Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2279a492-73db-41f0-98ae-bd6039e89d3b.roa
File:                     2279a492-73db-41f0-98ae-bd6039e89d3b.roa (raw, json)
Hash identifier:          x8XF6UlWQjkNthL9Arb/30vtLgom05zPUxl8hQT+7u4=
Subject key identifier:   DD:C8:6A:EB:C8:04:1A:20:6E:ED:CE:81:0E:97:66:3A:C3:76:09:CC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       136F03AC1FA0D9708634F36D9B61F5B2390BCC3B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2279a492-73db-41f0-98ae-bd6039e89d3b.roa
Signing time:             Mon 27 Apr 2026 00:20:26 +0000
ROA not before:           Mon 27 Apr 2026 00:20:26 +0000
ROA not after:            Sun 26 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        134.31.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 02 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:6f:03:ac:1f:a0:d9:70:86:34:f3:6d:9b:61:f5:b2:39:0b:cc:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 27 00:20:26 2026 GMT
            Not After : Jul 26 23:59:59 2026 GMT
        Subject: serialNumber=f4a9d1aca35870f9de85615285a56903160edb9be9b42b546b875771515aa127, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:33:ba:ce:26:0f:bd:2e:5a:47:98:43:4d:47:
                    33:29:98:3b:eb:79:49:5e:4e:9e:db:98:71:67:da:
                    96:b4:3f:d0:36:d2:fe:04:f6:a2:86:57:1c:58:c7:
                    e1:c3:a2:64:54:c1:36:fa:87:87:75:6d:1e:69:57:
                    da:ba:e6:f7:7f:18:98:f0:ed:d5:93:e1:da:4c:4d:
                    41:d4:36:12:ad:ff:39:c3:1d:53:37:92:28:1e:43:
                    16:12:f5:22:ba:ef:a6:16:01:78:f5:1e:c5:6c:d8:
                    f1:6c:3c:a6:54:79:37:50:c6:df:8b:de:d0:73:cf:
                    4b:9e:5c:89:94:4f:fa:f8:6f:31:1a:61:86:70:8d:
                    0b:76:11:34:3e:85:f7:4e:c1:2e:e2:67:35:7d:7c:
                    98:6f:9b:2d:87:21:89:00:60:c5:1e:57:f1:e0:a5:
                    38:db:5d:29:9c:b3:d5:06:7d:49:0b:1e:c9:a5:81:
                    83:0c:aa:be:e0:a2:5b:22:13:04:35:da:6d:52:0b:
                    7e:3c:77:8d:85:72:36:08:80:f3:4e:1d:f0:34:fc:
                    5a:c7:8b:80:48:d1:86:36:25:0b:bd:a6:47:d2:4f:
                    0c:98:da:b2:2e:fe:f1:2b:64:df:dc:fb:72:3d:d8:
                    96:ff:e8:5d:b7:95:59:b7:b7:57:b7:c2:61:e5:01:
                    3e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:C8:6A:EB:C8:04:1A:20:6E:ED:CE:81:0E:97:66:3A:C3:76:09:CC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2279a492-73db-41f0-98ae-bd6039e89d3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.31.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         39:b8:52:70:e4:22:53:74:cb:65:86:91:30:2d:a7:b6:19:76:
         88:5e:c0:5b:8e:a8:ef:9d:20:3d:97:8c:2f:02:90:82:4e:1f:
         df:b4:e0:f1:82:d4:2d:5f:97:5e:19:db:f7:eb:94:86:9d:53:
         4e:98:3e:68:82:4c:14:e6:35:9a:d3:44:5f:24:14:df:3b:da:
         82:9f:5d:c6:06:4a:3d:b6:f7:8b:5c:8f:67:2c:6e:ef:12:a0:
         c6:a8:17:53:d8:1a:0c:7e:ea:7e:09:56:57:e9:16:66:f3:ec:
         0a:2b:8d:a9:f5:c0:66:8e:b2:84:79:bf:4b:51:86:7b:4d:86:
         51:e5:fe:81:32:fb:2d:24:8f:8e:8b:68:cb:a1:b0:e3:a3:51:
         48:d9:28:f0:b2:83:33:8c:3b:6a:d7:b7:92:7f:2c:fe:e9:fa:
         ed:c1:a7:84:af:c4:83:84:da:56:f5:65:9d:34:9b:fd:9e:96:
         9f:09:cd:b5:4c:1f:d7:22:5e:65:df:5c:00:40:64:63:5e:bd:
         a0:0f:1b:b5:13:45:e3:f9:7a:f3:6c:a1:c4:17:68:e4:d5:1b:
         5e:28:76:1a:0e:ce:c0:5a:74:7b:81:9e:ed:83:dc:b1:a6:c5:
         0d:7f:96:db:04:cf:c1:49:fb:4c:86:0a:dd:d2:57:83:0c:cd:
         e6:be:4b:cd
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUE28DrB+g2XCGNPNtm2H1sjkLzDswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNDI3MDAyMDI2WhcNMjYwNzI2MjM1OTU5
WjB6MUkwRwYDVQQFE0BmNGE5ZDFhY2EzNTg3MGY5ZGU4NTYxNTI4NWE1NjkwMzE2
MGVkYjliZTliNDJiNTQ2Yjg3NTc3MTUxNWFhMTI3MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDDM7rOJg+9LlpHmENNRzMpmDvreUleTp7bmHFn2pa0P9A2
0v4E9qKGVxxYx+HDomRUwTb6h4d1bR5pV9q65vd/GJjw7dWT4dpMTUHUNhKt/znD
HVM3kigeQxYS9SK676YWAXj1HsVs2PFsPKZUeTdQxt+L3tBzz0ueXImUT/r4bzEa
YYZwjQt2ETQ+hfdOwS7iZzV9fJhvmy2HIYkAYMUeV/HgpTjbXSmcs9UGfUkLHsml
gYMMqr7golsiEwQ12m1SC348d42FcjYIgPNOHfA0/FrHi4BI0YY2JQu9pkfSTwyY
2rIu/vErZN/c+3I92Jb/6F23lVm3t1e3wmHlAT6DAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQU3chq68gEGiBu7c6BDpdmOsN2CcwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzIyNzlhNDkyLTczZGItNDFmMC05OGFlLWJkNjAzOWU4OWQzYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwCGHzANBgkqhkiG9w0BAQsFAAOCAQEAObhScOQiU3TLZYaRMC2nthl2iF7A
W46o750gPZeMLwKQgk4f37Tg8YLULV+XXhnb9+uUhp1TTpg+aIJMFOY1mtNEXyQU
3zvagp9dxgZKPbb3i1yPZyxu7xKgxqgXU9gaDH7qfglWV+kWZvPsCiuNqfXAZo6y
hHm/S1GGe02GUeX+gTL7LSSPjotoy6Gw46NRSNko8LKDM4w7ate3kn8s/un67cGn
hK/Eg4TaVvVlnTSb/Z6WnwnNtUwf1yJeZd9cAEBkY169oA8btRNF4/l682yhxBdo
5NUbXih2Gg7OwFp0e4Ge7YPcsabFDX+W2wTPwUn7TIYK3dJXgwzN5r5LzQ==
-----END CERTIFICATE-----
Generated at Fri May 1 06:14:45 2026 by rpki-client