Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/30562a60-1701-4170-b8a8-701d0efcb738.roa
File:                     30562a60-1701-4170-b8a8-701d0efcb738.roa (raw, json)
Hash identifier:          2MFvIHea3SNCY4uKVljgsm6hmCAuchPVIsP6wspRl40=
Subject key identifier:   7C:1F:08:1B:61:55:6D:EE:8C:76:4C:3D:50:D7:2A:99:1E:47:9D:47
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1E6CA86F53B9AFD2E07C72BBA424DF6A98594967
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/30562a60-1701-4170-b8a8-701d0efcb738.roa
Signing time:             Fri 07 Aug 2026 00:41:48 +0000
ROA not before:           Fri 07 Aug 2026 00:41:48 +0000
ROA not after:            Thu 05 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        202.80.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:6c:a8:6f:53:b9:af:d2:e0:7c:72:bb:a4:24:df:6a:98:59:49:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  7 00:41:48 2026 GMT
            Not After : Nov  5 23:59:59 2026 GMT
        Subject: serialNumber=006361e160ae614e5779574cc57c28377a671519ddd861d12e086e2a3d5c50d4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:75:20:7a:18:ee:8b:f4:d7:af:45:98:d9:c8:
                    72:1a:45:80:8f:32:36:96:77:05:1a:8f:d2:8b:66:
                    3a:ad:a5:cb:2a:b3:19:4c:50:f2:c6:3b:7e:20:6c:
                    77:44:ed:13:5c:26:41:86:f5:cb:2b:ae:b1:90:f4:
                    f7:e4:90:f7:0f:a2:e2:9f:a8:50:2e:01:2c:e3:de:
                    e0:2b:69:bc:43:ff:0a:f0:d0:07:86:41:14:7c:db:
                    84:a8:a6:50:29:d2:d7:c3:6f:13:75:08:a2:54:41:
                    0d:17:dc:1a:eb:90:5d:aa:30:e3:2f:13:0d:7d:5a:
                    f4:31:69:a3:cc:d6:5d:3c:8e:29:16:d7:3f:31:c5:
                    51:72:61:1a:8f:ed:35:63:e2:f5:d3:30:ea:43:ed:
                    37:4a:9c:54:9c:27:18:9a:fc:00:b4:35:7a:f7:66:
                    b1:22:16:21:68:7e:0b:60:85:9a:dd:02:3b:a6:00:
                    8c:13:59:d7:b2:0a:cd:7f:bf:df:c3:0c:ca:0b:a8:
                    f7:82:6f:a7:a6:cd:89:ab:fb:f8:37:af:f6:95:f6:
                    59:1f:bc:c8:76:97:43:e1:42:a3:50:9e:f2:ff:a9:
                    55:e2:a4:0d:32:00:e3:37:e4:06:82:d4:48:94:46:
                    ec:61:a2:ca:e6:25:7c:d9:81:81:bc:c9:4b:47:64:
                    36:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:1F:08:1B:61:55:6D:EE:8C:76:4C:3D:50:D7:2A:99:1E:47:9D:47
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/30562a60-1701-4170-b8a8-701d0efcb738.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.80.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:f5:26:92:7c:e8:94:32:8a:5e:96:1c:22:fe:16:8e:e5:d0:
         8e:36:7b:ca:52:05:54:ae:f9:59:79:06:5e:0e:41:10:d8:8b:
         96:19:3a:3d:34:81:d3:c3:86:a3:86:74:f5:4d:73:f9:0e:1f:
         50:1c:df:9d:2a:1b:5f:ab:bc:e6:91:d3:c3:97:93:a6:09:c0:
         7b:50:7f:98:d4:9c:b9:91:4c:70:13:97:0f:e9:43:50:13:c7:
         b9:73:55:ed:bf:a2:e4:ff:3c:9a:db:d3:4c:47:f2:55:e8:dc:
         b7:f2:b9:ed:8c:cd:03:e5:c7:03:32:c5:94:11:fc:54:3c:06:
         88:50:00:08:a2:77:d6:1c:fd:89:6d:37:c8:64:aa:44:c0:1f:
         cf:27:25:d7:dc:9b:35:27:c3:78:12:bd:92:df:28:45:a9:fd:
         ec:14:3b:a3:ba:21:d9:ef:5c:0f:9d:f5:8a:3d:53:7a:4c:a2:
         e2:93:5f:53:af:77:f5:8d:54:31:59:91:6d:5f:cf:ee:10:85:
         10:3f:1b:35:84:95:3e:88:e1:df:b7:a0:70:82:cf:c4:92:37:
         7d:6c:13:a9:b5:c9:00:b6:a2:5e:83:dd:e1:71:61:a0:30:9b:
         61:82:11:5a:d8:8f:ec:48:d3:ac:fa:b5:99:c6:ab:2b:d2:02:
         d2:11:bb:47
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUHmyob1O5r9LgfHK7pCTfaphZSWcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA3MDA0MTQ4WhcNMjYxMTA1MjM1OTU5
WjB6MUkwRwYDVQQFE0AwMDYzNjFlMTYwYWU2MTRlNTc3OTU3NGNjNTdjMjgzNzdh
NjcxNTE5ZGRkODYxZDEyZTA4NmUyYTNkNWM1MGQ0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC8dSB6GO6L9NevRZjZyHIaRYCPMjaWdwUaj9KLZjqtpcsq
sxlMUPLGO34gbHdE7RNcJkGG9csrrrGQ9PfkkPcPouKfqFAuASzj3uArabxD/wrw
0AeGQRR824SoplAp0tfDbxN1CKJUQQ0X3BrrkF2qMOMvEw19WvQxaaPM1l08jikW
1z8xxVFyYRqP7TVj4vXTMOpD7TdKnFScJxia/AC0NXr3ZrEiFiFofgtghZrdAjum
AIwTWdeyCs1/v9/DDMoLqPeCb6emzYmr+/g3r/aV9lkfvMh2l0PhQqNQnvL/qVXi
pA0yAOM35AaC1EiURuxhosrmJXzZgYG8yUtHZDYLAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUfB8IG2FVbe6Mdkw9UNcqmR5HnUcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzMwNTYyYTYwLTE3MDEtNDE3MC1iOGE4LTcwMWQwZWZjYjczOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADKUKQwDQYJKoZIhvcNAQELBQADggEBAK/1JpJ86JQyil6WHCL+Fo7l0I42
e8pSBVSu+Vl5Bl4OQRDYi5YZOj00gdPDhqOGdPVNc/kOH1Ac350qG1+rvOaR08OX
k6YJwHtQf5jUnLmRTHATlw/pQ1ATx7lzVe2/ouT/PJrb00xH8lXo3Lfyue2MzQPl
xwMyxZQR/FQ8BohQAAiid9Yc/YltN8hkqkTAH88nJdfcmzUnw3gSvZLfKEWp/ewU
O6O6IdnvXA+d9Yo9U3pMouKTX1Ovd/WNVDFZkW1fz+4QhRA/GzWElT6I4d+3oHCC
z8SSN31sE6m1yQC2ol6D3eFxYaAwm2GCEVrYj+xI06z6tZnGqyvSAtIRu0c=
-----END CERTIFICATE-----
Generated at Thu Sep 17 18:50:50 2026 by rpki-client