Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e815756-fd4f-4fa2-8de2-0318f90484dc.roa
File:                     6e815756-fd4f-4fa2-8de2-0318f90484dc.roa (raw, json)
Hash identifier:          Gs5aIV9+w0AjTGyokh5usdkJRZrpzA9lk+6zr6poM3g=
Subject key identifier:   04:EB:F0:9D:94:72:1D:3B:37:77:05:EF:CE:11:87:E2:63:2A:8A:BE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       59EEA9EE42065FBA3F21CA204CE3170A0F8863EC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e815756-fd4f-4fa2-8de2-0318f90484dc.roa
Signing time:             Fri 01 May 2026 00:50:32 +0000
ROA not before:           Fri 01 May 2026 00:50:32 +0000
ROA not after:            Thu 30 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ffd:82be::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:ee:a9:ee:42:06:5f:ba:3f:21:ca:20:4c:e3:17:0a:0f:88:63:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  1 00:50:32 2026 GMT
            Not After : Jul 30 23:59:59 2026 GMT
        Subject: serialNumber=2839aae4f555c95588a6b59700a011b7fa55d3dc48d6640f932699ec62b062a5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:05:dd:0b:68:d9:02:41:8f:cc:bc:7c:e4:4c:
                    a9:54:37:97:01:a6:68:7e:9f:9f:51:03:13:a9:56:
                    95:7e:a4:6a:77:39:06:3d:8f:c9:ed:d8:1e:36:75:
                    06:34:8f:f9:a4:38:b0:b1:3d:01:c0:c2:d7:69:e8:
                    2d:ac:b5:42:16:00:b2:6f:43:81:2c:5e:e8:bc:1a:
                    fd:60:d2:15:43:76:52:0c:74:20:75:a6:b1:02:be:
                    e4:07:4c:a6:63:ad:87:8b:39:8c:94:00:02:a8:60:
                    8c:bb:7e:6e:f8:48:cc:15:88:47:55:47:03:f2:9f:
                    af:4c:50:73:88:6a:26:ab:d7:3c:a9:3e:86:c8:f1:
                    a1:45:55:18:d4:77:d4:bb:42:01:1e:18:aa:77:73:
                    af:ba:a3:c9:44:59:39:63:05:6c:16:a0:0a:d5:2f:
                    3b:74:30:4c:2c:b5:d5:0c:67:be:05:4e:9f:10:38:
                    09:b3:e2:94:5d:39:72:3c:77:3e:13:a1:4b:f0:78:
                    eb:bc:49:a0:3e:fd:01:f1:21:6c:a3:77:76:42:6c:
                    3a:04:16:75:9c:73:a7:4d:f9:1e:d5:53:63:a2:98:
                    03:eb:86:79:25:0f:3f:ef:aa:08:8a:72:0c:f9:0a:
                    13:25:d1:33:97:64:57:79:fd:82:98:0d:89:51:7e:
                    38:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:EB:F0:9D:94:72:1D:3B:37:77:05:EF:CE:11:87:E2:63:2A:8A:BE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e815756-fd4f-4fa2-8de2-0318f90484dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ffd:82be::/48

    Signature Algorithm: sha256WithRSAEncryption
         ba:e5:7e:68:bb:37:23:e4:52:2c:a8:f9:83:9b:dc:73:d8:ba:
         57:54:51:85:6b:bf:bc:78:98:71:dc:23:ef:7d:85:17:d8:cc:
         4b:5a:a6:9f:90:cc:0d:01:50:f2:97:44:c7:7c:91:e5:dd:f8:
         b6:22:9b:4f:de:5e:f2:19:c4:74:1a:df:de:4d:7c:9c:06:6a:
         fb:5d:28:0c:a9:cb:43:56:76:cd:a0:95:eb:78:0e:be:78:07:
         1a:1e:90:72:9c:d0:a0:9c:b8:16:5a:bf:64:d4:19:d1:82:19:
         47:f6:f1:34:b9:4a:c3:a4:64:0e:d0:17:3d:f3:df:59:c5:04:
         27:c6:10:36:d1:23:c6:75:8f:b0:aa:2d:5c:bd:2e:f6:7d:37:
         be:e8:19:78:d4:43:42:a3:01:47:1f:68:ea:1a:02:cb:fd:33:
         c5:06:dc:a4:0a:1f:2d:74:ac:6b:91:bd:44:2a:47:7a:b7:f3:
         ac:ae:23:ea:87:9b:13:6c:df:43:76:ba:33:85:e0:75:e4:de:
         b6:b0:84:1c:f4:75:05:e6:b9:1d:e3:f9:af:1a:63:28:a3:c6:
         62:41:a8:00:42:c0:ad:87:73:5e:9a:3f:04:7c:27:4a:18:ad:
         b0:fd:7d:56:ed:44:cd:cd:80:c2:4b:7b:72:76:71:88:5f:14:
         93:2a:fd:77
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUWe6p7kIGX7o/IcogTOMXCg+IY+wwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTAxMDA1MDMyWhcNMjYwNzMwMjM1OTU5
WjB6MUkwRwYDVQQFE0AyODM5YWFlNGY1NTVjOTU1ODhhNmI1OTcwMGEwMTFiN2Zh
NTVkM2RjNDhkNjY0MGY5MzI2OTllYzYyYjA2MmE1MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC+Bd0LaNkCQY/MvHzkTKlUN5cBpmh+n59RAxOpVpV+pGp3
OQY9j8nt2B42dQY0j/mkOLCxPQHAwtdp6C2stUIWALJvQ4EsXui8Gv1g0hVDdlIM
dCB1prECvuQHTKZjrYeLOYyUAAKoYIy7fm74SMwViEdVRwPyn69MUHOIaiar1zyp
PobI8aFFVRjUd9S7QgEeGKp3c6+6o8lEWTljBWwWoArVLzt0MEwstdUMZ74FTp8Q
OAmz4pRdOXI8dz4ToUvweOu8SaA+/QHxIWyjd3ZCbDoEFnWcc6dN+R7VU2OimAPr
hnklDz/vqgiKcgz5ChMl0TOXZFd5/YKYDYlRfjgtAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUBOvwnZRyHTs3dwXvzhGH4mMqir4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzZlODE1NzU2LWZkNGYtNGZhMi04ZGUyLTAzMThmOTA0ODRkYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB/9gr4wDQYJKoZIhvcNAQELBQADggEBALrlfmi7NyPkUiyo+YOb3HPY
uldUUYVrv7x4mHHcI+99hRfYzEtapp+QzA0BUPKXRMd8keXd+LYim0/eXvIZxHQa
395NfJwGavtdKAypy0NWds2glet4Dr54BxoekHKc0KCcuBZav2TUGdGCGUf28TS5
SsOkZA7QFz3z31nFBCfGEDbRI8Z1j7CqLVy9LvZ9N77oGXjUQ0KjAUcfaOoaAsv9
M8UG3KQKHy10rGuRvUQqR3q386yuI+qHmxNs30N2ujOF4HXk3rawhBz0dQXmuR3j
+a8aYyijxmJBqABCwK2Hc16aPwR8J0oYrbD9fVbtRM3NgMJLe3J2cYhfFJMq/Xc=
-----END CERTIFICATE-----
Generated at Wed May 13 00:19:23 2026 by rpki-client