Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3259b213-f7c1-41ae-bac6-e8c5fb358f08.roa
File:                     3259b213-f7c1-41ae-bac6-e8c5fb358f08.roa (raw, json)
Hash identifier:          HNSxbGp883Ituk9Vf/n10FQoIA5+FjTTa2MVbg3LNo0=
Subject key identifier:   E8:CB:82:E0:2B:72:EB:DC:FF:59:F0:A3:A5:0B:0C:70:5D:04:24:3F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       70F971CAE767776ED6BC3228533C7FA1A5773CF2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3259b213-f7c1-41ae-bac6-e8c5fb358f08.roa
Signing time:             Wed 05 Aug 2026 00:10:08 +0000
ROA not before:           Wed 05 Aug 2026 00:10:08 +0000
ROA not after:            Tue 03 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        69.107.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:f9:71:ca:e7:67:77:6e:d6:bc:32:28:53:3c:7f:a1:a5:77:3c:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  5 00:10:08 2026 GMT
            Not After : Nov  3 23:59:59 2026 GMT
        Subject: serialNumber=771e34dec38cab4f2619b98d12096494ef3342e531df3bc39b7cb96f4008bec8, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:86:ed:df:69:f2:05:e2:d5:b0:47:87:07:cd:
                    e8:68:26:77:06:00:73:b6:83:d6:d6:18:54:b3:85:
                    de:54:33:24:9a:28:5c:55:40:8a:63:ee:89:26:fb:
                    25:72:17:08:41:5d:5d:ec:d4:20:c8:13:d1:88:4b:
                    a1:dc:c4:98:12:ed:15:61:d0:79:46:89:86:9f:fe:
                    93:42:7b:a4:87:c2:33:d3:71:a1:ec:22:5e:05:b3:
                    4d:93:f1:57:8c:08:f2:c7:66:f5:83:f5:25:96:53:
                    68:c7:cc:84:32:d7:d5:95:05:a4:1b:51:63:e5:01:
                    71:b4:24:6e:1b:43:36:52:0f:0a:d5:62:17:e7:5e:
                    c3:d2:72:a8:9f:47:f4:22:57:79:15:3e:20:cd:f0:
                    68:96:4a:76:cf:e6:38:37:f5:60:57:3f:2c:d7:62:
                    44:bb:5b:02:bf:04:ad:db:17:e1:15:33:ea:09:27:
                    fc:cb:06:2e:de:0a:c8:5c:cf:17:32:48:88:65:97:
                    3b:7d:ac:16:9c:ea:54:6e:f6:5b:f2:dc:72:e1:4c:
                    43:82:d6:35:0e:6f:b3:67:dd:e9:ee:96:d5:e3:2b:
                    8f:e1:c5:0e:b8:20:0f:75:cb:32:dd:db:c6:7c:41:
                    38:4d:41:94:e7:0a:39:ac:8a:e3:a8:d2:a7:cd:0f:
                    47:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:CB:82:E0:2B:72:EB:DC:FF:59:F0:A3:A5:0B:0C:70:5D:04:24:3F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3259b213-f7c1-41ae-bac6-e8c5fb358f08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.107.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         12:61:02:06:49:64:2a:cc:55:a3:33:13:c0:fa:2c:62:02:d3:
         6e:5c:bb:ad:bf:c6:a3:c7:cc:3e:18:5e:83:29:f7:bf:e1:ed:
         0d:13:ee:3e:36:5c:0b:7f:61:76:77:e8:6c:28:a5:90:f6:51:
         72:be:7f:8b:47:08:c8:a0:ef:c0:2e:e0:5d:98:98:85:77:a4:
         9f:84:df:5d:96:84:5e:e0:3b:4b:47:39:ea:a9:ac:75:72:1b:
         c9:62:e2:6b:2b:67:44:92:ee:77:2e:0b:77:a9:70:f9:4f:95:
         29:a7:ed:ce:c0:61:33:25:e5:96:4d:c2:d2:45:3f:d4:5b:6f:
         53:c4:3f:84:1a:ac:ee:86:d2:11:c9:20:ba:56:ff:b9:a2:89:
         91:22:8f:e5:c2:cf:03:5d:a6:83:f8:24:fb:ac:04:ef:8c:79:
         e0:50:30:9c:d6:b7:a2:96:fc:d9:f2:2f:1b:6b:e1:97:2d:17:
         c9:44:28:41:71:ca:37:86:a5:e0:1c:17:f5:d6:76:ad:1e:70:
         00:6c:f3:86:39:fb:0e:cb:30:0c:17:f0:93:fd:98:a5:75:2c:
         02:6f:56:7e:31:36:97:a0:e2:a5:2d:6a:54:f8:9d:2d:13:a4:
         21:c5:d4:d8:e1:ed:08:8a:34:e8:3a:1d:e5:44:4d:29:35:fc:
         87:45:77:29
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUcPlxyudnd27WvDIoUzx/oaV3PPIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA1MDAxMDA4WhcNMjYxMTAzMjM1OTU5
WjB6MUkwRwYDVQQFE0A3NzFlMzRkZWMzOGNhYjRmMjYxOWI5OGQxMjA5NjQ5NGVm
MzM0MmU1MzFkZjNiYzM5YjdjYjk2ZjQwMDhiZWM4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDuhu3fafIF4tWwR4cHzehoJncGAHO2g9bWGFSzhd5UMySa
KFxVQIpj7okm+yVyFwhBXV3s1CDIE9GIS6HcxJgS7RVh0HlGiYaf/pNCe6SHwjPT
caHsIl4Fs02T8VeMCPLHZvWD9SWWU2jHzIQy19WVBaQbUWPlAXG0JG4bQzZSDwrV
YhfnXsPScqifR/QiV3kVPiDN8GiWSnbP5jg39WBXPyzXYkS7WwK/BK3bF+EVM+oJ
J/zLBi7eCshczxcySIhllzt9rBac6lRu9lvy3HLhTEOC1jUOb7Nn3enultXjK4/h
xQ64IA91yzLd28Z8QThNQZTnCjmsiuOo0qfND0f5AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU6MuC4Cty69z/WfCjpQsMcF0EJD8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzMyNTliMjEzLWY3YzEtNDFhZS1iYWM2LWU4YzVmYjM1OGYwOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAZFawAwDQYJKoZIhvcNAQELBQADggEBABJhAgZJZCrMVaMzE8D6LGIC025c
u62/xqPHzD4YXoMp97/h7Q0T7j42XAt/YXZ36GwopZD2UXK+f4tHCMig78Au4F2Y
mIV3pJ+E312WhF7gO0tHOeqprHVyG8li4msrZ0SS7ncuC3epcPlPlSmn7c7AYTMl
5ZZNwtJFP9Rbb1PEP4QarO6G0hHJILpW/7miiZEij+XCzwNdpoP4JPusBO+MeeBQ
MJzWt6KW/NnyLxtr4ZctF8lEKEFxyjeGpeAcF/XWdq0ecABs84Y5+w7LMAwX8JP9
mKV1LAJvVn4xNpeg4qUtalT4nS0TpCHF1Njh7QiKNOg6HeVETSk1/IdFdyk=
-----END CERTIFICATE-----
Generated at Tue Aug 18 05:52:05 2026 by rpki-client