Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3648dfb3-3fba-44c3-a005-f8fd5930f9b0.roa
File:                     3648dfb3-3fba-44c3-a005-f8fd5930f9b0.roa (raw, json)
Hash identifier:          sr4a9MPY4JxLKBdyt8v1MrtS/ljjfdo/kk8nsjx23Kg=
Subject key identifier:   F7:86:51:68:70:51:0F:ED:32:0E:7A:B7:A3:6F:27:0D:5F:21:38:0B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       27B3B22A7DF6993A253D216CFCA89B2B981B5C37
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3648dfb3-3fba-44c3-a005-f8fd5930f9b0.roa
Signing time:             Mon 27 Apr 2026 00:20:28 +0000
ROA not before:           Mon 27 Apr 2026 00:20:28 +0000
ROA not after:            Sun 26 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        13.62.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:b3:b2:2a:7d:f6:99:3a:25:3d:21:6c:fc:a8:9b:2b:98:1b:5c:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 27 00:20:28 2026 GMT
            Not After : Jul 26 23:59:59 2026 GMT
        Subject: serialNumber=c8c4d6d1a2ead055892a8295b451d717b8ca78fefda9fd7c6921b089e55f8336, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d9:ff:6a:e5:51:73:67:c5:77:0b:7d:9f:19:
                    b3:88:c4:c4:b6:4c:4b:be:d0:85:dd:f7:9c:97:65:
                    3e:85:e6:c1:46:60:70:79:b2:07:47:38:f1:9e:fe:
                    ee:46:27:07:b2:04:ac:eb:f1:a9:f5:17:49:9c:a8:
                    0c:c2:f7:97:18:48:4e:85:38:28:b8:09:56:ee:1b:
                    51:7e:e6:62:9f:bb:76:87:61:4a:07:e5:a9:db:aa:
                    fd:1d:ee:0e:a0:0e:a1:cd:d3:ed:91:cd:db:b6:a4:
                    e5:0a:62:ce:1b:36:c9:b3:4d:df:a9:aa:37:7d:79:
                    c9:a8:d4:01:3e:48:0a:91:4c:54:42:af:7a:65:a0:
                    f0:f9:9e:6b:c1:5e:29:a7:ce:af:d8:8d:e0:36:0d:
                    3b:01:00:1d:9b:a3:df:e1:4e:5d:e2:57:29:c0:b6:
                    ec:3e:f8:a4:8f:8d:c3:c7:1b:74:8e:ec:83:47:6e:
                    1e:5e:64:2d:8c:5c:d0:d7:4d:97:d4:ef:59:5d:f9:
                    80:70:e4:4b:e6:9f:8a:35:ad:f7:d7:e8:cd:d6:73:
                    d5:db:5a:92:a9:18:57:01:a2:ee:5b:0d:16:94:dd:
                    15:ca:72:27:86:cf:fb:a2:b4:81:fd:de:e0:c0:7f:
                    70:56:46:dc:eb:a1:08:e2:8f:9f:2f:ed:1e:9b:db:
                    7f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:86:51:68:70:51:0F:ED:32:0E:7A:B7:A3:6F:27:0D:5F:21:38:0B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3648dfb3-3fba-44c3-a005-f8fd5930f9b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.62.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         16:1a:22:69:79:fc:42:11:be:8e:2e:e7:31:ce:70:77:40:5d:
         fe:aa:60:da:a1:1f:0a:08:99:e0:2b:36:20:a9:44:6d:1e:78:
         26:6f:a7:7f:15:8a:b8:2e:6a:a9:a7:82:5e:08:93:11:de:bb:
         e1:e0:62:8c:a1:34:00:a7:2b:1f:9b:46:6d:45:b1:59:82:fc:
         bf:86:02:29:47:1a:bc:a4:ef:a7:77:32:4c:97:ec:50:58:b6:
         d2:93:f8:c5:dd:e5:c7:54:cb:55:7b:ff:9e:56:cb:f4:a6:13:
         28:3e:a3:94:a4:48:1b:8d:ae:34:6f:cc:68:d7:fa:e8:a9:0e:
         5d:85:0d:9e:d7:44:e9:35:d9:b9:ca:fb:0b:d7:d5:00:7f:ee:
         5d:1d:3d:45:6b:93:57:01:ec:b8:6e:20:fc:2b:08:cb:fd:eb:
         d9:be:22:0c:a6:90:6a:44:c6:8c:fe:f0:44:63:6a:f6:b6:a7:
         95:05:e0:c8:4f:fc:70:cd:4d:20:82:d9:12:6f:45:c5:5b:41:
         42:18:fe:55:cc:f9:0b:42:50:6e:1d:3d:19:00:a9:5e:08:5e:
         1a:52:71:ab:88:c3:6d:88:2c:1a:36:4d:56:bf:f4:a7:98:d7:
         28:fe:1f:30:d1:1d:bc:78:97:fe:6b:61:94:3a:d5:2d:ff:11:
         e8:a9:a4:ae
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUJ7OyKn32mTolPSFs/KibK5gbXDcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNDI3MDAyMDI4WhcNMjYwNzI2MjM1OTU5
WjB6MUkwRwYDVQQFE0BjOGM0ZDZkMWEyZWFkMDU1ODkyYTgyOTViNDUxZDcxN2I4
Y2E3OGZlZmRhOWZkN2M2OTIxYjA4OWU1NWY4MzM2MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDB2f9q5VFzZ8V3C32fGbOIxMS2TEu+0IXd95yXZT6F5sFG
YHB5sgdHOPGe/u5GJweyBKzr8an1F0mcqAzC95cYSE6FOCi4CVbuG1F+5mKfu3aH
YUoH5anbqv0d7g6gDqHN0+2Rzdu2pOUKYs4bNsmzTd+pqjd9ecmo1AE+SAqRTFRC
r3ploPD5nmvBXimnzq/YjeA2DTsBAB2bo9/hTl3iVynAtuw++KSPjcPHG3SO7INH
bh5eZC2MXNDXTZfU71ld+YBw5Evmn4o1rffX6M3Wc9XbWpKpGFcBou5bDRaU3RXK
cieGz/uitIH93uDAf3BWRtzroQjij58v7R6b238LAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQU94ZRaHBRD+0yDnq3o28nDV8hOAswHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzM2NDhkZmIzLTNmYmEtNDRjMy1hMDA1LWY4ZmQ1OTMwZjliMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwENPjANBgkqhkiG9w0BAQsFAAOCAQEAFhoiaXn8QhG+ji7nMc5wd0Bd/qpg
2qEfCgiZ4Cs2IKlEbR54Jm+nfxWKuC5qqaeCXgiTEd674eBijKE0AKcrH5tGbUWx
WYL8v4YCKUcavKTvp3cyTJfsUFi20pP4xd3lx1TLVXv/nlbL9KYTKD6jlKRIG42u
NG/MaNf66KkOXYUNntdE6TXZucr7C9fVAH/uXR09RWuTVwHsuG4g/CsIy/3r2b4i
DKaQakTGjP7wRGNq9ranlQXgyE/8cM1NIILZEm9FxVtBQhj+Vcz5C0JQbh09GQCp
XgheGlJxq4jDbYgsGjZNVr/0p5jXKP4fMNEdvHiX/mthlDrVLf8R6Kmkrg==
-----END CERTIFICATE-----
Generated at Sun May 3 14:47:14 2026 by rpki-client