Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/48f51d73-a5f2-4d6c-8b6e-796e3716717d.roa
File:                     48f51d73-a5f2-4d6c-8b6e-796e3716717d.roa (raw, json)
Hash identifier:          KD0HWsLWUB3rBKvXWbU4wvMchLF5473uS/Bc/TM1jcM=
Subject key identifier:   F0:E9:81:CB:A0:27:5C:6E:33:E8:5F:7C:F4:72:1D:89:4C:3A:5B:7B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4FF39E2A669376FF999F32B63C3FFB6D25832D0E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/48f51d73-a5f2-4d6c-8b6e-796e3716717d.roa
Signing time:             Thu 22 Oct 2026 01:20:42 +0000
ROA not before:           Thu 22 Oct 2026 01:20:42 +0000
ROA not after:            Wed 20 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        108.136.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:f3:9e:2a:66:93:76:ff:99:9f:32:b6:3c:3f:fb:6d:25:83:2d:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 22 01:20:42 2026 GMT
            Not After : Jan 20 23:59:59 2027 GMT
        Subject: serialNumber=69fdbc6b23917aa1b171fbdb3f9c0d5f200041db6cdfd67c3bf78b2acfc634ee, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2a:d9:7a:d9:1a:fc:4b:0f:76:d0:90:c6:f8:
                    54:90:66:21:89:fc:a8:17:33:4f:64:98:96:9e:dc:
                    52:48:6d:2a:8e:68:9c:e5:69:d0:ad:de:45:e3:b9:
                    e1:ad:d9:f8:00:e3:c9:fe:28:b9:d0:95:09:9d:3f:
                    17:2a:48:4f:67:91:56:cb:9b:99:57:ed:fa:c5:01:
                    6f:18:a6:c7:fd:e8:38:d6:c0:b6:53:27:c3:cd:c3:
                    99:f9:4a:dd:18:28:2c:9f:bc:f6:04:21:b3:84:f6:
                    ca:5d:d7:4f:7b:80:80:8a:ae:e8:e3:35:62:7d:47:
                    42:34:2e:15:e4:cb:82:f8:a4:4e:72:81:8e:04:14:
                    17:41:e7:9b:8f:c9:2a:81:d4:6c:bf:f0:8d:08:68:
                    a6:d7:37:5e:82:64:d0:23:d2:93:d7:10:a6:ba:ac:
                    cf:51:77:e8:e2:16:5f:8b:fc:3b:8d:35:f7:8c:99:
                    ea:53:8f:77:53:1d:3e:2a:83:42:89:73:d6:80:1f:
                    99:0e:80:b9:fc:34:f8:1d:90:bf:ea:a5:2c:3d:ea:
                    a6:47:b9:28:97:98:76:65:e9:49:3e:97:ad:bf:02:
                    96:72:09:8d:be:5b:a7:39:4e:6e:d0:3e:85:83:10:
                    37:86:c2:e9:d9:80:fa:8f:7a:87:5b:13:c5:de:de:
                    ff:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:E9:81:CB:A0:27:5C:6E:33:E8:5F:7C:F4:72:1D:89:4C:3A:5B:7B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/48f51d73-a5f2-4d6c-8b6e-796e3716717d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.136.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:b2:70:59:55:6d:db:a0:37:48:f7:20:92:d1:56:d7:e9:5a:
         2b:02:96:87:d0:ac:89:35:cc:67:6a:b1:e6:45:47:60:7b:47:
         97:e4:f8:65:9a:26:26:43:bd:03:2a:68:9a:d7:38:07:2f:a9:
         1c:01:14:fd:6d:61:1e:71:b8:42:19:56:79:12:53:e0:19:20:
         f9:fb:58:4b:91:14:7e:4a:4e:1c:c2:1c:a1:96:73:08:c8:d6:
         0d:5e:1a:42:4b:97:61:42:a0:85:5b:37:3d:ff:86:6b:2d:62:
         64:e6:fb:65:2d:f3:f0:56:2a:7e:08:84:cf:50:e4:5a:7a:70:
         e2:e4:fa:da:7c:d6:79:80:b8:03:b9:6a:8c:b2:92:9e:4f:65:
         1a:f4:9e:09:fc:14:bd:58:6b:fc:40:b6:65:8f:a1:3d:b2:a7:
         b8:a6:72:35:61:4d:b0:46:58:e1:71:b6:78:cf:1c:47:67:c6:
         28:d9:c1:5f:42:70:86:5f:4b:f4:96:1d:10:a8:b5:5e:a8:95:
         f7:b9:dd:cf:0d:ef:b0:ab:f6:16:82:39:13:5c:25:0d:7f:0d:
         bb:7f:60:fe:78:b5:d6:f4:fd:95:7d:02:a4:ee:03:41:58:a5:
         e5:4f:1f:35:09:98:dc:2f:1f:fc:86:60:a5:c7:47:71:09:40:
         83:63:73:29
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUT/OeKmaTdv+ZnzK2PD/7bSWDLQ4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIyMDEyMDQyWhcNMjcwMTIwMjM1OTU5
WjB6MUkwRwYDVQQFE0A2OWZkYmM2YjIzOTE3YWExYjE3MWZiZGIzZjljMGQ1ZjIw
MDA0MWRiNmNkZmQ2N2MzYmY3OGIyYWNmYzYzNGVlMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDGKtl62Rr8Sw920JDG+FSQZiGJ/KgXM09kmJae3FJIbSqO
aJzladCt3kXjueGt2fgA48n+KLnQlQmdPxcqSE9nkVbLm5lX7frFAW8Ypsf96DjW
wLZTJ8PNw5n5St0YKCyfvPYEIbOE9spd1097gICKrujjNWJ9R0I0LhXky4L4pE5y
gY4EFBdB55uPySqB1Gy/8I0IaKbXN16CZNAj0pPXEKa6rM9Rd+jiFl+L/DuNNfeM
mepTj3dTHT4qg0KJc9aAH5kOgLn8NPgdkL/qpSw96qZHuSiXmHZl6Uk+l62/ApZy
CY2+W6c5Tm7QPoWDEDeGwunZgPqPeodbE8Xe3v9BAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU8OmBy6AnXG4z6F989HIdiUw6W3swHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzQ4ZjUxZDczLWE1ZjItNGQ2Yy04YjZlLTc5NmUzNzE2NzE3ZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABsiAAwDQYJKoZIhvcNAQELBQADggEBAGqycFlVbdugN0j3IJLRVtfpWisC
lofQrIk1zGdqseZFR2B7R5fk+GWaJiZDvQMqaJrXOAcvqRwBFP1tYR5xuEIZVnkS
U+AZIPn7WEuRFH5KThzCHKGWcwjI1g1eGkJLl2FCoIVbNz3/hmstYmTm+2Ut8/BW
Kn4IhM9Q5Fp6cOLk+tp81nmAuAO5aoyykp5PZRr0ngn8FL1Ya/xAtmWPoT2yp7im
cjVhTbBGWOFxtnjPHEdnxijZwV9CcIZfS/SWHRCotV6olfe53c8N77Cr9haCORNc
JQ1/Dbt/YP54tdb0/ZV9AqTuA0FYpeVPHzUJmNwvH/yGYKXHR3EJQINjcyk=
-----END CERTIFICATE-----
Generated at Tue Nov 3 12:02:51 2026 by rpki-client