Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/361d86fa-1e11-495f-8021-5b0f95bb1974.roa
File:                     361d86fa-1e11-495f-8021-5b0f95bb1974.roa (raw, json)
Hash identifier:          WDOWrmYXZTMo5ulZB8qxSfaxg979st4BALWm6ajY6Ow=
Subject key identifier:   2D:73:65:72:6F:7E:C7:B1:14:35:FF:5A:A7:21:C1:35:71:DB:B3:4D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1AB1427CD249B71E706B4F748B32E4D11D9DB286
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/361d86fa-1e11-495f-8021-5b0f95bb1974.roa
Signing time:             Mon 05 Oct 2026 00:00:17 +0000
ROA not before:           Mon 05 Oct 2026 00:00:17 +0000
ROA not after:            Sun 03 Jan 2027 23:59:59 +0000
asID:                     14618
IP address blocks:        16.150.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:b1:42:7c:d2:49:b7:1e:70:6b:4f:74:8b:32:e4:d1:1d:9d:b2:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  5 00:00:17 2026 GMT
            Not After : Jan  3 23:59:59 2027 GMT
        Subject: serialNumber=cfa141e94cbae4218ef1cb58b304477f078df62b50e2228e006b6c40ec844e44, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:69:e2:56:d6:bf:92:fb:9f:2f:15:14:d6:dc:
                    96:fd:4f:c8:05:92:e5:ff:79:91:47:a1:c7:ce:a0:
                    47:24:60:9e:fc:77:3a:21:5e:e6:60:c8:78:13:9e:
                    3c:ed:ce:df:33:69:0d:4e:44:13:50:55:ce:1a:b6:
                    bd:0d:5e:ff:ca:91:40:5a:9b:ac:23:0a:e1:d5:b1:
                    50:4d:0c:d4:fa:31:bd:49:6d:40:e8:c3:e1:73:1e:
                    41:83:37:b0:f5:07:4b:42:35:46:b3:f7:a5:4e:54:
                    66:ac:2b:c4:94:28:6c:f5:3f:bf:f4:3a:8d:f6:ec:
                    c9:e5:f0:18:78:4c:4c:a8:b7:ba:60:c8:37:c7:12:
                    4e:0e:d1:d2:78:3c:e9:24:8e:73:0b:af:b5:cf:b7:
                    10:b8:04:5e:30:a4:74:20:dc:1f:da:51:30:39:f0:
                    7a:78:5b:f0:68:bf:8b:70:5f:3a:9a:8e:c5:d7:61:
                    65:f2:13:17:74:12:53:a3:c7:42:f5:f6:7b:af:3e:
                    ac:24:c0:dd:6c:2c:ca:56:d6:e5:13:48:02:64:3f:
                    56:7a:92:0e:65:33:34:a7:85:45:06:a5:88:a2:33:
                    38:9b:f3:1d:d3:54:d7:3b:39:eb:6c:a0:d1:a4:bf:
                    72:c8:63:c7:25:2c:90:8a:6d:8c:51:50:52:b1:cc:
                    bb:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:73:65:72:6F:7E:C7:B1:14:35:FF:5A:A7:21:C1:35:71:DB:B3:4D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/361d86fa-1e11-495f-8021-5b0f95bb1974.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.150.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         38:28:c0:e9:d8:88:6a:67:47:0e:3b:f5:36:8e:c7:fa:9e:5e:
         9b:05:ec:a5:82:8e:93:71:9c:bf:a2:06:0c:ca:39:7e:0e:d8:
         0b:e3:7b:8f:2e:5e:e2:58:22:11:43:6c:65:9c:05:a0:4b:6b:
         57:5d:15:a2:d5:06:57:3c:64:bd:9d:54:3d:2b:f7:79:48:d8:
         34:bb:58:d1:b7:1c:f6:d7:0e:c4:00:31:9f:af:8e:91:50:5f:
         d7:a9:1b:93:15:74:ee:57:46:ac:10:24:10:57:56:22:7a:e2:
         81:ad:11:91:5a:b5:cc:3b:80:f3:00:ff:e1:1a:0e:cc:64:d2:
         42:99:a6:ca:bf:63:12:3d:8f:6e:3e:0a:af:41:d2:f7:9d:e0:
         a3:cb:4e:10:aa:76:c9:28:6a:00:33:e2:7e:80:90:64:d3:39:
         19:e4:a1:60:87:e1:ef:2a:25:3b:20:c6:63:46:90:a4:1a:91:
         f2:aa:45:52:d1:96:14:77:97:91:f6:ac:8c:28:da:10:26:89:
         6d:60:6a:a3:63:e8:0c:89:0d:af:2b:e3:a0:9d:5a:8d:be:20:
         84:a0:5c:8e:bc:ba:6e:95:3e:90:ae:2e:5b:a5:7a:9d:03:4e:
         e3:1c:59:bb:06:9a:0b:30:f6:c7:61:d7:8b:30:86:01:ce:5e:
         8c:80:92:b6
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUGrFCfNJJtx5wa090izLk0R2dsoYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA1MDAwMDE3WhcNMjcwMTAzMjM1OTU5
WjB6MUkwRwYDVQQFE0BjZmExNDFlOTRjYmFlNDIxOGVmMWNiNThiMzA0NDc3ZjA3
OGRmNjJiNTBlMjIyOGUwMDZiNmM0MGVjODQ0ZTQ0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDFaeJW1r+S+58vFRTW3Jb9T8gFkuX/eZFHocfOoEckYJ78
dzohXuZgyHgTnjztzt8zaQ1ORBNQVc4atr0NXv/KkUBam6wjCuHVsVBNDNT6Mb1J
bUDow+FzHkGDN7D1B0tCNUaz96VOVGasK8SUKGz1P7/0Oo327Mnl8Bh4TEyot7pg
yDfHEk4O0dJ4POkkjnMLr7XPtxC4BF4wpHQg3B/aUTA58Hp4W/Bov4twXzqajsXX
YWXyExd0ElOjx0L19nuvPqwkwN1sLMpW1uUTSAJkP1Z6kg5lMzSnhUUGpYiiMzib
8x3TVNc7OetsoNGkv3LIY8clLJCKbYxRUFKxzLs7AgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQULXNlcm9+x7EUNf9apyHBNXHbs00wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzM2MWQ4NmZhLTFlMTEtNDk1Zi04MDIxLTViMGY5NWJiMTk3NC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAQljANBgkqhkiG9w0BAQsFAAOCAQEAOCjA6diIamdHDjv1No7H+p5emwXs
pYKOk3Gcv6IGDMo5fg7YC+N7jy5e4lgiEUNsZZwFoEtrV10VotUGVzxkvZ1UPSv3
eUjYNLtY0bcc9tcOxAAxn6+OkVBf16kbkxV07ldGrBAkEFdWInriga0RkVq1zDuA
8wD/4RoOzGTSQpmmyr9jEj2Pbj4Kr0HS953go8tOEKp2yShqADPifoCQZNM5GeSh
YIfh7yolOyDGY0aQpBqR8qpFUtGWFHeXkfasjCjaECaJbWBqo2PoDIkNryvjoJ1a
jb4ghKBcjry6bpU+kK4uW6V6nQNO4xxZuwaaCzD2x2HXizCGAc5ejICStg==
-----END CERTIFICATE-----
Generated at Tue Nov 3 19:22:43 2026 by rpki-client