Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/454cbe13-4934-4bc9-97a7-61e78f48ab23.roa
File:                     454cbe13-4934-4bc9-97a7-61e78f48ab23.roa (raw, json)
Hash identifier:          ujuT2IzH3POghadZRFr74+XABdpCi0tP34gP9n55aQs=
Subject key identifier:   8D:4C:C9:C1:69:2B:37:3B:62:3B:5D:EF:AB:53:2A:EB:85:23:D7:59
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       473CDD4956D66558681E09D502DBD0910FDE240B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/454cbe13-4934-4bc9-97a7-61e78f48ab23.roa
Signing time:             Tue 04 Aug 2026 01:20:39 +0000
ROA not before:           Tue 04 Aug 2026 01:20:39 +0000
ROA not after:            Mon 02 Nov 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        54.112.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:3c:dd:49:56:d6:65:58:68:1e:09:d5:02:db:d0:91:0f:de:24:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  4 01:20:39 2026 GMT
            Not After : Nov  2 23:59:59 2026 GMT
        Subject: serialNumber=b169e262bba9bb164cf65d394e8f90a5d17f04aea997118dda02c792eb0ce292, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:91:ab:7d:08:32:84:a0:95:51:3b:fb:c7:f3:
                    b2:48:45:71:bc:c8:4a:15:79:69:eb:8a:fe:49:e9:
                    db:bc:e2:00:f3:2f:09:04:34:87:52:5d:5b:a5:db:
                    dc:a0:95:dd:a7:23:4d:ea:84:ba:bd:9d:55:38:8c:
                    fb:3f:ac:99:8a:58:d2:12:91:ba:1a:cd:9c:c9:74:
                    6f:a4:37:ea:0c:02:bd:9c:62:cc:36:df:f3:01:c8:
                    1d:81:38:04:7f:20:7f:16:92:d9:9f:90:b4:3a:57:
                    64:74:3d:0b:59:a2:5f:1b:cf:66:ae:a9:bc:3e:ea:
                    b5:32:de:e6:1b:6c:cf:10:b6:32:a4:32:94:ba:7f:
                    1b:55:61:0f:05:31:40:b6:30:f2:18:94:44:a1:e5:
                    67:c8:8d:f5:a3:eb:81:68:3b:52:15:7b:c6:50:16:
                    a8:97:a9:8b:22:e0:6a:56:0e:8e:61:ee:f8:16:1f:
                    b2:1b:7d:48:1c:61:54:2b:35:9a:72:09:71:43:4f:
                    5e:81:ee:dd:6d:c9:ad:03:ff:64:0e:2c:69:e5:c2:
                    11:dd:c0:4c:e1:c9:6b:d3:f9:06:24:0f:6a:c2:c1:
                    81:f0:0c:20:89:9d:97:5e:97:77:f7:34:99:1d:d9:
                    6b:48:77:ac:db:13:20:40:b4:b7:18:a1:e7:5f:81:
                    91:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:4C:C9:C1:69:2B:37:3B:62:3B:5D:EF:AB:53:2A:EB:85:23:D7:59
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/454cbe13-4934-4bc9-97a7-61e78f48ab23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.112.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         c8:1e:bb:e5:f7:61:7d:0c:d6:01:e4:04:12:59:25:35:ca:95:
         7e:d8:9e:df:80:37:32:a5:1f:a3:1c:66:ad:49:3d:3e:7d:2b:
         40:a9:67:76:4b:c9:4b:fd:fb:40:ee:f4:f7:42:4d:5a:be:3a:
         6a:99:c6:d8:a2:cd:c9:3f:00:1a:53:43:c0:d0:41:67:e3:ac:
         61:96:e8:ee:90:2b:f7:ac:61:08:bf:00:f3:c3:91:35:3b:5c:
         e6:6c:c8:4a:0f:76:3e:6b:fb:5e:b4:15:8c:4b:c1:9f:41:bb:
         88:1a:f0:3f:e0:a9:80:65:ce:99:e0:60:65:ed:36:01:47:1e:
         18:bc:0a:7f:3a:77:66:c8:6a:4a:2e:e3:29:6f:89:74:d8:7e:
         eb:47:04:69:25:6b:18:55:5a:5f:00:ab:31:b8:e9:f7:76:11:
         81:6b:21:45:d9:e0:95:7b:57:9d:c3:4d:4b:b9:50:10:41:bf:
         17:ae:df:f3:f9:13:81:9a:5b:10:04:fa:71:31:73:87:28:55:
         18:15:95:ad:ae:44:ab:d2:aa:02:4d:ba:2b:e0:63:b7:3b:f1:
         28:7f:77:52:7c:45:ac:b7:3b:07:03:9d:d1:ef:ab:3f:ed:9f:
         b5:72:45:e5:a5:9e:0d:cb:c7:f2:46:b6:8d:ce:0f:c0:39:79:
         0f:34:bb:1b
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIURzzdSVbWZVhoHgnVAtvQkQ/eJAswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA0MDEyMDM5WhcNMjYxMTAyMjM1OTU5
WjB6MUkwRwYDVQQFE0BiMTY5ZTI2MmJiYTliYjE2NGNmNjVkMzk0ZThmOTBhNWQx
N2YwNGFlYTk5NzExOGRkYTAyYzc5MmViMGNlMjkyMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDOkat9CDKEoJVRO/vH87JIRXG8yEoVeWnriv5J6du84gDz
LwkENIdSXVul29ygld2nI03qhLq9nVU4jPs/rJmKWNISkboazZzJdG+kN+oMAr2c
Ysw23/MByB2BOAR/IH8WktmfkLQ6V2R0PQtZol8bz2auqbw+6rUy3uYbbM8QtjKk
MpS6fxtVYQ8FMUC2MPIYlESh5WfIjfWj64FoO1IVe8ZQFqiXqYsi4GpWDo5h7vgW
H7IbfUgcYVQrNZpyCXFDT16B7t1tya0D/2QOLGnlwhHdwEzhyWvT+QYkD2rCwYHw
DCCJnZdel3f3NJkd2WtId6zbEyBAtLcYoedfgZHfAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUjUzJwWkrNztiO13vq1Mq64Uj11kwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzQ1NGNiZTEzLTQ5MzQtNGJjOS05N2E3LTYxZTc4ZjQ4YWIyMy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAY2cAAwDQYJKoZIhvcNAQELBQADggEBAMgeu+X3YX0M1gHkBBJZJTXKlX7Y
nt+ANzKlH6McZq1JPT59K0CpZ3ZLyUv9+0Du9PdCTVq+OmqZxtiizck/ABpTQ8DQ
QWfjrGGW6O6QK/esYQi/APPDkTU7XOZsyEoPdj5r+160FYxLwZ9Bu4ga8D/gqYBl
zpngYGXtNgFHHhi8Cn86d2bIakou4ylviXTYfutHBGklaxhVWl8AqzG46fd2EYFr
IUXZ4JV7V53DTUu5UBBBvxeu3/P5E4GaWxAE+nExc4coVRgVla2uRKvSqgJNuivg
Y7c78Sh/d1J8Ray3OwcDndHvqz/tn7VyReWlng3Lx/JGto3OD8A5eQ80uxs=
-----END CERTIFICATE-----
Generated at Thu Sep 17 16:22:36 2026 by rpki-client