Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e815756-fd4f-4fa2-8de2-0318f90484dc.roa
File:                     6e815756-fd4f-4fa2-8de2-0318f90484dc.roa (raw, json)
Hash identifier:          z/6Cru7ZYelbVnT1uGiPmkm92vI9q6EDfPqLoDDosYc=
Subject key identifier:   DB:D3:A7:58:8C:39:AB:FA:0B:F5:BD:FE:DA:78:1C:F5:6B:33:C4:C6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       01063AEB8BCC1D7BCCED36E4C54BE17B14FE9792
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e815756-fd4f-4fa2-8de2-0318f90484dc.roa
Signing time:             Mon 20 Jul 2026 00:42:07 +0000
ROA not before:           Mon 20 Jul 2026 00:42:07 +0000
ROA not after:            Sun 18 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ffd:82be::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:06:3a:eb:8b:cc:1d:7b:cc:ed:36:e4:c5:4b:e1:7b:14:fe:97:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 20 00:42:07 2026 GMT
            Not After : Oct 18 23:59:59 2026 GMT
        Subject: serialNumber=c0185fe21dbb186e6dc336b447da0f1b47693f3ca87a6f987cea3148b1b71622, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:5c:43:f1:cb:37:22:7d:a0:ad:73:ef:ac:cb:
                    52:3e:c5:03:a7:27:1c:d2:85:c9:b5:15:07:6a:96:
                    3f:b3:39:e5:ad:27:1e:e8:1a:29:45:e0:35:90:b0:
                    c3:2d:bf:1e:a7:43:6f:53:0d:cc:cc:ef:64:c4:5d:
                    49:14:4c:06:e0:5f:72:f4:0f:66:a8:fc:da:d6:ac:
                    e8:36:ac:67:5c:7f:c9:02:e6:7e:ff:9d:29:66:fc:
                    5e:a9:13:1f:b8:dd:7a:a3:e6:b4:2d:15:a0:fc:33:
                    03:d1:96:e8:25:58:e0:24:f6:61:07:ec:b5:7f:b5:
                    b1:ad:7f:83:a4:83:9c:4f:ad:44:70:8d:0f:30:86:
                    b8:b4:7e:7f:14:c8:02:25:30:26:48:16:f6:7c:b1:
                    17:6b:e1:d5:6d:80:51:85:66:99:97:ca:98:d6:ec:
                    02:f8:60:60:1e:24:55:7b:e3:55:74:52:e2:89:48:
                    b0:d2:63:01:8d:02:97:07:a1:c6:7a:a1:bd:fb:97:
                    7f:25:d0:73:b1:84:88:af:6b:e3:27:15:c4:bc:48:
                    4c:bb:e8:01:8a:66:80:42:42:b7:18:dc:9c:c8:7d:
                    64:e2:9d:10:1b:7c:72:64:2f:1c:ef:46:9b:a7:b3:
                    0d:e8:aa:7f:83:f5:f8:66:f8:6a:8e:fb:e7:0b:f4:
                    a1:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:D3:A7:58:8C:39:AB:FA:0B:F5:BD:FE:DA:78:1C:F5:6B:33:C4:C6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e815756-fd4f-4fa2-8de2-0318f90484dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ffd:82be::/48

    Signature Algorithm: sha256WithRSAEncryption
         c4:87:c8:90:a1:a0:c1:8e:76:54:3d:15:a0:68:0e:fa:af:8d:
         73:a4:14:93:e2:37:fb:41:cf:d0:6e:3b:c7:dc:d4:16:44:b9:
         35:32:de:31:73:fa:de:92:10:a8:90:8d:80:e8:8c:fc:74:93:
         1e:da:b5:9a:1a:f2:f3:be:a5:ba:e8:b1:80:ec:d1:23:d0:01:
         f1:ec:2f:7a:7f:37:05:13:ca:ca:6b:1a:13:04:0a:32:7d:39:
         48:e9:61:0f:62:a9:35:d8:4e:de:09:6a:a0:32:aa:8a:b2:57:
         bf:e7:11:53:54:b1:20:7d:3a:42:a3:f7:f2:c7:41:3a:87:b2:
         18:3a:5e:d1:3f:92:95:8d:74:5c:40:66:84:1c:41:78:ed:9a:
         09:88:3d:3e:a4:f2:1b:21:b9:d8:d7:53:88:cd:4f:b5:29:50:
         86:3a:66:f5:a9:1e:b0:a7:52:a3:a1:6f:a5:fe:93:3d:50:7a:
         67:83:60:90:56:ba:47:e9:89:66:7f:c5:21:bd:fa:79:df:5f:
         fd:5a:04:80:2e:a6:d6:57:66:bb:9e:ca:eb:16:74:97:58:52:
         78:64:59:74:23:1d:77:7a:5f:df:70:23:d6:06:b6:51:e1:ca:
         b6:85:42:18:51:ce:6b:21:2d:bf:14:14:20:0f:b1:3a:ee:15:
         2c:62:65:89
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUAQY664vMHXvM7TbkxUvhexT+l5IwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzIwMDA0MjA3WhcNMjYxMDE4MjM1OTU5
WjB6MUkwRwYDVQQFE0BjMDE4NWZlMjFkYmIxODZlNmRjMzM2YjQ0N2RhMGYxYjQ3
NjkzZjNjYTg3YTZmOTg3Y2VhMzE0OGIxYjcxNjIyMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDRXEPxyzcifaCtc++sy1I+xQOnJxzShcm1FQdqlj+zOeWt
Jx7oGilF4DWQsMMtvx6nQ29TDczM72TEXUkUTAbgX3L0D2ao/NrWrOg2rGdcf8kC
5n7/nSlm/F6pEx+43Xqj5rQtFaD8MwPRluglWOAk9mEH7LV/tbGtf4Okg5xPrURw
jQ8whri0fn8UyAIlMCZIFvZ8sRdr4dVtgFGFZpmXypjW7AL4YGAeJFV741V0UuKJ
SLDSYwGNApcHocZ6ob37l38l0HOxhIiva+MnFcS8SEy76AGKZoBCQrcY3JzIfWTi
nRAbfHJkLxzvRpunsw3oqn+D9fhm+GqO++cL9KHZAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU29OnWIw5q/oL9b3+2ngc9WszxMYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzZlODE1NzU2LWZkNGYtNGZhMi04ZGUyLTAzMThmOTA0ODRkYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB/9gr4wDQYJKoZIhvcNAQELBQADggEBAMSHyJChoMGOdlQ9FaBoDvqv
jXOkFJPiN/tBz9BuO8fc1BZEuTUy3jFz+t6SEKiQjYDojPx0kx7atZoa8vO+pbro
sYDs0SPQAfHsL3p/NwUTysprGhMECjJ9OUjpYQ9iqTXYTt4JaqAyqoqyV7/nEVNU
sSB9OkKj9/LHQTqHshg6XtE/kpWNdFxAZoQcQXjtmgmIPT6k8hshudjXU4jNT7Up
UIY6ZvWpHrCnUqOhb6X+kz1QemeDYJBWukfpiWZ/xSG9+nnfX/1aBIAuptZXZrue
yusWdJdYUnhkWXQjHXd6X99wI9YGtlHhyraFQhhRzmshLb8UFCAPsTruFSxiZYk=
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:35:16 2026 by rpki-client