Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c8581d8-86b8-4fdb-8c23-86cc55dea926.roa
File:                     6c8581d8-86b8-4fdb-8c23-86cc55dea926.roa (raw, json)
Hash identifier:          EvrQ2otH3BuMYMxsTpFmIwIRSEZA98i3Zxos70IjTFY=
Subject key identifier:   AA:FD:12:E9:FC:A6:67:CF:48:74:2F:46:18:4F:90:B5:1C:82:A9:5D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       631A939576938EB7363AC247AB2D5DEED4A0F1A0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c8581d8-86b8-4fdb-8c23-86cc55dea926.roa
Signing time:             Fri 17 Jul 2026 00:21:46 +0000
ROA not before:           Fri 17 Jul 2026 00:21:46 +0000
ROA not after:            Thu 15 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        16.75.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:1a:93:95:76:93:8e:b7:36:3a:c2:47:ab:2d:5d:ee:d4:a0:f1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 17 00:21:46 2026 GMT
            Not After : Oct 15 23:59:59 2026 GMT
        Subject: serialNumber=79612cecd6a60b7d87f485f749c6bef16e21e03d0a1fab0daecbf6a5cc9af27c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b5:15:68:13:7d:94:20:48:7b:ba:ed:70:bc:
                    5d:2c:8c:ef:bd:d5:b9:93:da:71:b3:e0:4e:0d:e5:
                    62:64:00:b6:90:b5:b7:07:e6:4a:e4:24:45:46:65:
                    58:20:31:82:f2:d4:5e:7c:57:70:e1:c3:f1:8c:f0:
                    7b:a5:55:97:bb:f8:92:9c:1f:19:4a:72:57:de:52:
                    03:5b:d8:17:df:40:75:95:70:2b:5a:23:80:63:2c:
                    73:28:57:32:96:54:18:c9:73:38:bc:3f:1f:9a:eb:
                    0d:5c:e6:ac:e7:bd:be:9c:d2:ad:b1:50:8e:cd:6d:
                    74:b2:e2:2e:dc:c5:9e:79:b2:5b:21:f5:3d:ff:1b:
                    5a:ef:65:7b:c3:6e:c7:74:2a:67:b3:11:7a:4e:85:
                    69:36:2d:b4:22:80:fe:ab:52:19:ec:a2:00:29:9b:
                    03:56:9e:07:de:79:18:73:71:67:37:37:18:0e:ef:
                    ac:48:2d:7d:c5:94:e7:cf:36:c3:5f:79:50:fc:3d:
                    ec:73:58:f3:2c:55:9f:9c:60:34:c5:c2:94:4d:6e:
                    de:0c:9c:1d:cc:b7:75:55:a2:ca:e0:49:2c:43:be:
                    41:c8:36:8e:4e:a1:2c:3f:67:87:1e:a6:01:a2:2f:
                    9f:e0:51:18:58:65:b7:26:96:ee:aa:09:d1:eb:31:
                    f2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:FD:12:E9:FC:A6:67:CF:48:74:2F:46:18:4F:90:B5:1C:82:A9:5D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c8581d8-86b8-4fdb-8c23-86cc55dea926.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.75.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         85:92:d9:7b:26:b5:c2:01:c3:b3:d6:28:0c:a3:fd:0b:8c:4e:
         87:78:94:76:60:7d:6b:12:e6:aa:aa:c4:d3:52:75:da:e4:fb:
         6e:c3:e0:b9:f8:3f:a3:37:df:32:fe:dd:b0:62:3a:36:be:20:
         e5:e8:05:4f:aa:8f:cd:a8:bf:e5:87:a4:99:68:27:5c:0c:d6:
         fd:40:0d:7c:e9:fe:0d:ab:b8:09:a0:75:8e:31:f7:23:4f:1b:
         8b:80:fc:8f:d7:68:a8:6e:d5:44:b0:13:1b:fd:a1:a7:d6:19:
         3b:60:5f:3b:87:90:62:a0:f1:8a:18:bd:24:23:88:06:c0:27:
         ef:8b:5f:e9:c5:a3:2e:e1:0e:fe:9e:27:8c:89:9e:fc:6f:ac:
         f4:63:93:d4:b1:cd:02:5b:58:02:99:c1:8d:78:37:fe:d3:4e:
         04:a1:ea:2d:4c:9a:d9:1f:5f:a6:9e:fa:f7:b0:81:90:ee:3c:
         b7:02:37:ff:52:e8:8b:31:de:4c:55:30:c3:22:77:b2:42:7b:
         d2:d8:5a:e8:a6:02:9f:6f:81:96:67:58:fb:67:9a:43:b8:0e:
         99:0c:4b:5b:fb:4e:b6:a5:ab:8f:3c:7b:fc:11:9a:a7:9f:5e:
         d0:78:80:ac:95:cf:67:fc:90:bc:3d:c8:72:ed:66:b9:e5:b2:
         ff:62:7d:a1
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUYxqTlXaTjrc2OsJHqy1d7tSg8aAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzE3MDAyMTQ2WhcNMjYxMDE1MjM1OTU5
WjB6MUkwRwYDVQQFE0A3OTYxMmNlY2Q2YTYwYjdkODdmNDg1Zjc0OWM2YmVmMTZl
MjFlMDNkMGExZmFiMGRhZWNiZjZhNWNjOWFmMjdjMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCrtRVoE32UIEh7uu1wvF0sjO+91bmT2nGz4E4N5WJkALaQ
tbcH5krkJEVGZVggMYLy1F58V3Dhw/GM8HulVZe7+JKcHxlKclfeUgNb2BffQHWV
cCtaI4BjLHMoVzKWVBjJczi8Px+a6w1c5qznvb6c0q2xUI7NbXSy4i7cxZ55slsh
9T3/G1rvZXvDbsd0KmezEXpOhWk2LbQigP6rUhnsogApmwNWngfeeRhzcWc3NxgO
76xILX3FlOfPNsNfeVD8PexzWPMsVZ+cYDTFwpRNbt4MnB3Mt3VVosrgSSxDvkHI
No5OoSw/Z4cepgGiL5/gURhYZbcmlu6qCdHrMfIVAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUqv0S6fymZ89IdC9GGE+QtRyCqV0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzZjODU4MWQ4LTg2YjgtNGZkYi04YzIzLTg2Y2M1NWRlYTkyNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAQSzANBgkqhkiG9w0BAQsFAAOCAQEAhZLZeya1wgHDs9YoDKP9C4xOh3iU
dmB9axLmqqrE01J12uT7bsPgufg/ozffMv7dsGI6Nr4g5egFT6qPzai/5YekmWgn
XAzW/UANfOn+Dau4CaB1jjH3I08bi4D8j9doqG7VRLATG/2hp9YZO2BfO4eQYqDx
ihi9JCOIBsAn74tf6cWjLuEO/p4njIme/G+s9GOT1LHNAltYApnBjXg3/tNOBKHq
LUya2R9fpp7697CBkO48twI3/1LoizHeTFUwwyJ3skJ70tha6KYCn2+BlmdY+2ea
Q7gOmQxLW/tOtqWrjzx7/BGap59e0HiArJXPZ/yQvD3Icu1mueWy/2J9oQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:32:37 2026 by rpki-client