Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05bd08b2-707d-4af2-a9e6-ab2a5cfa5cc7.roa
File:                     05bd08b2-707d-4af2-a9e6-ab2a5cfa5cc7.roa (raw, json)
Hash identifier:          6WrLYg3uzLMg9UaCiJ1KbXH4hFviWjmEjKpxJOXQKa8=
Subject key identifier:   6F:B6:9F:E2:24:54:FD:EF:91:35:6F:00:3F:81:3A:90:37:AE:33:A2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       605F2A37404041B4B34E4BD5FFA92A1ABAA94DA4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05bd08b2-707d-4af2-a9e6-ab2a5cfa5cc7.roa
Signing time:             Sun 11 Oct 2026 00:11:16 +0000
ROA not before:           Sun 11 Oct 2026 00:11:16 +0000
ROA not after:            Sat 09 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        166.117.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:5f:2a:37:40:40:41:b4:b3:4e:4b:d5:ff:a9:2a:1a:ba:a9:4d:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 11 00:11:16 2026 GMT
            Not After : Jan  9 23:59:59 2027 GMT
        Subject: serialNumber=3ef8cd6359f984eeac646fa2b33afdc8d86e3a4a074ab266ab3985e379f871cf, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6f:66:d4:6a:3a:5a:0f:dc:9f:e7:3d:92:42:
                    54:44:3a:6e:47:b0:e3:0c:f9:78:8d:bb:11:6b:17:
                    4b:c0:43:f7:a9:37:62:d3:60:90:d3:52:4c:48:02:
                    86:73:b9:f1:7d:da:46:8b:91:35:41:bd:81:be:36:
                    47:20:f1:91:c6:c4:81:a1:52:8c:da:a8:7e:0c:cf:
                    91:78:57:d2:5f:8b:c8:64:0a:97:1b:fa:8b:fa:1c:
                    9c:54:b7:e6:73:4f:5d:97:89:6c:fd:6c:68:61:e0:
                    68:64:e2:61:6f:b0:92:b3:d3:66:22:2e:dc:c0:c5:
                    4c:0c:b7:fa:53:b3:41:b3:40:96:5f:7b:e7:50:b0:
                    7e:23:10:62:ec:b6:7d:ca:8d:09:f2:76:5c:4d:4d:
                    f7:e9:a3:09:b3:da:31:96:16:6c:a1:cc:f3:dd:ba:
                    54:ad:8d:02:4a:5b:5e:7e:2a:66:d0:16:1b:9b:06:
                    96:c5:03:0b:b8:a6:02:cb:3a:fa:85:ce:b5:88:69:
                    f6:0f:3e:c6:23:71:6b:10:11:a0:d3:92:c3:17:a4:
                    81:18:4b:a1:fe:aa:94:4f:35:14:5e:de:17:0b:a2:
                    99:e6:05:ed:75:2e:34:db:c8:26:2c:e5:0e:f0:40:
                    83:1e:d8:59:73:f4:36:af:8e:97:c9:d0:cb:55:37:
                    a5:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:B6:9F:E2:24:54:FD:EF:91:35:6F:00:3F:81:3A:90:37:AE:33:A2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05bd08b2-707d-4af2-a9e6-ab2a5cfa5cc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.117.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c5:fe:49:36:23:fe:4f:81:86:6e:ae:2b:99:0e:a3:3c:ea:98:
         1a:69:e0:ea:9a:82:ed:22:22:5c:45:dc:a9:f8:b3:06:f6:aa:
         a6:22:3a:ba:5d:7f:ef:be:18:bc:6d:e5:16:49:bd:30:0a:b9:
         48:d8:f0:95:e1:92:3f:31:1f:d4:f6:fb:1d:b1:88:02:d7:00:
         f9:f2:03:12:9f:34:9c:ef:9c:b7:48:9c:05:d8:f4:7d:df:5f:
         6c:d4:6d:e5:d4:a7:f9:c9:8a:0a:63:f2:6c:ad:89:c7:df:5b:
         7a:c2:65:b6:c0:1c:6f:f8:f9:7b:c8:23:2a:94:e9:b0:12:d1:
         21:c8:e6:c7:17:77:cd:6b:0f:c6:75:70:5e:93:0d:90:8b:b5:
         3b:81:45:d1:f0:ac:cb:a4:77:1f:aa:02:df:63:13:3b:b9:d5:
         f3:39:e4:5a:51:1d:93:29:b4:ec:81:6c:fd:22:2b:64:27:cf:
         a8:8c:99:5c:42:eb:7c:49:dd:23:2f:dd:01:b2:f5:6c:b7:69:
         81:06:a9:92:1b:8b:f2:25:90:a2:49:19:b6:3d:63:fd:7d:6a:
         26:31:bb:64:79:e0:2d:88:46:cb:3f:fd:5a:3b:2c:3a:dc:a7:
         07:7c:f9:9a:25:c8:e1:ee:b8:ae:bd:9f:69:8b:b3:d2:e9:2a:
         ed:f6:b6:61
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUYF8qN0BAQbSzTkvV/6kqGrqpTaQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDExMDAxMTE2WhcNMjcwMTA5MjM1OTU5
WjB6MUkwRwYDVQQFE0AzZWY4Y2Q2MzU5Zjk4NGVlYWM2NDZmYTJiMzNhZmRjOGQ4
NmUzYTRhMDc0YWIyNjZhYjM5ODVlMzc5Zjg3MWNmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDPb2bUajpaD9yf5z2SQlREOm5HsOMM+XiNuxFrF0vAQ/ep
N2LTYJDTUkxIAoZzufF92kaLkTVBvYG+Nkcg8ZHGxIGhUozaqH4Mz5F4V9Jfi8hk
Cpcb+ov6HJxUt+ZzT12XiWz9bGhh4Ghk4mFvsJKz02YiLtzAxUwMt/pTs0GzQJZf
e+dQsH4jEGLstn3KjQnydlxNTffpowmz2jGWFmyhzPPdulStjQJKW15+KmbQFhub
BpbFAwu4pgLLOvqFzrWIafYPPsYjcWsQEaDTksMXpIEYS6H+qpRPNRRe3hcLopnm
Be11LjTbyCYs5Q7wQIMe2Flz9DavjpfJ0MtVN6WtAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUb7af4iRU/e+RNW8AP4E6kDeuM6IwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzA1YmQwOGIyLTcwN2QtNGFmMi1hOWU2LWFiMmE1Y2ZhNWNjNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBASmdRAwDQYJKoZIhvcNAQELBQADggEBAMX+STYj/k+Bhm6uK5kOozzqmBpp
4Oqagu0iIlxF3Kn4swb2qqYiOrpdf+++GLxt5RZJvTAKuUjY8JXhkj8xH9T2+x2x
iALXAPnyAxKfNJzvnLdInAXY9H3fX2zUbeXUp/nJigpj8myticffW3rCZbbAHG/4
+XvIIyqU6bAS0SHI5scXd81rD8Z1cF6TDZCLtTuBRdHwrMukdx+qAt9jEzu51fM5
5FpRHZMptOyBbP0iK2Qnz6iMmVxC63xJ3SMv3QGy9Wy3aYEGqZIbi/IlkKJJGbY9
Y/19aiYxu2R54C2IRss//Vo7LDrcpwd8+ZolyOHuuK69n2mLs9LpKu32tmE=
-----END CERTIFICATE-----
Generated at Mon Nov 2 21:07:37 2026 by rpki-client