Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a73f2797-ec17-44df-8c37-4e38a5fc29f6.roa
File:                     a73f2797-ec17-44df-8c37-4e38a5fc29f6.roa (raw, json)
Hash identifier:          5FpV6uXoD4younpkjoQD+y95BiHtGvWN9EJdBcDXc68=
Subject key identifier:   44:27:9A:79:4D:53:B1:C7:A1:36:39:57:A2:29:23:94:DA:08:1D:E7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2FF72A9A9E7E7A39B1FCCC5B056F1A68A0DDC44F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a73f2797-ec17-44df-8c37-4e38a5fc29f6.roa
Signing time:             Mon 20 Jul 2026 00:00:50 +0000
ROA not before:           Mon 20 Jul 2026 00:00:50 +0000
ROA not after:            Sun 18 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f32:5000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:f7:2a:9a:9e:7e:7a:39:b1:fc:cc:5b:05:6f:1a:68:a0:dd:c4:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 20 00:00:50 2026 GMT
            Not After : Oct 18 23:59:59 2026 GMT
        Subject: serialNumber=57ee28a35b7d13bb9226d69b22405b197c51f8ecbe910105ed2131f3fa4933e6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:48:8d:be:85:3c:4a:f4:29:02:0e:b1:18:0d:
                    f2:de:3a:48:11:52:3e:ad:33:75:88:9d:f1:1b:d5:
                    18:5b:50:2a:cc:73:ca:69:2a:6c:ee:3f:dd:c8:f4:
                    9f:b9:a0:57:32:c1:b8:8a:46:c6:50:87:ea:80:5e:
                    3a:92:d2:e1:9d:b3:4f:5c:20:da:ab:2d:93:ca:d8:
                    80:da:41:05:51:2a:e2:2e:d7:43:06:64:36:82:0c:
                    01:8c:13:4e:12:33:ec:0f:5f:a1:0e:3e:3b:4a:29:
                    43:10:8d:91:3c:cf:4d:b6:2f:59:1f:ee:55:d7:26:
                    8a:a4:6e:0a:ea:d0:01:9e:00:63:40:6d:6b:b3:3c:
                    92:50:2a:69:62:11:0d:dc:e4:a3:d5:f3:80:b2:22:
                    e1:98:73:0a:78:ff:c1:8b:b1:e3:02:39:5d:59:af:
                    22:85:bc:fb:d4:a5:4e:9c:a6:a5:e7:5e:97:1e:f6:
                    77:5d:a5:b8:6b:64:4c:b7:60:d1:07:99:ca:8b:b3:
                    9b:a1:c6:b9:ac:d0:76:01:1f:65:2c:f3:89:b9:99:
                    6a:92:e8:7e:8e:94:24:29:8a:d9:46:82:3b:9c:f6:
                    28:02:ca:16:38:14:48:fe:40:6d:0e:24:81:ae:cb:
                    ca:54:c1:05:ea:e0:5b:f2:61:08:f3:d0:c5:ef:26:
                    a9:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:27:9A:79:4D:53:B1:C7:A1:36:39:57:A2:29:23:94:DA:08:1D:E7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a73f2797-ec17-44df-8c37-4e38a5fc29f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f32:5000::/40

    Signature Algorithm: sha256WithRSAEncryption
         99:13:8a:cf:d8:03:3a:6b:d6:e3:35:48:22:cb:a0:b4:f3:6a:
         7c:1c:f7:32:e5:fa:1b:73:36:6c:3a:8d:23:03:92:0d:72:bb:
         f5:27:3d:4a:3b:1b:17:4c:4b:7b:5c:e0:3b:88:6d:1e:e4:2c:
         7f:d9:26:0d:ad:a4:a4:e4:a8:6a:49:3f:bb:f0:c2:bb:89:db:
         c0:9e:d9:8c:bb:77:86:86:a5:9e:14:8a:d7:17:7d:0a:41:83:
         1e:b1:50:50:7b:e9:a2:4d:33:90:70:09:d6:f7:e2:c3:54:16:
         5c:cc:2c:7d:af:c1:00:35:0c:6f:06:22:d1:45:6b:e4:df:c3:
         49:a3:8d:b1:91:f0:bf:a2:df:5e:fe:f1:da:b7:07:0c:1a:45:
         06:8c:d5:36:30:04:fb:f5:b3:87:0a:b6:22:5d:c0:b9:9e:c3:
         1c:1f:11:a0:54:42:bf:a0:01:52:af:09:1f:62:e6:ee:2d:15:
         54:b8:83:b5:e2:7a:eb:de:20:c1:26:e3:43:f2:a1:13:b5:ea:
         bc:26:b8:cf:60:5d:18:ed:41:51:d1:d8:97:f6:1c:a6:24:97:
         3d:91:dd:5e:40:21:eb:6e:29:f7:0a:26:41:ee:71:9b:8a:ba:
         06:80:2a:cc:b9:a5:ab:ad:c8:a9:2c:f0:e6:1d:da:73:88:fd:
         da:bf:b6:92
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUL/cqmp5+ejmx/MxbBW8aaKDdxE8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzIwMDAwMDUwWhcNMjYxMDE4MjM1OTU5
WjB6MUkwRwYDVQQFE0A1N2VlMjhhMzViN2QxM2JiOTIyNmQ2OWIyMjQwNWIxOTdj
NTFmOGVjYmU5MTAxMDVlZDIxMzFmM2ZhNDkzM2U2MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCtSI2+hTxK9CkCDrEYDfLeOkgRUj6tM3WInfEb1RhbUCrM
c8ppKmzuP93I9J+5oFcywbiKRsZQh+qAXjqS0uGds09cINqrLZPK2IDaQQVRKuIu
10MGZDaCDAGME04SM+wPX6EOPjtKKUMQjZE8z022L1kf7lXXJoqkbgrq0AGeAGNA
bWuzPJJQKmliEQ3c5KPV84CyIuGYcwp4/8GLseMCOV1ZryKFvPvUpU6cpqXnXpce
9nddpbhrZEy3YNEHmcqLs5uhxrms0HYBH2Us84m5mWqS6H6OlCQpitlGgjuc9igC
yhY4FEj+QG0OJIGuy8pUwQXq4FvyYQjz0MXvJql5AgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQURCeaeU1TscehNjlXoikjlNoIHecwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2E3M2YyNzk3LWVjMTctNDRkZi04YzM3LTRlMzhhNWZjMjlmNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB8yUDANBgkqhkiG9w0BAQsFAAOCAQEAmROKz9gDOmvW4zVIIsugtPNq
fBz3MuX6G3M2bDqNIwOSDXK79Sc9SjsbF0xLe1zgO4htHuQsf9kmDa2kpOSoakk/
u/DCu4nbwJ7ZjLt3hoalnhSK1xd9CkGDHrFQUHvpok0zkHAJ1vfiw1QWXMwsfa/B
ADUMbwYi0UVr5N/DSaONsZHwv6LfXv7x2rcHDBpFBozVNjAE+/Wzhwq2Il3AuZ7D
HB8RoFRCv6ABUq8JH2Lm7i0VVLiDteJ6694gwSbjQ/KhE7XqvCa4z2BdGO1BUdHY
l/YcpiSXPZHdXkAh624p9womQe5xm4q6BoAqzLmlq63IqSzw5h3ac4j92r+2kg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:30:53 2026 by rpki-client