Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/201e6c76-9110-40c2-8bb3-b0de84d90ed7.roa
File:                     201e6c76-9110-40c2-8bb3-b0de84d90ed7.roa (raw, json)
Hash identifier:          ZpMC9kKGFdHq613mjjmrOAl5zmEO+wsb9qokRICY1AY=
Subject key identifier:   45:33:0C:7E:30:F5:72:C5:30:93:74:CE:60:A5:4C:50:F8:A6:39:BE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       41780148A0717BF35DCA9D7F347DB011F4477EB2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/201e6c76-9110-40c2-8bb3-b0de84d90ed7.roa
Signing time:             Thu 15 Oct 2026 16:02:30 +0000
ROA not before:           Thu 15 Oct 2026 16:02:30 +0000
ROA not after:            Wed 13 Jan 2027 23:59:59 +0000
asID:                     14618
IP address blocks:        98.82.144.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:78:01:48:a0:71:7b:f3:5d:ca:9d:7f:34:7d:b0:11:f4:47:7e:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 15 16:02:30 2026 GMT
            Not After : Jan 13 23:59:59 2027 GMT
        Subject: serialNumber=6c00fd8a253bd6f24d966aa67b8ed916623a0f50ba0bc7d612355303af0fd4dd, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:68:72:59:74:7d:78:09:e7:92:cf:48:f8:65:
                    cf:68:30:49:43:f1:4d:b8:5a:53:0f:89:fd:63:e1:
                    ec:67:f7:f7:27:4b:bc:cc:36:8f:5b:92:d2:6f:6a:
                    f7:fa:f3:0e:67:01:1f:e8:9f:f9:a0:60:7d:9a:91:
                    05:07:ab:03:be:3d:8d:5d:7e:79:1b:12:35:6d:44:
                    4b:43:73:f6:d9:24:92:84:e7:54:51:cd:c2:cd:8e:
                    51:34:25:ba:f0:bc:e0:90:74:b3:33:f0:a1:23:82:
                    1a:98:85:7f:3b:82:43:a6:e9:17:7f:50:ab:bf:b9:
                    fa:a6:ea:0f:4e:da:34:f8:26:03:83:33:b1:8d:ad:
                    74:ed:5b:b2:3d:78:09:83:c8:28:6d:c0:04:0c:a3:
                    c9:11:e4:3d:52:00:8b:be:c4:27:a6:ab:07:f0:c5:
                    c0:e1:65:40:aa:21:1f:03:6b:96:34:67:1e:5f:87:
                    c6:53:88:58:b9:11:50:1f:89:9b:d9:82:4f:da:ad:
                    ef:b0:d3:57:28:40:77:8c:54:cb:a0:29:37:e4:6f:
                    fc:bd:81:86:8d:a2:7d:d6:55:fe:d4:bb:e9:d0:5a:
                    31:e3:65:b7:51:b1:b8:95:25:6c:bb:23:cc:e5:8a:
                    bf:9d:12:13:ce:7a:20:aa:6a:49:b5:36:b9:92:3e:
                    11:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:33:0C:7E:30:F5:72:C5:30:93:74:CE:60:A5:4C:50:F8:A6:39:BE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/201e6c76-9110-40c2-8bb3-b0de84d90ed7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.82.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         54:2b:1c:6b:7b:0b:24:e8:dc:7e:5a:a7:ac:33:51:ec:9a:5b:
         81:36:71:07:69:f6:76:2c:e5:e9:85:07:c7:24:e2:64:77:48:
         2b:36:c7:d5:a0:57:d5:4e:19:cf:40:46:d1:87:67:6b:73:9d:
         81:a4:6c:9d:34:0b:3b:5d:b3:3f:eb:e0:f7:71:d3:41:5c:21:
         41:dd:d2:bc:6f:0a:a5:4e:2f:c2:ac:87:37:4a:94:36:e6:c0:
         b3:93:65:41:40:8a:d5:f8:79:98:0b:1b:5a:80:f8:c1:28:40:
         64:58:b6:2d:f2:f4:6b:be:1a:f0:75:bc:b9:95:78:0e:95:64:
         b3:c7:86:6e:bd:ec:2e:6b:8d:6b:5a:5a:e0:90:75:67:92:53:
         0e:d9:b6:67:88:7a:00:5c:10:b9:6f:a9:85:1b:63:32:7a:8a:
         58:82:c3:e1:13:17:5f:13:0b:57:db:8d:de:32:6e:d1:97:75:
         58:05:96:58:9c:2d:b4:1a:ec:f2:86:02:99:15:da:ab:41:7c:
         a4:f3:c5:bb:fe:b4:84:25:b8:89:01:ca:1c:f6:ad:58:26:94:
         d0:f5:25:20:fc:20:c1:94:24:40:46:17:7c:3d:a7:39:1a:d4:
         e6:98:42:09:f4:38:9e:77:b5:13:42:33:0d:6b:4a:9c:ce:92:
         37:e4:b4:59
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUQXgBSKBxe/Ndyp1/NH2wEfRHfrIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDE1MTYwMjMwWhcNMjcwMTEzMjM1OTU5
WjB6MUkwRwYDVQQFE0A2YzAwZmQ4YTI1M2JkNmYyNGQ5NjZhYTY3YjhlZDkxNjYy
M2EwZjUwYmEwYmM3ZDYxMjM1NTMwM2FmMGZkNGRkMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCcaHJZdH14CeeSz0j4Zc9oMElD8U24WlMPif1j4exn9/cn
S7zMNo9bktJvavf68w5nAR/on/mgYH2akQUHqwO+PY1dfnkbEjVtREtDc/bZJJKE
51RRzcLNjlE0JbrwvOCQdLMz8KEjghqYhX87gkOm6Rd/UKu/ufqm6g9O2jT4JgOD
M7GNrXTtW7I9eAmDyChtwAQMo8kR5D1SAIu+xCemqwfwxcDhZUCqIR8Da5Y0Zx5f
h8ZTiFi5EVAfiZvZgk/are+w01coQHeMVMugKTfkb/y9gYaNon3WVf7Uu+nQWjHj
ZbdRsbiVJWy7I8zlir+dEhPOeiCqakm1NrmSPhE3AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQURTMMfjD1csUwk3TOYKVMUPimOb4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzIwMWU2Yzc2LTkxMTAtNDBjMi04YmIzLWIwZGU4NGQ5MGVkNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAFiUpAwDQYJKoZIhvcNAQELBQADggEBAFQrHGt7CyTo3H5ap6wzUeyaW4E2
cQdp9nYs5emFB8ck4mR3SCs2x9WgV9VOGc9ARtGHZ2tznYGkbJ00Cztdsz/r4Pdx
00FcIUHd0rxvCqVOL8KshzdKlDbmwLOTZUFAitX4eZgLG1qA+MEoQGRYti3y9Gu+
GvB1vLmVeA6VZLPHhm697C5rjWtaWuCQdWeSUw7ZtmeIegBcELlvqYUbYzJ6iliC
w+ETF18TC1fbjd4ybtGXdVgFllicLbQa7PKGApkV2qtBfKTzxbv+tIQluIkByhz2
rVgmlND1JSD8IMGUJEBGF3w9pzka1OaYQgn0OJ53tRNCMw1rSpzOkjfktFk=
-----END CERTIFICATE-----
Generated at Wed Nov 4 05:32:36 2026 by rpki-client