Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/557ead45-b1a7-4106-be3c-6b610ae5759c.roa
File:                     557ead45-b1a7-4106-be3c-6b610ae5759c.roa (raw, json)
Hash identifier:          xdFf7tPT58+fqOHNkeq6DIfCWbTQwoi7jeDp0PQCtvw=
Subject key identifier:   37:8E:49:37:8B:06:B8:B3:31:AB:29:86:95:A3:FF:E7:CA:AA:E6:16
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       188A72D04EC2968E5FFD1AE1AF94EFD87F524869
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/557ead45-b1a7-4106-be3c-6b610ae5759c.roa
Signing time:             Sat 08 Aug 2026 00:01:13 +0000
ROA not before:           Sat 08 Aug 2026 00:01:13 +0000
ROA not after:            Fri 06 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        98.131.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:8a:72:d0:4e:c2:96:8e:5f:fd:1a:e1:af:94:ef:d8:7f:52:48:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  8 00:01:13 2026 GMT
            Not After : Nov  6 23:59:59 2026 GMT
        Subject: serialNumber=2c56ad0de2935afa68355974285aa28910fa608f143840453eb4660ffdd82827, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d2:71:1a:03:57:00:9f:7f:3a:e9:ce:99:00:
                    60:6a:78:ec:80:55:5b:92:fe:19:c0:13:ea:20:74:
                    bc:c0:07:2c:f3:df:c3:1a:80:31:bd:2d:8b:1e:3a:
                    67:2e:a4:4d:7d:ab:b4:b9:87:7d:e5:e3:81:81:11:
                    d3:dc:c4:2e:97:05:5f:8b:03:ad:01:48:84:40:f8:
                    28:76:12:cc:fd:64:b5:e1:f4:3e:17:2a:07:a2:ef:
                    b8:a6:6f:5f:77:32:b7:ae:80:70:e8:9b:f3:e9:27:
                    2f:66:57:dc:a2:65:fa:c9:00:49:48:70:66:b6:b0:
                    34:ca:bf:d4:18:8e:57:e8:e3:f6:98:77:6f:91:75:
                    79:e0:84:9a:50:5c:13:48:b4:2a:75:b5:37:6d:fb:
                    f1:b1:a4:1b:f2:66:65:fd:22:64:af:5f:bc:04:0b:
                    2c:a1:64:eb:2f:7c:4a:e7:d1:9a:51:84:8c:45:72:
                    90:ea:0c:b2:e2:75:ea:f6:df:97:03:ed:92:b4:47:
                    eb:90:59:af:c1:46:0a:31:ba:30:36:d0:cc:4f:94:
                    55:2e:be:47:7f:f1:38:7a:88:45:40:c4:dd:88:08:
                    1e:00:78:ce:33:ea:69:cf:b3:65:52:e1:af:cb:79:
                    21:70:23:cf:68:16:3d:80:03:bb:74:da:90:80:9e:
                    a7:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:8E:49:37:8B:06:B8:B3:31:AB:29:86:95:A3:FF:E7:CA:AA:E6:16
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/557ead45-b1a7-4106-be3c-6b610ae5759c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.131.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         84:41:be:34:48:ee:f5:e5:f6:a7:12:13:2e:b5:08:b0:58:84:
         57:52:3b:f6:bb:26:f6:fc:3d:71:03:0c:a8:93:b8:f3:8a:3b:
         11:54:08:3d:cd:86:b4:02:11:a1:ee:96:e5:e6:12:85:3c:6a:
         43:a1:7a:f1:1e:43:88:38:ac:1d:0f:65:7f:72:45:84:b4:59:
         0e:5a:9d:56:c1:0c:1e:1b:cf:7b:44:e4:84:85:30:a1:59:04:
         c8:dd:13:76:f8:31:26:69:99:ee:a3:15:56:0e:be:8e:1b:a1:
         18:ed:96:e9:40:d7:cd:02:91:a9:c7:16:a7:81:7f:c7:d3:74:
         1b:75:87:de:b9:91:aa:23:0c:a2:84:43:27:82:a5:a0:1d:fa:
         04:69:5f:5d:f4:a5:38:f3:42:4d:72:fe:d0:89:28:65:aa:9d:
         a6:e7:cd:e0:44:9a:88:7e:ff:38:8d:a9:51:29:25:b4:ff:5a:
         f1:79:b5:9f:cf:21:aa:ef:d4:5b:15:a1:35:bb:30:a6:e2:e6:
         7a:eb:fd:89:33:41:89:f3:b4:91:6d:d1:72:92:7b:8a:ae:a2:
         8a:6b:23:52:71:2f:e8:08:b6:82:7a:a3:89:4b:d4:ae:2e:0c:
         ee:70:8c:de:4e:f9:a9:62:e5:14:05:d8:ca:82:f5:6f:f4:21:
         1c:71:4d:d7
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUGIpy0E7Clo5f/Rrhr5Tv2H9SSGkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA4MDAwMTEzWhcNMjYxMTA2MjM1OTU5
WjB6MUkwRwYDVQQFE0AyYzU2YWQwZGUyOTM1YWZhNjgzNTU5NzQyODVhYTI4OTEw
ZmE2MDhmMTQzODQwNDUzZWI0NjYwZmZkZDgyODI3MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCf0nEaA1cAn3866c6ZAGBqeOyAVVuS/hnAE+ogdLzAByzz
38MagDG9LYseOmcupE19q7S5h33l44GBEdPcxC6XBV+LA60BSIRA+Ch2Esz9ZLXh
9D4XKgei77imb193MreugHDom/PpJy9mV9yiZfrJAElIcGa2sDTKv9QYjlfo4/aY
d2+RdXnghJpQXBNItCp1tTdt+/GxpBvyZmX9ImSvX7wECyyhZOsvfErn0ZpRhIxF
cpDqDLLider235cD7ZK0R+uQWa/BRgoxujA20MxPlFUuvkd/8Th6iEVAxN2ICB4A
eM4z6mnPs2VS4a/LeSFwI89oFj2AA7t02pCAnqf1AgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUN45JN4sGuLMxqymGlaP/58qq5hYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzU1N2VhZDQ1LWIxYTctNDEwNi1iZTNjLTZiNjEwYWU1NzU5Yy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwBigzANBgkqhkiG9w0BAQsFAAOCAQEAhEG+NEju9eX2pxITLrUIsFiEV1I7
9rsm9vw9cQMMqJO484o7EVQIPc2GtAIRoe6W5eYShTxqQ6F68R5DiDisHQ9lf3JF
hLRZDlqdVsEMHhvPe0TkhIUwoVkEyN0TdvgxJmmZ7qMVVg6+jhuhGO2W6UDXzQKR
qccWp4F/x9N0G3WH3rmRqiMMooRDJ4KloB36BGlfXfSlOPNCTXL+0IkoZaqdpufN
4ESaiH7/OI2pUSkltP9a8Xm1n88hqu/UWxWhNbswpuLmeuv9iTNBifO0kW3RcpJ7
iq6iimsjUnEv6Ai2gnqjiUvUri4M7nCM3k75qWLlFAXYyoL1b/QhHHFN1w==
-----END CERTIFICATE-----
Generated at Thu Sep 17 18:51:43 2026 by rpki-client