Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/48a0b6fa-615d-434d-b543-f9f732d80dc1.roa
File:                     48a0b6fa-615d-434d-b543-f9f732d80dc1.roa (raw, json)
Hash identifier:          PJK99udntbk/XoVmPxJmPcD5llQEq8sq8fA2BCFSE+4=
Subject key identifier:   31:3D:68:0D:E8:C6:8C:30:12:DB:86:58:8E:D4:77:98:A7:23:9E:22
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       29030168164895755D5ABD0338F62D57501E3D85
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/48a0b6fa-615d-434d-b543-f9f732d80dc1.roa
Signing time:             Sun 17 May 2026 00:11:48 +0000
ROA not before:           Sun 17 May 2026 00:11:48 +0000
ROA not after:            Sat 15 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        199.205.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 18 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:03:01:68:16:48:95:75:5d:5a:bd:03:38:f6:2d:57:50:1e:3d:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 17 00:11:48 2026 GMT
            Not After : Aug 15 23:59:59 2026 GMT
        Subject: serialNumber=66f0465178c7ec9bb63f484679cc5aea900c5be6e2e72165f75ba7e057bcd507, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:6b:3d:2a:58:dc:42:8d:23:56:d2:9b:8d:56:
                    cf:2c:ce:e0:06:c1:a9:54:e8:79:74:45:d6:ec:63:
                    b7:21:52:1a:d4:dd:84:a2:19:c4:d3:01:b8:8e:7e:
                    d7:30:ee:d2:70:65:0c:ac:cb:39:f5:3b:e0:40:a6:
                    22:4a:d8:7a:58:2c:af:20:57:42:f8:96:d8:dd:ee:
                    69:41:78:64:c5:e1:ad:d3:ff:ad:91:82:e2:6a:d1:
                    d3:e1:93:cf:61:0a:c7:3d:8f:69:98:5c:15:49:40:
                    9f:40:41:10:90:99:3f:b1:4d:7d:96:9f:30:77:90:
                    f9:94:ce:87:8d:c2:4f:ba:1c:9f:b8:b7:6e:d4:68:
                    d4:2c:8a:0a:2f:a3:74:3e:1d:04:bf:93:ac:a3:8b:
                    fa:5b:bf:9e:2e:f9:86:cd:30:83:60:72:22:48:51:
                    8e:40:06:5e:50:1e:6f:6e:37:fc:5c:28:d5:e0:8d:
                    2a:be:e5:55:b5:3b:da:b4:3a:5b:70:dd:cd:54:e9:
                    de:1e:78:5f:90:c1:16:45:f7:0a:49:8d:14:7a:6d:
                    74:39:e0:3a:bb:d1:d0:c5:c0:c9:4d:ae:07:29:86:
                    26:b4:a0:fc:2e:ad:57:74:f8:47:21:85:1e:e4:2f:
                    67:7d:03:fa:93:38:3a:8d:df:e1:0b:68:e3:b6:2b:
                    a5:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:3D:68:0D:E8:C6:8C:30:12:DB:86:58:8E:D4:77:98:A7:23:9E:22
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/48a0b6fa-615d-434d-b543-f9f732d80dc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.205.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5f:86:e2:59:97:be:83:87:77:50:30:84:31:5a:f5:1c:25:0d:
         63:24:8b:0c:b2:b1:70:c7:a3:6e:9f:8f:83:bb:1d:ae:10:36:
         bd:c9:66:fa:8d:fc:e9:18:52:f3:83:7f:eb:55:80:7c:ac:1b:
         26:61:52:62:52:aa:05:5f:1f:8b:e7:c2:dd:9f:f6:62:c3:07:
         09:b8:1e:e8:ee:f7:c9:0f:88:e9:cd:06:f3:0b:af:be:31:68:
         71:5b:88:96:6c:f3:dc:f0:f7:30:2c:08:c0:1a:98:6d:e3:db:
         b5:52:ce:86:28:5f:06:bc:f0:59:4d:24:c0:49:de:04:15:a4:
         99:04:cf:40:10:28:3f:91:8c:7b:74:77:db:fa:b8:52:d4:8f:
         2e:1d:fe:ea:85:6f:ef:9c:ab:02:0d:ab:60:c9:05:16:0f:9b:
         1c:d6:a4:af:0f:53:ae:4c:f4:94:43:14:7c:2c:f5:10:e8:98:
         dc:f8:9e:e2:3f:1a:e8:e0:f0:a1:4e:42:b6:75:4f:f5:c3:b4:
         56:8b:32:2b:d7:9a:03:c3:6f:f2:78:6e:e8:52:c7:3d:bf:c2:
         eb:a7:14:30:8d:45:fd:fb:fa:62:32:e0:10:a4:5c:55:92:81:
         93:c2:e3:6f:68:63:0d:90:91:5d:27:98:8e:19:69:23:d2:89:
         16:84:39:0f
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUKQMBaBZIlXVdWr0DOPYtV1AePYUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE3MDAxMTQ4WhcNMjYwODE1MjM1OTU5
WjB6MUkwRwYDVQQFE0A2NmYwNDY1MTc4YzdlYzliYjYzZjQ4NDY3OWNjNWFlYTkw
MGM1YmU2ZTJlNzIxNjVmNzViYTdlMDU3YmNkNTA3MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCKaz0qWNxCjSNW0puNVs8szuAGwalU6Hl0RdbsY7chUhrU
3YSiGcTTAbiOftcw7tJwZQysyzn1O+BApiJK2HpYLK8gV0L4ltjd7mlBeGTF4a3T
/62RguJq0dPhk89hCsc9j2mYXBVJQJ9AQRCQmT+xTX2WnzB3kPmUzoeNwk+6HJ+4
t27UaNQsigovo3Q+HQS/k6yji/pbv54u+YbNMINgciJIUY5ABl5QHm9uN/xcKNXg
jSq+5VW1O9q0Oltw3c1U6d4eeF+QwRZF9wpJjRR6bXQ54Dq70dDFwMlNrgcphia0
oPwurVd0+EchhR7kL2d9A/qTODqN3+ELaOO2K6XjAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUMT1oDejGjDAS24ZYjtR3mKcjniIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzQ4YTBiNmZhLTYxNWQtNDM0ZC1iNTQzLWY5ZjczMmQ4MGRjMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwDHzTANBgkqhkiG9w0BAQsFAAOCAQEAX4biWZe+g4d3UDCEMVr1HCUNYySL
DLKxcMejbp+Pg7sdrhA2vclm+o386RhS84N/61WAfKwbJmFSYlKqBV8fi+fC3Z/2
YsMHCbge6O73yQ+I6c0G8wuvvjFocVuIlmzz3PD3MCwIwBqYbePbtVLOhihfBrzw
WU0kwEneBBWkmQTPQBAoP5GMe3R32/q4UtSPLh3+6oVv75yrAg2rYMkFFg+bHNak
rw9Trkz0lEMUfCz1EOiY3Pie4j8a6ODwoU5CtnVP9cO0VosyK9eaA8Nv8nhu6FLH
Pb/C66cUMI1F/fv6YjLgEKRcVZKBk8Ljb2hjDZCRXSeYjhlpI9KJFoQ5Dw==
-----END CERTIFICATE-----
Generated at Sun May 17 05:56:09 2026 by rpki-client