Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/603d26d7-c121-42e1-817f-ef0a806e3d69.roa
File:                     603d26d7-c121-42e1-817f-ef0a806e3d69.roa (raw, json)
Hash identifier:          O3oWz2Dg8ngRlmaCMSTI2yD7nSyzvj18K6trB6UOqM4=
Subject key identifier:   70:12:F7:E0:F7:2E:D9:2C:57:03:0D:E1:CE:60:A1:F0:54:9C:E7:73
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4E95C01C3E73D59FA0F4DE5A6FB1C40B07E25945
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/603d26d7-c121-42e1-817f-ef0a806e3d69.roa
Signing time:             Mon 03 Aug 2026 02:20:03 +0000
ROA not before:           Mon 03 Aug 2026 02:20:03 +0000
ROA not after:            Sun 01 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        185.212.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:95:c0:1c:3e:73:d5:9f:a0:f4:de:5a:6f:b1:c4:0b:07:e2:59:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  3 02:20:03 2026 GMT
            Not After : Nov  1 23:59:59 2026 GMT
        Subject: serialNumber=a5f2d8c989a0fa6935b82fa05c1b28f6e87df4265e5799d8224f2b4981548f48, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:35:1c:ec:7a:81:f7:fa:17:2b:bb:0d:5b:b5:
                    6c:93:4f:48:70:4f:28:99:c4:8e:0f:c0:2e:52:5f:
                    87:be:4d:28:eb:8f:8e:d5:af:f5:e1:b7:65:07:20:
                    aa:7e:7d:3b:72:89:41:7f:e8:e1:b0:70:ed:7f:18:
                    79:01:e6:e3:83:6e:25:47:56:8c:4a:48:dc:2b:12:
                    5a:48:d6:f3:16:7e:41:89:7f:76:90:e4:59:89:e9:
                    24:b7:41:33:99:c9:ca:2a:0a:9d:38:1c:2f:0e:e7:
                    b3:20:95:0d:74:7b:39:c3:0d:a6:26:e0:c2:ee:08:
                    58:e7:b8:d1:7f:8e:8c:9b:f2:ad:98:61:de:3c:08:
                    5c:f9:81:7d:28:ac:52:40:88:d2:ae:5e:4a:c7:c0:
                    62:bf:69:54:72:06:3c:05:b3:a5:2e:84:03:7e:cd:
                    53:bf:a5:be:05:97:2c:2c:8d:05:17:0b:4e:9c:bb:
                    90:9c:56:3f:84:95:44:db:72:7a:76:1b:4d:e3:3b:
                    6e:57:c0:80:f4:cb:de:ce:cd:81:81:e5:e4:d5:0f:
                    99:5f:99:f0:09:bb:54:73:c1:bc:8b:cd:af:d9:72:
                    f6:77:1f:55:85:db:e0:25:fc:94:ec:bc:4c:6e:08:
                    e0:08:92:ca:f8:e3:52:31:83:5f:02:b4:6c:24:5f:
                    33:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:12:F7:E0:F7:2E:D9:2C:57:03:0D:E1:CE:60:A1:F0:54:9C:E7:73
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/603d26d7-c121-42e1-817f-ef0a806e3d69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.212.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:86:df:3b:14:fe:cc:e1:b8:12:e7:61:32:bb:ca:79:36:fa:
         11:92:b6:ca:fa:ed:bb:f2:8b:84:35:52:b7:f3:ba:f7:a6:08:
         12:a3:e8:13:94:e6:31:20:42:77:3c:2c:a9:60:e1:da:11:7b:
         5c:af:89:c3:c1:3f:80:c6:8c:63:2e:a3:12:63:f0:eb:d8:ed:
         a4:c3:d8:04:3c:0b:b6:93:41:e0:8c:c9:4c:f8:6a:96:a9:9c:
         e4:9f:34:60:df:9d:ae:dd:cf:07:cc:7a:81:33:4e:21:40:ee:
         bb:0c:dc:99:5b:7c:9d:34:0b:60:18:d4:06:68:3d:98:ab:0c:
         e7:4f:6c:55:6b:8f:0d:2b:de:0e:3b:8d:42:7e:68:96:bf:ac:
         25:a5:42:ee:8c:43:14:6a:92:a8:f2:1c:8e:c5:77:1d:dc:9d:
         c6:6f:fd:3b:de:41:17:a7:2b:2c:ed:ae:f9:36:49:7f:e7:5d:
         7d:cb:b5:ed:63:d4:4b:cc:ce:8b:0c:a6:79:8b:19:dc:19:1d:
         02:ac:e5:8f:45:bc:dd:1d:9d:fd:9a:55:d9:15:e6:12:6c:18:
         d0:7c:ba:b0:83:1c:50:19:01:92:fd:05:47:d9:88:15:4b:34:
         24:5a:86:04:9a:a8:69:e1:65:14:a8:5f:d5:5d:29:0c:79:e2:
         b2:8e:07:80
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUTpXAHD5z1Z+g9N5ab7HECwfiWUUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODAzMDIyMDAzWhcNMjYxMTAxMjM1OTU5
WjB6MUkwRwYDVQQFE0BhNWYyZDhjOTg5YTBmYTY5MzViODJmYTA1YzFiMjhmNmU4
N2RmNDI2NWU1Nzk5ZDgyMjRmMmI0OTgxNTQ4ZjQ4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCVNRzseoH3+hcruw1btWyTT0hwTyiZxI4PwC5SX4e+TSjr
j47Vr/Xht2UHIKp+fTtyiUF/6OGwcO1/GHkB5uODbiVHVoxKSNwrElpI1vMWfkGJ
f3aQ5FmJ6SS3QTOZycoqCp04HC8O57MglQ10eznDDaYm4MLuCFjnuNF/joyb8q2Y
Yd48CFz5gX0orFJAiNKuXkrHwGK/aVRyBjwFs6UuhAN+zVO/pb4FlywsjQUXC06c
u5CcVj+ElUTbcnp2G03jO25XwID0y97OzYGB5eTVD5lfmfAJu1RzwbyLza/ZcvZ3
H1WF2+Al/JTsvExuCOAIksr441Ixg18CtGwkXzM9AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUcBL34Pcu2SxXAw3hzmCh8FSc53MwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzYwM2QyNmQ3LWMxMjEtNDJlMS04MTdmLWVmMGE4MDZlM2Q2OS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAK51MgwDQYJKoZIhvcNAQELBQADggEBABaG3zsU/szhuBLnYTK7ynk2+hGS
tsr67bvyi4Q1UrfzuvemCBKj6BOU5jEgQnc8LKlg4doRe1yvicPBP4DGjGMuoxJj
8OvY7aTD2AQ8C7aTQeCMyUz4apapnOSfNGDfna7dzwfMeoEzTiFA7rsM3JlbfJ00
C2AY1AZoPZirDOdPbFVrjw0r3g47jUJ+aJa/rCWlQu6MQxRqkqjyHI7Fdx3cncZv
/TveQRenKyztrvk2SX/nXX3Lte1j1EvMzosMpnmLGdwZHQKs5Y9FvN0dnf2aVdkV
5hJsGNB8urCDHFAZAZL9BUfZiBVLNCRahgSaqGnhZRSoX9VdKQx54rKOB4A=
-----END CERTIFICATE-----
Generated at Mon Aug 3 06:46:11 2026 by rpki-client