Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1eb23eef-99d3-4b22-8f07-bef80007eb58.roa
File:                     1eb23eef-99d3-4b22-8f07-bef80007eb58.roa (raw, json)
Hash identifier:          hHEbOx6ls5YTO1rtm432PcgXREFNUYV1WA4OJGhj+wA=
Subject key identifier:   02:49:82:2B:E5:3B:1F:17:0A:52:FE:61:D7:C5:4A:FC:15:8D:ED:B1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1A6267F45D805AC85ABD675CE4BAE9FBA274E4E2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1eb23eef-99d3-4b22-8f07-bef80007eb58.roa
Signing time:             Mon 03 Aug 2026 01:10:10 +0000
ROA not before:           Mon 03 Aug 2026 01:10:10 +0000
ROA not after:            Sun 01 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        107.22.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 16 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:62:67:f4:5d:80:5a:c8:5a:bd:67:5c:e4:ba:e9:fb:a2:74:e4:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  3 01:10:10 2026 GMT
            Not After : Nov  1 23:59:59 2026 GMT
        Subject: serialNumber=cdee255a37aba01e36cbed06126a7343a7857c5583d217399bc836bcfad76827, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6b:37:eb:49:b4:1b:4d:cd:0c:89:4a:d2:ed:
                    55:6b:27:bc:ff:be:f1:44:e1:eb:52:86:e8:11:12:
                    d1:b6:a0:26:22:e6:71:71:1c:3a:54:f2:ef:82:74:
                    23:46:22:d7:36:52:d6:a9:0a:c2:72:a7:82:a6:30:
                    1b:c3:bd:be:cf:de:44:d3:eb:58:fe:5e:38:f0:ca:
                    e2:a2:d2:5c:58:8c:57:d6:c0:08:ba:c4:de:e3:86:
                    90:b3:59:2e:b1:dd:43:67:ed:a2:66:af:2b:37:09:
                    8d:9b:dd:55:3f:67:7b:d3:a4:68:19:68:45:c7:2e:
                    04:3c:e2:42:7b:cf:73:d9:43:9e:09:96:80:80:be:
                    f2:2d:6a:e4:01:c1:9f:82:68:c2:d8:e7:52:29:08:
                    dd:cf:c1:0e:c1:38:e4:20:21:0c:fe:d4:4b:85:23:
                    84:0f:8a:a2:2f:ac:00:a6:25:ae:23:17:54:31:76:
                    4a:82:10:d5:25:a3:25:f9:cd:6f:bb:5d:8e:81:bb:
                    8e:40:00:44:25:28:5b:61:f1:e7:c8:c3:4a:a8:8b:
                    2a:81:af:16:48:cc:1e:0d:41:77:5d:7c:6a:4e:f5:
                    ee:e2:e7:33:3b:2e:74:3c:bc:16:b7:1f:59:96:f4:
                    ac:ad:b0:41:3f:23:7d:12:77:84:6e:04:fd:c5:3e:
                    d2:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:49:82:2B:E5:3B:1F:17:0A:52:FE:61:D7:C5:4A:FC:15:8D:ED:B1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1eb23eef-99d3-4b22-8f07-bef80007eb58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.22.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9a:74:ba:72:e1:f4:3a:51:ec:64:9e:cf:9f:4e:16:31:d1:a6:
         f8:cb:01:5a:00:2c:29:c4:fd:ec:50:59:27:95:36:63:75:bd:
         e3:65:5e:33:3f:73:2a:49:fc:ab:be:6a:b4:c6:ae:dc:0c:34:
         ad:3a:e6:a6:9e:54:d3:a4:b5:e1:fd:0b:d3:c2:12:c2:4d:f9:
         b8:16:65:dd:61:8f:55:45:75:95:60:d6:64:98:b9:17:34:78:
         5e:9d:fe:d8:c0:ef:f9:63:73:82:0f:ed:91:89:69:9b:7b:71:
         7b:bf:64:b1:89:54:db:be:38:79:a9:3a:95:84:c2:73:4a:d4:
         49:6d:14:bc:e4:81:92:0a:33:2a:53:26:8c:6a:f1:fd:c4:43:
         52:c4:03:12:3d:8a:74:4b:16:65:1a:12:83:28:12:34:ac:d9:
         16:14:d7:af:2d:f3:07:a5:47:20:1f:a3:2a:bb:a2:d9:e8:41:
         b8:0c:1f:13:3a:59:c4:a5:15:c8:1d:5e:36:fd:86:6a:9e:10:
         3c:9d:de:d5:a6:e4:23:66:b5:5d:58:9a:35:cf:b0:61:1d:05:
         c1:78:79:2c:8d:f9:10:58:2c:a2:05:67:9a:4c:c2:cf:c4:9c:
         a6:83:14:bd:1d:1c:19:d6:48:ec:5f:39:00:1e:31:d3:90:ed:
         14:20:d9:1f
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUGmJn9F2AWshavWdc5Lrp+6J05OIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODAzMDExMDEwWhcNMjYxMTAxMjM1OTU5
WjB6MUkwRwYDVQQFE0BjZGVlMjU1YTM3YWJhMDFlMzZjYmVkMDYxMjZhNzM0M2E3
ODU3YzU1ODNkMjE3Mzk5YmM4MzZiY2ZhZDc2ODI3MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC2azfrSbQbTc0MiUrS7VVrJ7z/vvFE4etShugREtG2oCYi
5nFxHDpU8u+CdCNGItc2UtapCsJyp4KmMBvDvb7P3kTT61j+XjjwyuKi0lxYjFfW
wAi6xN7jhpCzWS6x3UNn7aJmrys3CY2b3VU/Z3vTpGgZaEXHLgQ84kJ7z3PZQ54J
loCAvvItauQBwZ+CaMLY51IpCN3PwQ7BOOQgIQz+1EuFI4QPiqIvrACmJa4jF1Qx
dkqCENUloyX5zW+7XY6Bu45AAEQlKFth8efIw0qoiyqBrxZIzB4NQXddfGpO9e7i
5zM7LnQ8vBa3H1mW9KytsEE/I30Sd4RuBP3FPtLrAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUAkmCK+U7HxcKUv5h18VK/BWN7bEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzFlYjIzZWVmLTk5ZDMtNGIyMi04ZjA3LWJlZjgwMDA3ZWI1OC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAVrFqAwDQYJKoZIhvcNAQELBQADggEBAJp0unLh9DpR7GSez59OFjHRpvjL
AVoALCnE/exQWSeVNmN1veNlXjM/cypJ/Ku+arTGrtwMNK065qaeVNOkteH9C9PC
EsJN+bgWZd1hj1VFdZVg1mSYuRc0eF6d/tjA7/ljc4IP7ZGJaZt7cXu/ZLGJVNu+
OHmpOpWEwnNK1EltFLzkgZIKMypTJoxq8f3EQ1LEAxI9inRLFmUaEoMoEjSs2RYU
168t8welRyAfoyq7otnoQbgMHxM6WcSlFcgdXjb9hmqeEDyd3tWm5CNmtV1YmjXP
sGEdBcF4eSyN+RBYLKIFZ5pMws/EnKaDFL0dHBnWSOxfOQAeMdOQ7RQg2R8=
-----END CERTIFICATE-----
Generated at Sat Aug 15 07:43:51 2026 by rpki-client