Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f21fa82-f6f4-4481-930d-e7fd8e66abe8.roa
File:                     9f21fa82-f6f4-4481-930d-e7fd8e66abe8.roa (raw, json)
Hash identifier:          4HGkTvXDHhSpL15LVAbTJE6ZsFjPYiXnqQgOLTujUQY=
Subject key identifier:   B2:46:92:8E:A8:F1:67:D6:F0:FD:82:08:FD:6E:48:28:F0:A5:AF:2A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6660F30C1D45B3A944EF54ACE4BE8B14ED20D5AE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f21fa82-f6f4-4481-930d-e7fd8e66abe8.roa
Signing time:             Tue 21 Jul 2026 01:01:17 +0000
ROA not before:           Tue 21 Jul 2026 01:01:17 +0000
ROA not after:            Mon 19 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff3:2040::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:60:f3:0c:1d:45:b3:a9:44:ef:54:ac:e4:be:8b:14:ed:20:d5:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 21 01:01:17 2026 GMT
            Not After : Oct 19 23:59:59 2026 GMT
        Subject: serialNumber=9bc9893b785ef9e777e929b556f64be6735a806f65e0db7ba55d97777861891f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ca:9d:7b:80:fb:57:59:7d:3d:ee:b8:1d:82:
                    34:0a:c1:d3:e2:0b:8e:23:1d:1a:e2:a7:d9:2c:c4:
                    9f:01:b4:61:d4:8b:e9:65:33:0d:73:46:aa:54:e7:
                    e4:ec:0d:54:38:02:99:35:fa:78:e2:b4:0a:b5:7f:
                    79:2e:66:24:d2:9e:9e:87:a6:19:6d:aa:5c:41:ea:
                    01:1f:6e:78:36:07:78:0a:d6:60:b0:a1:86:e7:9a:
                    c8:b0:b3:3f:83:25:ff:a2:fb:7e:d4:5e:d8:e0:a2:
                    6e:c3:ee:61:c2:e2:cf:3f:3e:e4:f8:04:41:4e:3b:
                    69:1a:1d:07:02:6d:5f:47:b4:cb:b3:92:1b:9d:76:
                    8b:08:2d:49:e1:fa:03:c6:93:5f:9c:ef:89:e2:40:
                    21:ec:19:48:b3:b6:3a:d7:cd:c0:de:02:d7:ea:06:
                    99:a2:f2:ce:47:76:18:f6:7b:81:dc:d2:9f:33:ed:
                    37:9c:ad:b5:ab:9a:6e:90:a0:43:9b:c9:cf:11:15:
                    e6:c7:0f:77:c4:00:9e:a9:98:a7:a8:9b:66:2f:19:
                    33:63:5b:38:e1:e7:c9:01:29:04:c4:ba:1b:ff:f3:
                    e9:dd:14:33:ad:8a:05:52:c6:81:e2:7b:06:09:45:
                    1e:fe:af:90:16:2e:59:e9:33:c4:c5:cb:f2:b9:24:
                    b5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:46:92:8E:A8:F1:67:D6:F0:FD:82:08:FD:6E:48:28:F0:A5:AF:2A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f21fa82-f6f4-4481-930d-e7fd8e66abe8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff3:2040::/46

    Signature Algorithm: sha256WithRSAEncryption
         87:e7:4b:ae:17:ee:8e:32:b7:99:ca:58:58:1b:86:ec:1c:0a:
         6c:09:14:60:0d:a3:3d:cf:5a:be:16:3f:36:0c:d2:7d:d8:31:
         3c:49:d9:db:72:7a:95:9b:9b:d5:62:78:67:08:bc:63:6d:5e:
         c8:51:08:7b:62:81:a5:c9:39:fb:da:7d:a4:55:99:41:32:f8:
         b8:7d:6e:f4:47:35:bb:18:ea:fd:76:83:f7:13:96:a8:48:b7:
         ea:39:0f:90:35:fc:b8:8b:c7:d1:8e:40:9b:83:b8:7e:af:e9:
         9c:6c:16:5c:d8:dd:c1:f7:fd:7f:e1:61:21:4c:08:a6:90:75:
         6c:03:82:2a:e4:14:40:47:7a:49:9c:99:3f:24:e6:a6:f7:83:
         a5:e4:30:8b:b8:77:f7:a4:a9:25:d6:d3:9c:f8:69:9f:3c:12:
         0f:e3:92:48:d3:d7:ae:49:48:60:e7:a1:50:c2:cd:72:82:3e:
         8f:1c:fb:3c:39:f9:dd:dc:c0:a0:13:39:eb:b3:06:b2:fb:b8:
         da:b0:91:86:82:e9:76:32:dd:6c:e4:ca:23:e9:77:3a:c8:53:
         fe:21:96:10:bb:c9:ab:91:af:ce:dd:37:df:63:8b:86:df:ac:
         c4:39:b8:d3:39:f9:c5:15:b5:12:a1:6a:21:ce:13:11:30:c4:
         e1:97:c2:70
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUZmDzDB1Fs6lE71Ss5L6LFO0g1a4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzIxMDEwMTE3WhcNMjYxMDE5MjM1OTU5
WjB6MUkwRwYDVQQFE0A5YmM5ODkzYjc4NWVmOWU3NzdlOTI5YjU1NmY2NGJlNjcz
NWE4MDZmNjVlMGRiN2JhNTVkOTc3Nzc4NjE4OTFmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCryp17gPtXWX097rgdgjQKwdPiC44jHRrip9ksxJ8BtGHU
i+llMw1zRqpU5+TsDVQ4Apk1+njitAq1f3kuZiTSnp6HphltqlxB6gEfbng2B3gK
1mCwoYbnmsiwsz+DJf+i+37UXtjgom7D7mHC4s8/PuT4BEFOO2kaHQcCbV9HtMuz
khuddosILUnh+gPGk1+c74niQCHsGUiztjrXzcDeAtfqBpmi8s5Hdhj2e4Hc0p8z
7TecrbWrmm6QoEObyc8RFebHD3fEAJ6pmKeom2YvGTNjWzjh58kBKQTEuhv/8+nd
FDOtigVSxoHiewYJRR7+r5AWLlnpM8TFy/K5JLUlAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUskaSjqjxZ9bw/YII/W5IKPClryowHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzlmMjFmYTgyLWY2ZjQtNDQ4MS05MzBkLWU3ZmQ4ZTY2YWJlOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImAB/zIEAwDQYJKoZIhvcNAQELBQADggEBAIfnS64X7o4yt5nKWFgbhuwc
CmwJFGANoz3PWr4WPzYM0n3YMTxJ2dtyepWbm9VieGcIvGNtXshRCHtigaXJOfva
faRVmUEy+Lh9bvRHNbsY6v12g/cTlqhIt+o5D5A1/LiLx9GOQJuDuH6v6ZxsFlzY
3cH3/X/hYSFMCKaQdWwDgirkFEBHekmcmT8k5qb3g6XkMIu4d/ekqSXW05z4aZ88
Eg/jkkjT165JSGDnoVDCzXKCPo8c+zw5+d3cwKATOeuzBrL7uNqwkYaC6XYy3Wzk
yiPpdzrIU/4hlhC7yauRr87dN99ji4bfrMQ5uNM5+cUVtRKhaiHOExEwxOGXwnA=
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:52:16 2026 by rpki-client