Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a4a5c37-6429-4730-82fb-4ab5c589cd7d.roa
File:                     2a4a5c37-6429-4730-82fb-4ab5c589cd7d.roa (raw, json)
Hash identifier:          vs6FsAhgNPtyg5hAEQYS+F2B0h8ADmB2PZ89fjsPiks=
Subject key identifier:   FB:11:3F:6B:0A:02:7C:CD:CD:93:B9:6A:69:79:42:75:B4:6B:95:5C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       361235F33B2A839506B01D957735B55A60FE9545
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a4a5c37-6429-4730-82fb-4ab5c589cd7d.roa
Signing time:             Mon 03 Aug 2026 01:02:01 +0000
ROA not before:           Mon 03 Aug 2026 01:02:01 +0000
ROA not after:            Sun 01 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        157.175.4.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:12:35:f3:3b:2a:83:95:06:b0:1d:95:77:35:b5:5a:60:fe:95:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  3 01:02:01 2026 GMT
            Not After : Nov  1 23:59:59 2026 GMT
        Subject: serialNumber=53684e6a9edc22e406358291674672128128ddf3cfc9b97806048135e7d1b332, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:81:c8:34:36:6c:5f:35:42:d9:db:91:a0:62:
                    1f:c8:a0:b0:28:13:83:97:2c:ae:83:7d:a0:e9:b3:
                    fb:d1:1f:84:d6:58:bf:44:a5:f2:f6:cf:4f:88:e2:
                    43:01:c4:1a:15:20:aa:2c:4d:36:35:05:84:78:c6:
                    9d:26:2f:87:19:b0:8b:b4:ad:94:43:0e:3a:63:6d:
                    73:17:fc:48:de:32:21:9f:ac:4c:67:0d:c5:7a:47:
                    f3:a7:f1:d0:95:0d:0c:83:ab:53:98:43:45:4e:5c:
                    6b:7a:ab:6b:65:aa:04:39:7a:a2:59:8c:4e:c9:61:
                    ea:9c:4a:64:12:5d:8a:68:5c:c8:e5:d3:1a:a0:4e:
                    95:e6:ca:0c:42:ce:52:f8:69:59:6d:da:e3:c6:a4:
                    be:99:de:9f:f1:58:2d:fa:d6:80:21:47:a0:83:90:
                    ae:b5:dc:d6:78:81:54:24:2a:2c:6d:e9:c0:03:64:
                    6f:d6:89:e3:fb:e1:ec:ae:d6:65:cd:e7:62:a0:12:
                    6b:d1:63:ac:89:32:2e:57:ca:30:ff:e9:92:31:b6:
                    61:6a:b7:7c:c1:44:48:a4:f3:57:12:eb:3f:be:7c:
                    04:8d:0d:b8:11:e6:ce:39:a3:eb:60:d9:ab:56:62:
                    ea:4f:1a:3e:03:a4:de:c0:2d:fd:39:63:10:b7:13:
                    c4:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:11:3F:6B:0A:02:7C:CD:CD:93:B9:6A:69:79:42:75:B4:6B:95:5C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a4a5c37-6429-4730-82fb-4ab5c589cd7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.175.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:22:56:a4:bb:a7:86:11:41:ab:9a:d5:f1:e6:32:c4:1f:71:
         81:2a:79:5f:65:67:ec:68:79:47:3c:b1:a9:f3:7c:63:71:0a:
         b6:5b:3d:65:bc:ed:0f:2f:b1:ae:7e:2c:21:d2:a5:4d:a3:05:
         2f:ac:13:17:18:f9:9a:77:70:02:41:5d:9e:e3:69:38:c5:8c:
         b3:d5:f2:5e:2e:fa:db:f7:ae:06:08:0c:35:fb:1c:70:4b:f8:
         0e:70:b7:87:dc:3e:f7:3d:31:94:98:7c:e9:91:5f:26:c3:74:
         cf:0b:6d:f9:56:4d:a7:f1:8b:f7:1b:01:2b:27:c2:12:50:d7:
         0c:9e:53:92:e6:4a:c1:1f:fa:f5:6d:65:07:b8:e5:38:a3:74:
         7e:6d:45:75:d5:d6:59:9e:76:0f:5c:d7:78:ab:fe:62:69:bb:
         09:fe:92:b4:ce:ae:e9:48:36:c6:c6:b9:a2:27:57:c7:80:30:
         0a:9c:cf:21:27:08:53:52:e0:71:88:0a:94:d8:c9:e3:14:bb:
         3a:40:ac:11:d3:e3:57:81:27:da:a1:af:34:ab:cb:25:21:4d:
         4a:32:4b:45:2b:5e:ee:50:0b:8a:eb:d5:46:26:08:95:5c:c4:
         95:b8:4a:14:a1:a0:c7:e8:7f:f1:87:ef:02:c6:b9:4d:5b:61:
         f3:fe:48:77
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUNhI18zsqg5UGsB2VdzW1WmD+lUUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODAzMDEwMjAxWhcNMjYxMTAxMjM1OTU5
WjB6MUkwRwYDVQQFE0A1MzY4NGU2YTllZGMyMmU0MDYzNTgyOTE2NzQ2NzIxMjgx
MjhkZGYzY2ZjOWI5NzgwNjA0ODEzNWU3ZDFiMzMyMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDFgcg0NmxfNULZ25GgYh/IoLAoE4OXLK6DfaDps/vRH4TW
WL9EpfL2z0+I4kMBxBoVIKosTTY1BYR4xp0mL4cZsIu0rZRDDjpjbXMX/EjeMiGf
rExnDcV6R/On8dCVDQyDq1OYQ0VOXGt6q2tlqgQ5eqJZjE7JYeqcSmQSXYpoXMjl
0xqgTpXmygxCzlL4aVlt2uPGpL6Z3p/xWC361oAhR6CDkK613NZ4gVQkKixt6cAD
ZG/WieP74eyu1mXN52KgEmvRY6yJMi5XyjD/6ZIxtmFqt3zBREik81cS6z++fASN
DbgR5s45o+tg2atWYupPGj4DpN7ALf05YxC3E8RfAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU+xE/awoCfM3Nk7lqaXlCdbRrlVwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzJhNGE1YzM3LTY0MjktNDczMC04MmZiLTRhYjVjNTg5Y2Q3ZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAKdrwQwDQYJKoZIhvcNAQELBQADggEBAAUiVqS7p4YRQaua1fHmMsQfcYEq
eV9lZ+xoeUc8sanzfGNxCrZbPWW87Q8vsa5+LCHSpU2jBS+sExcY+Zp3cAJBXZ7j
aTjFjLPV8l4u+tv3rgYIDDX7HHBL+A5wt4fcPvc9MZSYfOmRXybDdM8LbflWTafx
i/cbASsnwhJQ1wyeU5LmSsEf+vVtZQe45TijdH5tRXXV1lmedg9c13ir/mJpuwn+
krTOrulINsbGuaInV8eAMAqczyEnCFNS4HGICpTYyeMUuzpArBHT41eBJ9qhrzSr
yyUhTUoyS0UrXu5QC4rr1UYmCJVcxJW4ShShoMfof/GH7wLGuU1bYfP+SHc=
-----END CERTIFICATE-----
Generated at Mon Aug 3 05:43:38 2026 by rpki-client