Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/25948a2b-e584-4f1c-b0bf-a7f467c73fa5.roa
File:                     25948a2b-e584-4f1c-b0bf-a7f467c73fa5.roa (raw, json)
Hash identifier:          Jt9UwMqmzS6MHwvUrmqfGn4GC738Rz0Xqf+gVqNcI6A=
Subject key identifier:   90:82:0A:44:12:CA:56:2D:AB:75:9E:A2:2E:B3:18:59:2C:07:84:1D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       095EBE430BF72A9D8D939C95FFCC402F7752494A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/25948a2b-e584-4f1c-b0bf-a7f467c73fa5.roa
Signing time:             Fri 23 Oct 2026 00:10:07 +0000
ROA not before:           Fri 23 Oct 2026 00:10:07 +0000
ROA not after:            Thu 21 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        56.15.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:5e:be:43:0b:f7:2a:9d:8d:93:9c:95:ff:cc:40:2f:77:52:49:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 23 00:10:07 2026 GMT
            Not After : Jan 21 23:59:59 2027 GMT
        Subject: serialNumber=6849102fe28ac44c43e1eff8bd7d0fe87c25483435a475d80e73dc108f0a0222, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:09:19:53:a8:27:2f:0e:38:7c:5d:9e:fe:58:
                    fe:bf:92:70:b9:37:eb:76:dd:d1:c9:34:a9:26:3f:
                    d7:aa:92:eb:b7:8a:7f:79:0a:1a:14:75:8f:1f:1a:
                    ea:ae:90:f7:78:1d:8e:b3:10:47:7d:39:94:44:1e:
                    27:5d:ff:e8:0a:4f:e7:03:ae:66:f4:fb:ba:ef:82:
                    32:de:c7:ed:a7:ef:d6:01:1a:70:05:d6:3b:0a:45:
                    48:88:a7:df:b7:d7:a0:bc:d9:6a:60:1d:75:a2:a0:
                    de:b1:ef:82:9b:22:5f:91:89:e4:32:04:b1:a4:0f:
                    da:2f:d5:01:b7:4b:ce:ce:26:e0:21:b2:28:da:39:
                    ab:38:06:cb:bd:66:84:1b:e3:3b:dc:bb:ab:b4:c0:
                    cd:c6:1a:58:20:d5:41:b5:73:3e:99:f0:9f:da:77:
                    88:c9:37:d1:53:a8:f1:ae:05:57:f4:9c:8c:f5:93:
                    01:3f:5a:59:41:f3:b6:11:87:c3:2d:f6:80:00:88:
                    f3:c7:f5:2d:e9:a8:d9:0e:2b:bf:3e:4b:39:16:4d:
                    90:5f:05:c9:fc:dc:99:3b:7a:b4:72:ea:45:a2:61:
                    79:ea:c0:8b:15:3c:c8:1e:ea:cf:61:9b:a4:da:6a:
                    eb:67:67:63:4e:89:3f:eb:a4:7e:a0:b6:6f:f1:11:
                    36:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:82:0A:44:12:CA:56:2D:AB:75:9E:A2:2E:B3:18:59:2C:07:84:1D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/25948a2b-e584-4f1c-b0bf-a7f467c73fa5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.15.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         11:c7:66:40:41:b2:71:35:dd:20:4f:4d:19:11:68:ae:e7:65:
         ce:09:83:f1:c6:78:2c:96:7c:68:86:18:22:ec:f7:68:a1:ff:
         fa:60:15:70:91:cb:ff:5f:43:c4:a2:4c:38:f0:95:7a:fc:b5:
         c1:c5:d7:cf:59:ed:ff:f7:c5:57:eb:89:62:5f:e6:2e:3e:71:
         89:1e:fc:82:28:f7:ac:db:ff:98:a6:e6:e1:04:06:64:1d:39:
         b0:21:65:97:da:d5:96:75:25:38:e6:2d:be:65:ad:e2:a1:01:
         b8:37:cb:af:ba:f9:2f:3c:d2:68:b5:b9:5b:63:5f:a1:3c:7d:
         cc:36:df:0e:f3:93:bb:32:15:01:94:45:bb:c0:50:d3:10:e4:
         4d:6d:fb:9d:ba:bd:c0:2e:fc:6e:1c:ca:b5:56:ab:32:14:5d:
         7b:f8:5b:5f:ea:a6:f0:50:87:5b:73:00:2e:00:ce:38:8f:e1:
         0e:fc:0a:cb:ab:a9:a3:eb:b7:13:04:7d:90:ec:66:b2:94:0e:
         93:14:ce:cd:a5:38:70:74:45:bc:5b:50:97:d3:d0:f9:4e:2e:
         07:09:8b:bd:26:47:b2:ad:61:da:45:3a:e6:15:6b:7b:4c:80:
         3e:d2:68:4c:d6:6e:47:94:31:31:40:2d:60:e5:1c:6c:6c:52:
         75:55:be:55
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUCV6+Qwv3Kp2Nk5yV/8xAL3dSSUowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIzMDAxMDA3WhcNMjcwMTIxMjM1OTU5
WjB6MUkwRwYDVQQFE0A2ODQ5MTAyZmUyOGFjNDRjNDNlMWVmZjhiZDdkMGZlODdj
MjU0ODM0MzVhNDc1ZDgwZTczZGMxMDhmMGEwMjIyMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC9CRlTqCcvDjh8XZ7+WP6/knC5N+t23dHJNKkmP9eqkuu3
in95ChoUdY8fGuqukPd4HY6zEEd9OZREHidd/+gKT+cDrmb0+7rvgjLex+2n79YB
GnAF1jsKRUiIp9+316C82WpgHXWioN6x74KbIl+RieQyBLGkD9ov1QG3S87OJuAh
sijaOas4Bsu9ZoQb4zvcu6u0wM3GGlgg1UG1cz6Z8J/ad4jJN9FTqPGuBVf0nIz1
kwE/WllB87YRh8Mt9oAAiPPH9S3pqNkOK78+SzkWTZBfBcn83Jk7erRy6kWiYXnq
wIsVPMge6s9hm6TaautnZ2NOiT/rpH6gtm/xETaRAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUkIIKRBLKVi2rdZ6iLrMYWSwHhB0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzI1OTQ4YTJiLWU1ODQtNGYxYy1iMGJmLWE3ZjQ2N2M3M2ZhNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA4DzANBgkqhkiG9w0BAQsFAAOCAQEAEcdmQEGycTXdIE9NGRForudlzgmD
8cZ4LJZ8aIYYIuz3aKH/+mAVcJHL/19DxKJMOPCVevy1wcXXz1nt//fFV+uJYl/m
Lj5xiR78gij3rNv/mKbm4QQGZB05sCFll9rVlnUlOOYtvmWt4qEBuDfLr7r5LzzS
aLW5W2NfoTx9zDbfDvOTuzIVAZRFu8BQ0xDkTW37nbq9wC78bhzKtVarMhRde/hb
X+qm8FCHW3MALgDOOI/hDvwKy6upo+u3EwR9kOxmspQOkxTOzaU4cHRFvFtQl9PQ
+U4uBwmLvSZHsq1h2kU65hVre0yAPtJoTNZuR5QxMUAtYOUcbGxSdVW+VQ==
-----END CERTIFICATE-----
Generated at Tue Nov 3 05:28:44 2026 by rpki-client