Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/04f66d57-bab4-4fce-9d9f-8a8e28b4bb23.roa
File:                     04f66d57-bab4-4fce-9d9f-8a8e28b4bb23.roa (raw, json)
Hash identifier:          5KsCrawtPw15ZZoIWXTDeFVBaie02EyHaapn+j3j+2Q=
Subject key identifier:   50:CB:7D:9D:6D:9B:5B:75:CD:D8:0A:0D:B6:72:A2:87:25:28:25:04
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5ABAEF4EB4D0467105E4926FD08D0E4747E49AE2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/04f66d57-bab4-4fce-9d9f-8a8e28b4bb23.roa
Signing time:             Wed 05 Aug 2026 00:12:04 +0000
ROA not before:           Wed 05 Aug 2026 00:12:04 +0000
ROA not after:            Tue 03 Nov 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        75.101.164.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:ba:ef:4e:b4:d0:46:71:05:e4:92:6f:d0:8d:0e:47:47:e4:9a:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  5 00:12:04 2026 GMT
            Not After : Nov  3 23:59:59 2026 GMT
        Subject: serialNumber=8b84d66a87426d58024f3c06df2bb222501d212d27ebc5999e2af1963aa6d36a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:de:a8:d5:e0:8c:66:78:50:3f:cd:aa:25:38:
                    68:2a:b5:3f:8a:15:a7:32:84:cd:9f:d1:47:59:37:
                    f0:f8:f7:95:4e:63:19:01:cd:bb:af:69:33:21:b9:
                    a2:98:56:d0:91:08:3b:56:4c:9b:63:a1:e3:74:08:
                    00:2f:44:97:cd:f5:1c:b9:0a:42:5a:66:8a:08:83:
                    69:22:96:29:59:43:89:fb:f1:fb:1d:2d:af:15:a4:
                    0d:78:71:56:29:02:ff:f8:f1:76:6d:a5:1b:a8:fd:
                    51:e4:8c:7a:b9:88:7f:28:99:46:c7:fa:de:a3:78:
                    b1:51:7f:37:78:17:a6:6b:10:02:34:84:8e:39:ad:
                    ce:a8:79:75:39:41:60:a6:bc:f9:0a:73:4a:a7:cc:
                    a5:1c:e9:4e:95:1e:da:35:34:ad:e8:86:59:8f:5f:
                    c8:62:8f:71:c1:51:4e:eb:5d:00:e3:21:77:bf:e4:
                    2e:ba:23:59:71:ba:fb:5c:d6:d8:60:aa:2e:6e:59:
                    3a:c3:75:44:a8:4f:9b:f0:e8:8e:8a:c3:fb:e3:60:
                    0f:e8:9a:02:90:c6:e3:56:c9:4f:10:1c:38:06:7b:
                    db:94:be:ac:b4:b9:12:23:8d:48:2b:32:fb:b9:1f:
                    43:85:22:a8:1d:77:8f:fb:c2:5b:70:b1:65:27:90:
                    a5:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:CB:7D:9D:6D:9B:5B:75:CD:D8:0A:0D:B6:72:A2:87:25:28:25:04
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/04f66d57-bab4-4fce-9d9f-8a8e28b4bb23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.101.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:f0:de:19:19:7f:93:1f:86:2d:26:9e:63:4d:e7:2c:95:e0:
         3b:cf:4a:e9:b2:49:97:14:fb:48:9d:50:e8:c7:39:31:3d:56:
         c6:c1:dc:7b:4e:a0:ae:c7:f0:d3:4b:a4:16:ae:63:21:05:b0:
         0f:4f:db:3b:3c:d3:25:2a:73:d9:2e:5a:c4:ef:df:d9:d8:fb:
         cd:05:3a:4a:a4:e9:c9:1b:35:f7:ba:21:cd:02:9c:0e:56:38:
         3b:84:43:61:15:8c:95:7a:a8:3d:8b:d6:15:c0:60:24:94:cc:
         06:10:d9:74:c8:3e:20:4b:04:85:e1:52:9a:4a:fd:05:ce:d7:
         02:32:59:41:90:52:8a:14:3d:35:a7:1a:a6:b4:5d:6f:df:97:
         95:0a:d9:05:d8:c2:4a:f3:ab:97:89:cd:0e:98:55:12:23:47:
         ed:00:6c:8e:ee:5f:cc:a8:14:2c:94:bd:5c:d4:de:7e:8d:9d:
         34:12:13:ea:27:2d:57:d9:b3:20:13:6e:61:a7:73:6e:11:e7:
         bd:4f:77:a1:42:31:73:c6:f8:34:ba:87:75:a8:d8:a9:0e:17:
         79:6f:ce:13:b3:61:7c:11:1b:c3:dc:78:c3:d9:00:ab:ef:12:
         29:6b:cc:9a:b3:57:5d:3a:d9:e0:69:57:6d:4f:38:39:e9:88:
         24:38:c0:e3
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUWrrvTrTQRnEF5JJv0I0OR0fkmuIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA1MDAxMjA0WhcNMjYxMTAzMjM1OTU5
WjB6MUkwRwYDVQQFE0A4Yjg0ZDY2YTg3NDI2ZDU4MDI0ZjNjMDZkZjJiYjIyMjUw
MWQyMTJkMjdlYmM1OTk5ZTJhZjE5NjNhYTZkMzZhMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCW3qjV4IxmeFA/zaolOGgqtT+KFacyhM2f0UdZN/D495VO
YxkBzbuvaTMhuaKYVtCRCDtWTJtjoeN0CAAvRJfN9Ry5CkJaZooIg2kililZQ4n7
8fsdLa8VpA14cVYpAv/48XZtpRuo/VHkjHq5iH8omUbH+t6jeLFRfzd4F6ZrEAI0
hI45rc6oeXU5QWCmvPkKc0qnzKUc6U6VHto1NK3ohlmPX8hij3HBUU7rXQDjIXe/
5C66I1lxuvtc1thgqi5uWTrDdUSoT5vw6I6Kw/vjYA/omgKQxuNWyU8QHDgGe9uU
vqy0uRIjjUgrMvu5H0OFIqgdd4/7wltwsWUnkKUVAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUUMt9nW2bW3XN2AoNtnKihyUoJQQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzA0ZjY2ZDU3LWJhYjQtNGZjZS05ZDlmLThhOGUyOGI0YmIyMy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAJLZaQwDQYJKoZIhvcNAQELBQADggEBACbw3hkZf5Mfhi0mnmNN5yyV4DvP
SumySZcU+0idUOjHOTE9VsbB3HtOoK7H8NNLpBauYyEFsA9P2zs80yUqc9kuWsTv
39nY+80FOkqk6ckbNfe6Ic0CnA5WODuEQ2EVjJV6qD2L1hXAYCSUzAYQ2XTIPiBL
BIXhUppK/QXO1wIyWUGQUooUPTWnGqa0XW/fl5UK2QXYwkrzq5eJzQ6YVRIjR+0A
bI7uX8yoFCyUvVzU3n6NnTQSE+onLVfZsyATbmGnc24R571Pd6FCMXPG+DS6h3Wo
2KkOF3lvzhOzYXwRG8PceMPZAKvvEilrzJqzV1062eBpV21PODnpiCQ4wOM=
-----END CERTIFICATE-----
Generated at Thu Sep 17 17:03:18 2026 by rpki-client