Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/54617a89-f657-4d42-b15c-a54d06cf7478.roa
File:                     54617a89-f657-4d42-b15c-a54d06cf7478.roa (raw, json)
Hash identifier:          Nl74wPenkb/9Myz2y2myHmDjhRP+hIcgQarBbvICQss=
Subject key identifier:   2A:6F:B6:28:9B:41:DC:87:2C:6B:4C:BB:C7:8A:55:F1:16:27:FA:8A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       038CCC01BB87DF7AE7A561E20CD945EE3857772B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/54617a89-f657-4d42-b15c-a54d06cf7478.roa
Signing time:             Sun 11 Oct 2026 01:11:30 +0000
ROA not before:           Sun 11 Oct 2026 01:11:30 +0000
ROA not after:            Sat 09 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        76.223.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:8c:cc:01:bb:87:df:7a:e7:a5:61:e2:0c:d9:45:ee:38:57:77:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 11 01:11:30 2026 GMT
            Not After : Jan  9 23:59:59 2027 GMT
        Subject: serialNumber=1a593363db8ea3d2c8b42c725a3c729372b71844b0f7f0be7beb1717874e362b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a3:c2:ed:e7:e6:d9:a2:85:8e:b6:e2:7a:a8:
                    cc:48:33:36:a1:c8:76:a1:b9:6f:24:69:1b:45:f4:
                    84:a0:0a:a8:b2:aa:29:cf:77:01:ba:e9:52:98:a0:
                    cd:f0:8e:f3:07:6d:f6:a5:fd:1e:0b:89:00:f0:27:
                    f7:c7:40:db:eb:c2:10:1b:85:d4:92:15:5b:55:4e:
                    0f:40:66:5d:9a:d1:20:b0:c9:3f:0e:34:3e:4d:fd:
                    fb:6e:8f:59:a6:7b:14:33:b8:7a:c0:6b:2e:d9:90:
                    ff:89:27:07:32:a6:f5:3c:29:cb:88:76:4e:ab:69:
                    20:1b:a3:26:27:d1:e9:65:e2:5b:88:ab:88:92:9a:
                    f7:74:c8:b0:ff:f4:bc:08:80:e4:2f:a3:e0:87:d5:
                    15:35:02:d0:09:87:43:c0:e5:11:68:c8:89:13:eb:
                    24:ed:31:a5:12:08:76:50:28:a9:32:37:45:d7:5d:
                    6f:28:1a:55:2b:b1:1d:ca:d9:55:8f:71:c9:41:da:
                    66:3a:2f:34:52:38:d9:37:5b:2a:14:97:1e:39:c4:
                    bb:01:cc:4c:30:b1:c9:fa:86:ba:52:fc:89:d8:cd:
                    2c:b7:19:ca:00:40:14:a7:ce:dd:f0:e7:32:e1:b1:
                    4a:d5:a4:ea:cc:e1:68:b4:23:93:39:16:d6:53:46:
                    8a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:6F:B6:28:9B:41:DC:87:2C:6B:4C:BB:C7:8A:55:F1:16:27:FA:8A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/54617a89-f657-4d42-b15c-a54d06cf7478.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.223.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:fc:2a:52:f4:c3:e0:88:fe:d5:73:e3:6b:06:cf:ea:2b:2b:
         6c:97:b5:16:31:3f:75:ce:81:9c:d8:45:f8:f5:4b:2b:e3:d4:
         49:79:15:2c:69:e5:78:42:e4:c4:53:35:ce:b7:1e:2b:97:f5:
         d6:d4:cd:e3:b7:90:07:8c:21:17:27:67:8b:95:35:cb:66:78:
         5e:f3:9b:41:2d:15:3c:78:98:58:bc:eb:68:cf:84:13:38:83:
         9b:16:20:22:92:dc:a5:dc:4b:d2:52:41:00:16:77:f1:55:94:
         c0:54:48:10:66:ab:d3:90:93:26:76:19:de:4b:d4:7f:c1:e4:
         74:34:fe:f8:0e:3a:20:11:3a:86:ca:64:b1:6b:35:7b:99:0e:
         24:ed:5d:55:d6:2a:83:7c:47:2f:7b:91:b1:49:fd:62:af:f9:
         55:7c:19:78:48:9e:a2:31:a2:60:91:cd:26:09:78:93:11:9b:
         ce:39:89:dd:bd:3a:d8:ef:22:af:bd:d6:1d:d6:48:ac:52:3e:
         36:3a:81:ec:43:68:90:73:5c:ef:98:9d:ac:b6:f4:95:61:9a:
         61:1e:70:4f:36:15:d5:17:14:ca:40:fc:9d:1f:61:c2:35:93:
         2a:05:a1:91:7b:70:71:b3:b7:31:d1:b6:c8:eb:9a:da:f5:58:
         b8:ae:fa:cf
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUA4zMAbuH33rnpWHiDNlF7jhXdyswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDExMDExMTMwWhcNMjcwMTA5MjM1OTU5
WjB6MUkwRwYDVQQFE0AxYTU5MzM2M2RiOGVhM2QyYzhiNDJjNzI1YTNjNzI5Mzcy
YjcxODQ0YjBmN2YwYmU3YmViMTcxNzg3NGUzNjJiMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC5o8Lt5+bZooWOtuJ6qMxIMzahyHahuW8kaRtF9ISgCqiy
qinPdwG66VKYoM3wjvMHbfal/R4LiQDwJ/fHQNvrwhAbhdSSFVtVTg9AZl2a0SCw
yT8OND5N/ftuj1mmexQzuHrAay7ZkP+JJwcypvU8KcuIdk6raSAboyYn0ell4luI
q4iSmvd0yLD/9LwIgOQvo+CH1RU1AtAJh0PA5RFoyIkT6yTtMaUSCHZQKKkyN0XX
XW8oGlUrsR3K2VWPcclB2mY6LzRSONk3WyoUlx45xLsBzEwwscn6hrpS/InYzSy3
GcoAQBSnzt3w5zLhsUrVpOrM4Wi0I5M5FtZTRorZAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUKm+2KJtB3Icsa0y7x4pV8RYn+oowHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzU0NjE3YTg5LWY2NTctNGQ0Mi1iMTVjLWE1NGQwNmNmNzQ3OC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABM32MwDQYJKoZIhvcNAQELBQADggEBAGH8KlL0w+CI/tVz42sGz+orK2yX
tRYxP3XOgZzYRfj1Syvj1El5FSxp5XhC5MRTNc63HiuX9dbUzeO3kAeMIRcnZ4uV
NctmeF7zm0EtFTx4mFi862jPhBM4g5sWICKS3KXcS9JSQQAWd/FVlMBUSBBmq9OQ
kyZ2Gd5L1H/B5HQ0/vgOOiAROobKZLFrNXuZDiTtXVXWKoN8Ry97kbFJ/WKv+VV8
GXhInqIxomCRzSYJeJMRm845id29OtjvIq+91h3WSKxSPjY6gexDaJBzXO+Ynay2
9JVhmmEecE82FdUXFMpA/J0fYcI1kyoFoZF7cHGztzHRtsjrmtr1WLiu+s8=
-----END CERTIFICATE-----
Generated at Mon Nov 2 18:53:29 2026 by rpki-client