Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a492e851-e74c-44ed-b4bd-4b95f3c87a07.roa
File:                     a492e851-e74c-44ed-b4bd-4b95f3c87a07.roa (raw, json)
Hash identifier:          icGq91AgsX4YkZeJdGuOvx0TuXXfFFrlOOS/GIkLOHM=
Subject key identifier:   AC:05:B4:77:0D:37:1F:03:AA:D3:35:BC:EE:42:60:1E:0B:B6:58:8B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       11451BDEFA3C70BC869DDFF0C93E40F7691F44A8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a492e851-e74c-44ed-b4bd-4b95f3c87a07.roa
Signing time:             Mon 20 Jul 2026 00:31:50 +0000
ROA not before:           Mon 20 Jul 2026 00:31:50 +0000
ROA not after:            Sun 18 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2620:107:4008::/45 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:45:1b:de:fa:3c:70:bc:86:9d:df:f0:c9:3e:40:f7:69:1f:44:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 20 00:31:50 2026 GMT
            Not After : Oct 18 23:59:59 2026 GMT
        Subject: serialNumber=aa0633c76e1d0b10e403f8f58cca73e592dfaf95d1e6ec6e5022640b371c5e0b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:40:b1:83:1d:5d:d4:f1:b0:16:12:d7:f3:57:
                    0c:91:09:76:f8:2f:9c:a3:9d:65:0d:8b:60:f1:65:
                    c2:47:47:cd:b2:a3:94:3c:91:85:0e:42:20:7e:bc:
                    59:da:a8:59:b2:9e:cc:f2:97:d5:e1:6e:33:1c:8f:
                    d9:fd:a7:7b:7d:2c:5d:ab:9b:ac:45:5d:f1:cc:16:
                    15:0e:77:55:ec:75:04:61:49:e0:c3:0f:be:85:63:
                    8d:b3:5b:e4:bd:79:a4:cc:03:a7:07:6e:00:3b:6e:
                    e9:a1:a0:41:21:9a:3f:8c:11:b0:92:89:af:81:5f:
                    6e:fa:6a:bf:55:ab:db:d9:39:ff:18:11:2a:9e:f2:
                    a5:2a:f1:26:7c:43:54:21:4d:34:70:af:77:7b:9e:
                    4d:ac:71:5f:3a:08:b6:51:4e:8e:11:b9:fe:74:a7:
                    28:aa:86:a5:a9:f2:b1:cd:04:81:a2:ca:ab:13:b4:
                    a8:bc:7a:54:e7:ac:8a:15:a1:22:d8:04:bc:df:1e:
                    5e:3b:58:69:36:7f:5d:4c:da:ad:19:db:57:a7:03:
                    19:02:ce:e2:fa:c1:28:4b:a6:c7:e3:75:97:55:ed:
                    1b:77:8f:67:16:94:40:35:7b:c0:d1:83:fe:da:2a:
                    55:81:7b:01:3e:84:d3:4a:74:16:1f:2b:14:0e:17:
                    32:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:05:B4:77:0D:37:1F:03:AA:D3:35:BC:EE:42:60:1E:0B:B6:58:8B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a492e851-e74c-44ed-b4bd-4b95f3c87a07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:107:4008::/45

    Signature Algorithm: sha256WithRSAEncryption
         72:af:0c:3b:ea:70:78:af:db:d3:26:0d:17:b2:4a:4a:b6:ea:
         65:51:45:fe:09:f5:b8:45:ec:ca:c3:3d:3a:5a:1b:fe:06:9a:
         2c:3d:d6:d5:7f:7e:09:88:73:fe:a1:9f:be:4f:7a:be:d8:cf:
         b9:23:ee:bc:92:73:0f:1e:37:05:1f:de:61:c3:56:e8:5c:34:
         65:87:65:51:69:0c:e3:97:7c:60:41:78:61:a4:50:21:dd:ef:
         da:dc:32:55:03:6a:15:6d:ab:25:e0:82:f4:f6:b1:be:24:ab:
         48:91:72:31:73:0c:fb:d0:20:0a:85:4b:ca:2a:34:2d:25:a0:
         09:af:a0:1f:c2:04:ab:95:99:6a:9d:76:a2:2f:b1:e0:ec:98:
         cc:6a:60:5d:d1:71:b9:46:ce:da:92:40:76:2b:d0:85:0c:e4:
         9e:56:c4:8c:ea:e7:aa:ca:a8:de:86:21:34:06:98:f8:b5:47:
         f8:af:a2:bc:29:a3:b9:8d:39:4c:5d:b1:09:5e:f5:89:5f:2a:
         e5:70:79:f5:78:b9:cc:47:7b:b6:69:72:f2:57:4a:86:4f:3a:
         2e:8e:43:79:71:e5:a2:8e:27:f7:d6:df:dd:e6:10:2f:15:2c:
         bb:9e:4c:92:96:66:ed:9e:95:f5:4d:6d:52:08:f7:9c:8a:7c:
         5b:be:99:81
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUEUUb3vo8cLyGnd/wyT5A92kfRKgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzIwMDAzMTUwWhcNMjYxMDE4MjM1OTU5
WjB6MUkwRwYDVQQFE0BhYTA2MzNjNzZlMWQwYjEwZTQwM2Y4ZjU4Y2NhNzNlNTky
ZGZhZjk1ZDFlNmVjNmU1MDIyNjQwYjM3MWM1ZTBiMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDwQLGDHV3U8bAWEtfzVwyRCXb4L5yjnWUNi2DxZcJHR82y
o5Q8kYUOQiB+vFnaqFmynszyl9XhbjMcj9n9p3t9LF2rm6xFXfHMFhUOd1XsdQRh
SeDDD76FY42zW+S9eaTMA6cHbgA7bumhoEEhmj+MEbCSia+BX276ar9Vq9vZOf8Y
ESqe8qUq8SZ8Q1QhTTRwr3d7nk2scV86CLZRTo4Ruf50pyiqhqWp8rHNBIGiyqsT
tKi8elTnrIoVoSLYBLzfHl47WGk2f11M2q0Z21enAxkCzuL6wShLpsfjdZdV7Rt3
j2cWlEA1e8DRg/7aKlWBewE+hNNKdBYfKxQOFzKVAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUrAW0dw03HwOq0zW87kJgHgu2WIswHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2E0OTJlODUxLWU3NGMtNDRlZC1iNGJkLTRiOTVmM2M4N2EwNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwMmIAEHQAgwDQYJKoZIhvcNAQELBQADggEBAHKvDDvqcHiv29MmDReySkq2
6mVRRf4J9bhF7MrDPTpaG/4Gmiw91tV/fgmIc/6hn75Per7Yz7kj7ryScw8eNwUf
3mHDVuhcNGWHZVFpDOOXfGBBeGGkUCHd79rcMlUDahVtqyXggvT2sb4kq0iRcjFz
DPvQIAqFS8oqNC0loAmvoB/CBKuVmWqddqIvseDsmMxqYF3RcblGztqSQHYr0IUM
5J5WxIzq56rKqN6GITQGmPi1R/ivorwpo7mNOUxdsQle9YlfKuVwefV4ucxHe7Zp
cvJXSoZPOi6OQ3lx5aKOJ/fW393mEC8VLLueTJKWZu2elfVNbVII95yKfFu+mYE=
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:32:56 2026 by rpki-client