Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3de3c612-36d7-4d0e-8a61-dc9891466376.roa
File:                     3de3c612-36d7-4d0e-8a61-dc9891466376.roa (raw, json)
Hash identifier:          1+KVLcn5QDtMqCYD4Er+7rwoHaAxxV2uB1NUwmtvREk=
Subject key identifier:   DB:50:CF:90:05:5E:AA:87:66:43:63:41:1C:BE:37:BF:EA:5D:1D:70
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0BA432F5C8F26C59BFF6BEF3F2F547DF143C61EA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3de3c612-36d7-4d0e-8a61-dc9891466376.roa
Signing time:             Thu 08 Oct 2026 00:40:42 +0000
ROA not before:           Thu 08 Oct 2026 00:40:42 +0000
ROA not after:            Wed 06 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        63.246.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 30 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:a4:32:f5:c8:f2:6c:59:bf:f6:be:f3:f2:f5:47:df:14:3c:61:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  8 00:40:42 2026 GMT
            Not After : Jan  6 23:59:59 2027 GMT
        Subject: serialNumber=b2fc177450051df8fa7312221b2dd48ebdc2cc3892804e79f0ae587f760d3b4e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e5:dc:2f:80:fb:d1:a9:90:91:38:98:89:63:
                    38:20:8d:ae:62:64:e0:00:93:7d:ac:51:33:ea:78:
                    0e:77:e9:1f:28:82:f8:33:36:6d:6e:6c:43:be:d9:
                    3a:da:51:5f:d8:8d:7b:5a:09:50:7e:2d:77:40:cb:
                    57:c8:37:16:14:15:9c:37:d1:28:7d:36:17:c4:31:
                    7e:42:8d:2a:ac:12:21:1b:7a:7e:38:65:ba:7e:86:
                    95:54:3b:3b:a9:84:84:a7:f9:d2:49:82:fc:55:ee:
                    90:c4:13:0c:4b:9a:08:46:ff:08:38:0f:96:71:76:
                    4e:ab:17:ca:31:de:84:98:f0:86:b5:3d:bf:9d:ac:
                    32:8e:59:cf:da:b5:ed:5b:e8:81:3d:10:9a:ee:53:
                    2c:21:45:4b:df:70:9f:2d:f4:cf:d8:b5:ce:f1:81:
                    4f:0d:83:08:d2:9e:9e:57:6e:89:aa:18:d1:05:1b:
                    44:e9:27:13:28:58:df:d4:ba:56:be:16:c1:7c:42:
                    5d:46:68:fc:85:bb:de:cd:50:61:56:6c:7b:d4:d6:
                    7b:ad:a5:06:24:19:c7:1b:b4:cf:da:1b:e8:8c:8c:
                    b2:15:56:71:fb:c6:2a:1a:44:f1:12:90:bc:7e:32:
                    e6:0f:c7:5b:32:97:73:62:19:a4:ae:b1:0f:56:f0:
                    a3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:50:CF:90:05:5E:AA:87:66:43:63:41:1C:BE:37:BF:EA:5D:1D:70
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3de3c612-36d7-4d0e-8a61-dc9891466376.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.246.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:da:43:23:1c:03:09:1c:13:b0:5e:b4:49:7b:98:d2:62:6e:
         94:3f:57:b4:0d:8b:48:df:1f:ce:aa:34:a5:88:6a:f3:c7:05:
         0f:ca:55:67:e9:85:4e:0e:6e:ef:84:d0:d7:42:65:79:79:49:
         0b:c6:4d:43:7e:2c:e8:9b:96:05:45:f0:c8:25:25:7a:22:c6:
         e4:57:09:c9:8a:2f:c4:00:d4:8e:e9:ff:9d:cd:e4:e2:bd:58:
         ad:58:ff:c0:01:4c:c6:b1:34:14:19:bc:e5:56:61:5d:61:22:
         a5:b0:d3:1d:ac:40:50:f8:9c:4a:4f:80:d7:43:67:1d:e6:d4:
         c1:5d:8f:d3:e7:a3:5b:cd:46:8a:ad:4e:d1:88:20:bd:fd:b2:
         ad:0d:8a:97:2f:eb:5b:31:aa:de:93:a9:06:31:d9:8b:cd:5c:
         71:bf:5a:72:02:5f:fa:0b:46:7f:28:77:a4:7d:f8:7c:06:94:
         70:54:0b:ae:f5:3b:91:a7:ed:c3:cf:38:6f:95:4e:b2:0e:b2:
         fd:5d:45:1f:1f:ca:65:f1:52:e5:b0:3c:8a:c0:fb:36:12:69:
         c7:26:1b:97:ea:a6:a4:22:1c:3b:57:f7:0d:bd:18:6d:60:d2:
         8d:8b:5f:3c:c2:03:04:d7:9d:52:c1:46:b8:8e:3b:b1:72:95:
         97:c4:53:58
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUC6Qy9cjybFm/9r7z8vVH3xQ8YeowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA4MDA0MDQyWhcNMjcwMTA2MjM1OTU5
WjB6MUkwRwYDVQQFE0BiMmZjMTc3NDUwMDUxZGY4ZmE3MzEyMjIxYjJkZDQ4ZWJk
YzJjYzM4OTI4MDRlNzlmMGFlNTg3Zjc2MGQzYjRlMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC45dwvgPvRqZCROJiJYzggja5iZOAAk32sUTPqeA536R8o
gvgzNm1ubEO+2TraUV/YjXtaCVB+LXdAy1fINxYUFZw30Sh9NhfEMX5CjSqsEiEb
en44Zbp+hpVUOzuphISn+dJJgvxV7pDEEwxLmghG/wg4D5Zxdk6rF8ox3oSY8Ia1
Pb+drDKOWc/ate1b6IE9EJruUywhRUvfcJ8t9M/Ytc7xgU8NgwjSnp5XbomqGNEF
G0TpJxMoWN/Uula+FsF8Ql1GaPyFu97NUGFWbHvU1nutpQYkGccbtM/aG+iMjLIV
VnH7xioaRPESkLx+MuYPx1syl3NiGaSusQ9W8KM3AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU21DPkAVeqodmQ2NBHL43v+pdHXAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzNkZTNjNjEyLTM2ZDctNGQwZS04YTYxLWRjOTg5MTQ2NjM3Ni5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAA/9nEwDQYJKoZIhvcNAQELBQADggEBAHHaQyMcAwkcE7BetEl7mNJibpQ/
V7QNi0jfH86qNKWIavPHBQ/KVWfphU4Obu+E0NdCZXl5SQvGTUN+LOiblgVF8Mgl
JXoixuRXCcmKL8QA1I7p/53N5OK9WK1Y/8ABTMaxNBQZvOVWYV1hIqWw0x2sQFD4
nEpPgNdDZx3m1MFdj9Pno1vNRoqtTtGIIL39sq0Nipcv61sxqt6TqQYx2YvNXHG/
WnICX/oLRn8od6R9+HwGlHBUC671O5Gn7cPPOG+VTrIOsv1dRR8fymXxUuWwPIrA
+zYSaccmG5fqpqQiHDtX9w29GG1g0o2LXzzCAwTXnVLBRriOO7FylZfEU1g=
-----END CERTIFICATE-----
Generated at Thu Oct 29 09:37:34 2026 by rpki-client