Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8bf05dc7-a430-401f-b2ad-6d559f8c6242.roa
File:                     8bf05dc7-a430-401f-b2ad-6d559f8c6242.roa (raw, json)
Hash identifier:          P8MbQPnJ8xQOtFJyM2j57S/jkxZnquHzvSTdyYjTrOU=
Subject key identifier:   D2:C1:37:0E:1F:41:E3:94:1D:DC:BD:5D:99:37:69:07:59:5F:31:FB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3D773E3ACF78FEAA8BDA21C002764FEC6B5B1795
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8bf05dc7-a430-401f-b2ad-6d559f8c6242.roa
Signing time:             Sat 18 Jul 2026 00:20:31 +0000
ROA not before:           Sat 18 Jul 2026 00:20:31 +0000
ROA not after:            Fri 16 Oct 2026 23:59:59 +0000
asID:                     8987
IP address blocks:        2600:1ff9:5000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:77:3e:3a:cf:78:fe:aa:8b:da:21:c0:02:76:4f:ec:6b:5b:17:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 18 00:20:31 2026 GMT
            Not After : Oct 16 23:59:59 2026 GMT
        Subject: serialNumber=450f6542cea3072478d683d4402e2073480b1d9003689e63df7ec7df06fddd73, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c0:71:92:26:c9:94:0a:6a:43:4c:95:13:fa:
                    8f:67:d4:88:de:3a:80:64:01:75:e6:89:3d:01:d9:
                    4c:f8:df:15:d1:96:ff:95:41:60:e6:82:40:32:44:
                    96:83:4f:a7:2f:76:4f:fb:04:28:e0:70:32:3b:75:
                    4d:e6:05:78:b3:ed:80:25:fd:3f:06:95:13:fb:dc:
                    b0:82:23:6d:a8:97:86:15:cd:42:02:1a:6d:b3:69:
                    f7:31:47:24:6a:60:19:5b:d2:94:3f:7a:07:09:bf:
                    2d:35:27:02:64:09:34:5b:ec:16:06:ca:8f:ce:40:
                    47:0e:20:40:87:16:ee:f8:d2:5b:6c:cf:19:4e:cb:
                    a5:6c:61:9a:2f:ba:5d:48:79:45:98:10:6b:d5:3f:
                    92:94:bf:61:31:ba:37:52:d5:d8:4c:92:18:ed:70:
                    19:6a:3e:6d:f6:7c:c4:f1:3d:6c:d7:b0:f1:4c:40:
                    16:d3:88:c9:b4:67:f2:06:5b:c3:e1:57:1c:2e:79:
                    28:60:95:72:58:5b:3c:1b:75:38:ff:b8:a6:20:8e:
                    5f:0b:37:01:10:a3:09:a0:7a:03:22:7a:af:ae:c5:
                    1f:98:24:5b:4e:f3:42:7b:3d:6f:12:c5:d7:30:c2:
                    f5:ab:b0:64:58:59:bf:5f:07:e7:49:dc:3f:59:45:
                    95:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:C1:37:0E:1F:41:E3:94:1D:DC:BD:5D:99:37:69:07:59:5F:31:FB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8bf05dc7-a430-401f-b2ad-6d559f8c6242.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff9:5000::/40

    Signature Algorithm: sha256WithRSAEncryption
         9c:6e:e3:c4:bb:14:41:42:e5:52:e5:ac:22:f1:7e:04:37:17:
         21:94:ec:c8:d4:80:2a:42:37:6d:74:c6:08:b8:22:fc:98:79:
         58:0e:6b:72:d8:33:bd:32:ec:5f:f6:6e:c5:dd:f4:6c:f9:02:
         43:b2:ea:f3:1a:00:80:57:8c:20:78:d7:0d:d4:3b:15:a9:9b:
         36:a9:d7:27:c6:32:ba:7e:d0:1c:82:47:c9:c4:bb:05:65:7c:
         0e:d2:7f:a6:a9:26:95:a9:a6:5d:6a:df:5b:b4:80:75:c4:2a:
         fa:ba:82:e6:a4:d9:a6:e1:ad:62:25:7a:7a:c1:01:43:59:4a:
         e7:54:c6:77:70:1a:6f:83:90:1c:b1:31:23:8c:3d:ea:7a:7c:
         9e:cf:5a:84:61:43:bb:ef:3e:5b:df:62:c0:e0:7d:ce:e5:c0:
         d4:11:7f:af:9b:28:60:f8:b4:fe:6c:03:fe:7f:6b:51:bf:1f:
         05:06:12:31:fa:ff:e1:d3:fe:40:50:08:f6:f1:01:1a:a3:fc:
         63:fa:10:dc:bf:fa:77:ff:6f:af:81:37:e4:ee:f2:a2:b7:26:
         a7:a9:be:94:66:02:00:54:47:16:00:4f:a1:5d:59:2e:0d:ee:
         93:37:96:3d:ab:ff:e7:e2:84:98:69:93:0d:1a:a1:31:ea:aa:
         f0:27:d3:33
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUPXc+Os94/qqL2iHAAnZP7GtbF5UwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzE4MDAyMDMxWhcNMjYxMDE2MjM1OTU5
WjB6MUkwRwYDVQQFE0A0NTBmNjU0MmNlYTMwNzI0NzhkNjgzZDQ0MDJlMjA3MzQ4
MGIxZDkwMDM2ODllNjNkZjdlYzdkZjA2ZmRkZDczMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDiwHGSJsmUCmpDTJUT+o9n1IjeOoBkAXXmiT0B2Uz43xXR
lv+VQWDmgkAyRJaDT6cvdk/7BCjgcDI7dU3mBXiz7YAl/T8GlRP73LCCI22ol4YV
zUICGm2zafcxRyRqYBlb0pQ/egcJvy01JwJkCTRb7BYGyo/OQEcOIECHFu740lts
zxlOy6VsYZovul1IeUWYEGvVP5KUv2ExujdS1dhMkhjtcBlqPm32fMTxPWzXsPFM
QBbTiMm0Z/IGW8PhVxwueShglXJYWzwbdTj/uKYgjl8LNwEQowmgegMieq+uxR+Y
JFtO80J7PW8SxdcwwvWrsGRYWb9fB+dJ3D9ZRZXBAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQU0sE3Dh9B45Qd3L1dmTdpB1lfMfswHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzhiZjA1ZGM3LWE0MzAtNDAxZi1iMmFkLTZkNTU5ZjhjNjI0Mi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB/5UDANBgkqhkiG9w0BAQsFAAOCAQEAnG7jxLsUQULlUuWsIvF+BDcX
IZTsyNSAKkI3bXTGCLgi/Jh5WA5rctgzvTLsX/Zuxd30bPkCQ7Lq8xoAgFeMIHjX
DdQ7FambNqnXJ8Yyun7QHIJHycS7BWV8DtJ/pqkmlammXWrfW7SAdcQq+rqC5qTZ
puGtYiV6esEBQ1lK51TGd3Aab4OQHLExI4w96np8ns9ahGFDu+8+W99iwOB9zuXA
1BF/r5soYPi0/mwD/n9rUb8fBQYSMfr/4dP+QFAI9vEBGqP8Y/oQ3L/6d/9vr4E3
5O7yorcmp6m+lGYCAFRHFgBPoV1ZLg3ukzeWPav/5+KEmGmTDRqhMeqq8CfTMw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:33:13 2026 by rpki-client