Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/177cca58-b2e1-4214-95a1-3d31e323a0c9.roa
File:                     177cca58-b2e1-4214-95a1-3d31e323a0c9.roa (raw, json)
Hash identifier:          z3ObbKlk98TUUdVRZ7nJpjGEV4idZ36qjEgsvWVPBww=
Subject key identifier:   2D:DC:FF:C7:F3:EF:5A:9B:74:D7:E4:6F:00:58:17:87:AA:86:86:B8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4069A101E7D04C53605768C20F301820144F29BC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/177cca58-b2e1-4214-95a1-3d31e323a0c9.roa
Signing time:             Mon 03 Aug 2026 01:00:59 +0000
ROA not before:           Mon 03 Aug 2026 01:00:59 +0000
ROA not after:            Sun 01 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        161.178.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:69:a1:01:e7:d0:4c:53:60:57:68:c2:0f:30:18:20:14:4f:29:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  3 01:00:59 2026 GMT
            Not After : Nov  1 23:59:59 2026 GMT
        Subject: serialNumber=2b854f1052c17ae26c3e5aa43dde4248fd6dee06f0bcbf5e160ac8f6a938e5e9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:61:1c:42:62:e0:0c:94:93:8b:8e:79:2a:ee:
                    7a:03:f2:68:75:c8:84:f7:1e:76:8d:58:45:50:8b:
                    73:ba:21:72:a9:c2:2c:e4:9f:86:5b:a8:9f:3d:30:
                    3d:60:0a:79:f5:06:bb:a4:77:a5:b7:6a:a4:63:c7:
                    8d:26:8b:27:29:c9:83:46:df:32:0c:3a:b5:5b:b8:
                    43:7b:c9:79:20:fd:35:36:b6:af:5d:d9:37:51:11:
                    de:17:a0:0e:50:23:0a:b7:ab:49:3b:5f:f1:83:f8:
                    84:fc:a6:a1:5a:bf:99:bd:c5:68:57:a3:84:2d:b4:
                    37:bb:66:4a:2e:d1:b0:5b:99:62:c7:91:64:f9:cc:
                    89:7b:1e:ac:36:02:43:bd:29:94:e4:d2:ec:29:b4:
                    d2:fb:e5:86:d3:ae:4a:58:4f:fb:00:46:11:5b:cd:
                    de:83:97:10:7e:2e:bf:e4:4d:3c:fe:c6:3f:a2:5f:
                    75:05:c2:cb:6b:5c:bc:a4:4b:27:d8:0e:44:73:97:
                    19:73:6c:54:4e:18:ba:0c:27:94:f6:67:21:12:2c:
                    ee:8a:e3:7a:7e:a9:11:3d:09:2f:b1:eb:8a:d0:5a:
                    3c:f6:eb:f0:c8:e7:5b:3b:23:e1:7e:26:52:8a:8b:
                    6a:cb:56:76:bc:41:ec:24:b1:65:d1:5f:ee:20:d8:
                    eb:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:DC:FF:C7:F3:EF:5A:9B:74:D7:E4:6F:00:58:17:87:AA:86:86:B8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/177cca58-b2e1-4214-95a1-3d31e323a0c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.178.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         7f:a1:6f:ef:59:56:08:dd:19:2c:ed:dc:12:e2:7c:f0:7a:00:
         46:43:58:0d:62:fe:4e:6b:23:cf:c5:d9:45:ad:b1:f5:40:62:
         c9:fc:83:b3:13:9c:8e:36:b8:09:81:50:15:cc:54:40:af:bf:
         1e:7b:dd:6d:fa:41:73:9b:b0:79:bb:7f:3a:98:60:14:99:34:
         ba:03:88:8c:1b:f6:22:ec:61:17:45:a6:c4:7c:28:64:1c:86:
         0c:49:e4:32:84:5b:9c:34:23:2a:61:f0:54:5b:ed:76:81:f4:
         29:94:3c:42:d7:7e:3c:da:27:17:c5:90:d4:8a:f5:aa:87:21:
         6c:d6:9c:ae:9b:e3:08:9f:23:36:8b:73:77:83:ee:f2:29:0f:
         26:7e:b0:22:11:48:ee:29:97:62:ee:27:be:53:7f:3e:91:d5:
         1d:55:d5:8b:98:c2:e2:f8:ea:bb:9e:76:14:1b:d0:cb:ef:53:
         4d:bf:65:ff:aa:cd:a2:8b:4d:0a:86:96:34:d6:9f:89:16:0c:
         7b:0d:b3:dc:99:cd:08:7e:c4:e1:78:2c:be:68:e2:2e:80:00:
         85:ef:80:bf:e0:b6:d0:61:c2:12:b8:e5:13:97:be:b9:61:2e:
         09:83:c9:89:68:35:ad:1c:fe:f0:4d:aa:8a:b3:c0:b4:c4:9f:
         df:5b:18:a2
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUQGmhAefQTFNgV2jCDzAYIBRPKbwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODAzMDEwMDU5WhcNMjYxMTAxMjM1OTU5
WjB6MUkwRwYDVQQFE0AyYjg1NGYxMDUyYzE3YWUyNmMzZTVhYTQzZGRlNDI0OGZk
NmRlZTA2ZjBiY2JmNWUxNjBhYzhmNmE5MzhlNWU5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCwYRxCYuAMlJOLjnkq7noD8mh1yIT3HnaNWEVQi3O6IXKp
wizkn4ZbqJ89MD1gCnn1Brukd6W3aqRjx40miycpyYNG3zIMOrVbuEN7yXkg/TU2
tq9d2TdREd4XoA5QIwq3q0k7X/GD+IT8pqFav5m9xWhXo4QttDe7Zkou0bBbmWLH
kWT5zIl7Hqw2AkO9KZTk0uwptNL75YbTrkpYT/sARhFbzd6DlxB+Lr/kTTz+xj+i
X3UFwstrXLykSyfYDkRzlxlzbFROGLoMJ5T2ZyESLO6K43p+qRE9CS+x64rQWjz2
6/DI51s7I+F+JlKKi2rLVna8QewksWXRX+4g2OthAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQULdz/x/PvWpt01+RvAFgXh6qGhrgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzE3N2NjYTU4LWIyZTEtNDIxNC05NWExLTNkMzFlMzIzYTBjOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAWhsoAwDQYJKoZIhvcNAQELBQADggEBAH+hb+9ZVgjdGSzt3BLifPB6AEZD
WA1i/k5rI8/F2UWtsfVAYsn8g7MTnI42uAmBUBXMVECvvx573W36QXObsHm7fzqY
YBSZNLoDiIwb9iLsYRdFpsR8KGQchgxJ5DKEW5w0Iyph8FRb7XaB9CmUPELXfjza
JxfFkNSK9aqHIWzWnK6b4wifIzaLc3eD7vIpDyZ+sCIRSO4pl2LuJ75Tfz6R1R1V
1YuYwuL46ruedhQb0MvvU02/Zf+qzaKLTQqGljTWn4kWDHsNs9yZzQh+xOF4LL5o
4i6AAIXvgL/gttBhwhK45ROXvrlhLgmDyYloNa0c/vBNqoqzwLTEn99bGKI=
-----END CERTIFICATE-----
Generated at Mon Aug 3 05:43:33 2026 by rpki-client