5t+LgxApl22/hp0kEa/HHevBvtBBc/aEVGpcaoSRd9zbQDI1PK7hjYxUK+VB0D
SWLNtY0ty9WobJWxpan0xjs64dqH+5L1eaEEwGR4pjavYDkuRO6Xrv57PO/zQUbt
aNc8F0EkCwy0dpzfpB4eUynCb9weqhNl3azfL5WSA7ot3wcowtgNIxDfu2Lz0Q8x
cKL18xoF/jZdisPPW92Bv5+6Wq6Twi6HSWZ9rIinzCghH75ILUTettwHyy/KvDxw
yePFW/elQ7ydnPYh4UUXFA0wOLn90qm+HkSmJfluawavtWu0MJAWizMG++POtQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:47:12 2026 by rpki-client