Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46d95802-c80e-48cb-8f8e-746d414d0f7f.roa
File:                     46d95802-c80e-48cb-8f8e-746d414d0f7f.roa (raw, json)
Hash identifier:          qvOY3L1AfFtsnFJAH9yRe+MmqBRSnQ9Isw1LQk0CbhY=
Subject key identifier:   F1:CB:F4:CF:18:44:D2:2F:A1:5B:70:72:19:D0:12:73:32:29:F3:C9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       23D4427A6ED49E075C21C40B0090C8FF1E35B95D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46d95802-c80e-48cb-8f8e-746d414d0f7f.roa
Signing time:             Sat 08 Aug 2026 00:01:18 +0000
ROA not before:           Sat 08 Aug 2026 00:01:18 +0000
ROA not after:            Fri 06 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        99.77.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:d4:42:7a:6e:d4:9e:07:5c:21:c4:0b:00:90:c8:ff:1e:35:b9:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  8 00:01:18 2026 GMT
            Not After : Nov  6 23:59:59 2026 GMT
        Subject: serialNumber=ed6b587c43fd8c5e271c390ea04d81abdd22ed55c0c385b3626f16ff8e592f5e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:73:34:5f:00:1d:52:a6:a0:3c:df:a9:0f:0a:
                    6b:69:56:24:14:23:1f:c5:47:1a:01:4e:cb:2f:72:
                    2f:9c:0e:bd:bf:8e:e0:db:2b:4c:f1:3b:08:3b:88:
                    1d:70:d4:ee:87:5a:cc:a5:62:2b:c1:96:e6:99:b2:
                    9b:48:1f:57:f3:ef:b3:9a:8b:58:3f:d2:60:64:c2:
                    c0:1a:36:17:65:ff:d0:4f:ea:8a:15:c4:e3:8a:f7:
                    73:c6:b8:df:63:e0:33:0e:4d:6b:4a:b0:e2:6b:fb:
                    05:5a:59:a7:12:9b:18:f1:7c:16:fb:81:3c:f9:a3:
                    2f:2f:dd:68:70:67:20:df:d6:bd:33:f3:89:71:9b:
                    74:25:f5:3c:ac:64:d6:f3:e8:b9:a2:01:a9:64:6d:
                    b0:34:7e:f1:76:f9:36:4a:47:89:b2:50:f0:c4:89:
                    b7:3e:2f:5c:5f:f7:e2:db:67:16:78:c2:5a:58:74:
                    e3:82:cb:74:02:2c:70:54:e1:d4:96:98:95:35:05:
                    c5:63:1f:7c:82:d4:16:de:a9:ef:ec:da:bc:e1:7f:
                    21:1d:9e:37:6e:c9:a3:73:bd:9b:01:8f:6a:8e:2d:
                    93:da:ef:4e:37:d4:f2:2a:52:58:1c:34:dc:74:9b:
                    e9:ba:79:fb:4a:2d:71:dc:f7:34:32:36:61:31:a9:
                    df:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:CB:F4:CF:18:44:D2:2F:A1:5B:70:72:19:D0:12:73:32:29:F3:C9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46d95802-c80e-48cb-8f8e-746d414d0f7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.77.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:16:e2:d7:38:a7:ed:4a:a5:08:e6:d3:c8:1b:ba:c1:2c:d4:
         5d:d0:63:1e:f8:da:52:ea:19:65:e5:57:8b:0b:9b:11:41:ca:
         e7:c1:43:40:01:31:86:d1:16:97:74:37:71:c9:f1:07:b7:eb:
         d3:5b:84:00:f4:6d:b9:a4:80:4b:98:47:17:d1:f3:03:a2:d7:
         8b:0f:be:a3:75:21:0a:e8:48:b9:14:b7:8a:f2:1c:a8:e4:eb:
         e4:ac:e6:ef:11:f5:8d:10:54:78:29:7d:90:08:01:82:5a:fe:
         ef:ce:6a:1e:56:43:75:09:92:01:f8:81:1c:65:3e:1e:10:23:
         96:6b:50:01:a6:d4:10:5b:4c:ef:57:2e:bd:a2:84:52:e0:ec:
         de:79:21:7e:e6:7c:24:3d:28:c1:a4:b4:a3:a1:c9:5e:bf:19:
         5d:35:de:9c:de:0d:bc:6e:8c:45:a8:a3:7d:8e:d8:06:c3:53:
         08:60:89:ab:f3:5c:34:d7:56:db:d0:6f:e4:bc:26:bc:4f:f5:
         6b:28:ec:b6:34:02:da:ed:9c:b1:ba:aa:c3:63:16:40:d9:5a:
         bc:e4:a8:80:8b:0b:b5:ce:91:37:51:e3:fb:8e:1d:bd:b9:1e:
         7b:53:6e:18:67:dc:fe:c1:bc:24:9a:a9:91:d9:64:e7:fb:b3:
         ce:db:ea:fc
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUI9RCem7UngdcIcQLAJDI/x41uV0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA4MDAwMTE4WhcNMjYxMTA2MjM1OTU5
WjB6MUkwRwYDVQQFE0BlZDZiNTg3YzQzZmQ4YzVlMjcxYzM5MGVhMDRkODFhYmRk
MjJlZDU1YzBjMzg1YjM2MjZmMTZmZjhlNTkyZjVlMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDLczRfAB1SpqA836kPCmtpViQUIx/FRxoBTssvci+cDr2/
juDbK0zxOwg7iB1w1O6HWsylYivBluaZsptIH1fz77Oai1g/0mBkwsAaNhdl/9BP
6ooVxOOK93PGuN9j4DMOTWtKsOJr+wVaWacSmxjxfBb7gTz5oy8v3WhwZyDf1r0z
84lxm3Ql9TysZNbz6LmiAalkbbA0fvF2+TZKR4myUPDEibc+L1xf9+LbZxZ4wlpY
dOOCy3QCLHBU4dSWmJU1BcVjH3yC1Bbeqe/s2rzhfyEdnjduyaNzvZsBj2qOLZPa
70431PIqUlgcNNx0m+m6eftKLXHc9zQyNmExqd+BAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU8cv0zxhE0i+hW3ByGdASczIp88kwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzQ2ZDk1ODAyLWM4MGUtNDhjYi04ZjhlLTc0NmQ0MTRkMGY3Zi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABjTe0wDQYJKoZIhvcNAQELBQADggEBABgW4tc4p+1KpQjm08gbusEs1F3Q
Yx742lLqGWXlV4sLmxFByufBQ0ABMYbRFpd0N3HJ8Qe369NbhAD0bbmkgEuYRxfR
8wOi14sPvqN1IQroSLkUt4ryHKjk6+Ss5u8R9Y0QVHgpfZAIAYJa/u/Oah5WQ3UJ
kgH4gRxlPh4QI5ZrUAGm1BBbTO9XLr2ihFLg7N55IX7mfCQ9KMGktKOhyV6/GV01
3pzeDbxujEWoo32O2AbDUwhgiavzXDTXVtvQb+S8JrxP9Wso7LY0AtrtnLG6qsNj
FkDZWrzkqICLC7XOkTdR4/uOHb25HntTbhhn3P7BvCSaqZHZZOf7s87b6vw=
-----END CERTIFICATE-----
Generated at Thu Sep 17 18:22:28 2026 by rpki-client