Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ce6fb1f7-f9dd-4e4d-8d96-746200d91d68.roa
File:                     ce6fb1f7-f9dd-4e4d-8d96-746200d91d68.roa (raw, json)
Hash identifier:          zgsQhd8uQPG0Erz7+dlBhpg/3KUOBFJDO3Q09Kgodkc=
Subject key identifier:   34:F2:33:AD:E7:03:CC:4D:1F:31:B2:16:6F:A5:88:ED:54:EF:B7:C1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       486D7BBF3B7EBEA155DFFBC1E66CC704C4456353
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ce6fb1f7-f9dd-4e4d-8d96-746200d91d68.roa
Signing time:             Tue 21 Jul 2026 01:01:52 +0000
ROA not before:           Tue 21 Jul 2026 01:01:52 +0000
ROA not after:            Mon 19 Oct 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1fea:80c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:6d:7b:bf:3b:7e:be:a1:55:df:fb:c1:e6:6c:c7:04:c4:45:63:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 21 01:01:52 2026 GMT
            Not After : Oct 19 23:59:59 2026 GMT
        Subject: serialNumber=42e59f082ec13a363c6791ef94c87f5d27bd8ba6cafd08c1eb0867a11417668e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:00:9d:c6:a4:d1:05:af:b1:c4:2e:8b:5a:a8:
                    a7:4e:3e:a2:e3:25:dc:9a:b1:b8:26:4a:99:53:f6:
                    90:21:57:5f:76:c1:01:fa:60:45:d6:0e:65:35:99:
                    12:68:fe:27:cf:8a:55:29:01:39:0c:34:d4:00:1d:
                    79:5d:d3:63:28:6c:35:12:ec:f1:81:d7:9f:6b:c8:
                    1e:6f:74:36:9e:32:0f:a0:01:c3:13:89:f5:ac:9f:
                    4e:6e:60:fb:a8:33:ce:da:c8:55:43:9f:e2:93:17:
                    96:02:ca:05:08:27:7d:fa:59:73:89:55:bb:d8:99:
                    4a:6b:87:c9:d0:50:90:03:92:5a:cf:21:46:88:a3:
                    3d:ba:9b:e2:d3:8c:bb:c9:a7:bb:c6:7d:0c:8d:48:
                    f5:d0:c1:31:81:62:92:7d:95:33:87:69:bc:da:74:
                    0f:f9:99:94:ac:96:c5:47:59:76:c4:49:97:00:37:
                    3c:ff:5a:46:ea:6d:35:84:d7:11:86:ec:ed:51:f6:
                    8b:3a:7d:d3:73:c0:44:c7:04:fa:52:f1:b2:ce:41:
                    bc:f2:09:ff:b8:0d:75:3e:d9:1e:83:46:d3:61:69:
                    f3:1a:8c:f5:62:57:00:c0:bb:01:05:7d:5b:ce:6d:
                    d8:90:29:3b:41:6f:39:39:f2:f2:d4:8d:bd:26:43:
                    b1:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:F2:33:AD:E7:03:CC:4D:1F:31:B2:16:6F:A5:88:ED:54:EF:B7:C1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ce6fb1f7-f9dd-4e4d-8d96-746200d91d68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fea:80c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:78:70:01:31:c0:3c:8a:7d:38:be:46:18:f7:45:c5:a5:af:
         c6:22:fc:1d:03:b2:f1:59:71:c6:f2:48:26:5a:57:4e:2d:fe:
         79:98:c9:24:03:85:cf:ae:57:cf:9a:20:3d:68:5b:de:db:af:
         ea:bb:9d:67:21:01:cd:cf:7e:ed:83:61:ed:ce:ce:5e:cd:d1:
         62:c1:b4:75:c8:78:b6:6f:7e:46:b4:d5:a7:f9:14:f2:72:e4:
         b2:a8:73:a9:4e:56:e6:bc:dc:2b:45:df:68:e8:54:d8:41:32:
         1b:a6:c5:c4:74:d2:c2:00:71:fa:f2:6c:3d:c9:d2:33:47:18:
         31:5d:a0:92:82:18:06:ce:38:a7:9a:19:36:de:c4:c8:82:cf:
         d5:09:e6:5b:35:0c:d7:d9:5c:6c:15:fd:16:67:3e:e5:69:ee:
         8b:0c:cd:c2:c0:bc:be:93:67:6f:e5:fd:ab:5d:bb:91:b9:1d:
         11:78:24:a3:cd:d3:ce:8f:ed:88:50:ce:7f:02:7c:bd:c3:3c:
         92:59:1c:a4:2a:b1:85:55:98:0a:6d:08:14:2d:d5:31:93:de:
         3d:f1:45:35:ef:46:7e:64:ad:77:6c:71:90:2c:cc:11:88:56:
         d2:90:56:ba:48:99:84:1a:9e:98:09:e3:c2:fa:7c:b9:b0:68:
         2d:50:e9:28
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUSG17vzt+vqFV3/vB5mzHBMRFY1MwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzIxMDEwMTUyWhcNMjYxMDE5MjM1OTU5
WjB6MUkwRwYDVQQFE0A0MmU1OWYwODJlYzEzYTM2M2M2NzkxZWY5NGM4N2Y1ZDI3
YmQ4YmE2Y2FmZDA4YzFlYjA4NjdhMTE0MTc2NjhlMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCwAJ3GpNEFr7HELotaqKdOPqLjJdyasbgmSplT9pAhV192
wQH6YEXWDmU1mRJo/ifPilUpATkMNNQAHXld02MobDUS7PGB159ryB5vdDaeMg+g
AcMTifWsn05uYPuoM87ayFVDn+KTF5YCygUIJ336WXOJVbvYmUprh8nQUJADklrP
IUaIoz26m+LTjLvJp7vGfQyNSPXQwTGBYpJ9lTOHabzadA/5mZSslsVHWXbESZcA
Nzz/WkbqbTWE1xGG7O1R9os6fdNzwETHBPpS8bLOQbzyCf+4DXU+2R6DRtNhafMa
jPViVwDAuwEFfVvObdiQKTtBbzk58vLUjb0mQ7EXAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUNPIzrecDzE0fMbIWb6WI7VTvt8EwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2NlNmZiMWY3LWY5ZGQtNGU0ZC04ZDk2LTc0NjIwMGQ5MWQ2OC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB/qgMAwDQYJKoZIhvcNAQELBQADggEBAIx4cAExwDyKfTi+Rhj3RcWl
r8Yi/B0DsvFZccbySCZaV04t/nmYySQDhc+uV8+aID1oW97br+q7nWchAc3Pfu2D
Ye3Ozl7N0WLBtHXIeLZvfka01af5FPJy5LKoc6lOVua83CtF32joVNhBMhumxcR0
0sIAcfrybD3J0jNHGDFdoJKCGAbOOKeaGTbexMiCz9UJ5ls1DNfZXGwV/RZnPuVp
7osMzcLAvL6TZ2/l/atdu5G5HRF4JKPN086P7YhQzn8CfL3DPJJZHKQqsYVVmApt
CBQt1TGT3j3xRTXvRn5krXdscZAszBGIVtKQVrpImYQanpgJ48L6fLmwaC1Q6Sg=
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:03:37 2026 by rpki-client