Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62086a8c-d18a-4908-a1f6-71630fcdf8fe.roa
File:                     62086a8c-d18a-4908-a1f6-71630fcdf8fe.roa (raw, json)
Hash identifier:          oX59EwTtSDAcFFvnJ1FNj/P9jFYzN0RM3QMXnsG5LWc=
Subject key identifier:   DF:6F:B0:E5:7F:3B:47:B5:EC:77:DF:AF:B2:B1:2F:E4:13:9D:89:7B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0BDE1ADB16329D6509EF807A205F49E26578B8C4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62086a8c-d18a-4908-a1f6-71630fcdf8fe.roa
Signing time:             Wed 29 Apr 2026 00:20:29 +0000
ROA not before:           Wed 29 Apr 2026 00:20:29 +0000
ROA not after:            Tue 28 Jul 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        56.114.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:de:1a:db:16:32:9d:65:09:ef:80:7a:20:5f:49:e2:65:78:b8:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 29 00:20:29 2026 GMT
            Not After : Jul 28 23:59:59 2026 GMT
        Subject: serialNumber=1e1577463e2f55abc9d6ac053f53035b7b414e89ba197a275d7c900d64df8dc9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e9:58:9b:a2:75:90:0a:e8:6c:6d:94:d8:cb:
                    15:4b:88:0b:41:7c:4f:3b:1a:ed:20:6b:f8:94:6d:
                    8b:9e:a5:e2:31:b7:fc:47:e2:79:e6:d3:ed:25:e9:
                    7e:6f:19:d4:73:6d:dc:37:2e:a9:dd:7d:51:a3:34:
                    e0:73:26:89:de:6b:00:d3:dd:05:b7:bc:39:ac:7f:
                    43:23:9c:53:1d:ef:57:fc:4f:c9:d4:13:b0:10:08:
                    d5:c4:3f:64:f8:2d:4d:a5:0e:bc:c1:92:40:3c:0f:
                    26:51:c8:64:da:99:a6:97:0a:c6:91:31:2a:2d:c6:
                    41:5a:76:96:af:1a:db:23:36:00:c6:1d:47:82:ac:
                    47:a1:1f:ed:b4:b0:83:96:4b:1d:ce:d6:1e:44:12:
                    ef:08:ad:6e:e9:9d:dc:e3:76:26:38:36:7b:20:07:
                    99:3b:76:42:6b:7f:25:e7:8e:de:8f:50:7e:6f:1a:
                    96:47:07:68:6b:92:f8:e3:c8:15:12:cf:0b:82:a4:
                    e5:74:ad:fe:4a:99:1b:1b:1d:e1:d3:2e:06:bb:64:
                    df:e2:df:47:7a:95:d2:32:f6:ee:a9:e5:49:5a:cb:
                    e4:6e:d6:37:cc:70:65:9b:b2:99:1f:e0:ab:27:71:
                    f8:10:5b:6d:44:4c:cf:76:cd:1f:58:d5:86:41:9d:
                    69:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:6F:B0:E5:7F:3B:47:B5:EC:77:DF:AF:B2:B1:2F:E4:13:9D:89:7B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62086a8c-d18a-4908-a1f6-71630fcdf8fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.114.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         0f:90:a3:af:4d:23:a0:7b:63:87:86:b6:83:91:2d:91:3e:54:
         0d:ed:db:46:12:44:5b:d2:44:58:e8:09:03:6b:65:64:2d:59:
         ba:56:13:46:dd:0e:f1:ee:ac:70:78:36:87:b3:6f:51:b3:34:
         59:5f:ae:f1:8d:0c:1d:55:e3:6e:e1:f8:78:3b:08:fe:98:ea:
         77:ad:e0:0f:fc:39:3f:06:f9:75:de:b5:ad:f5:9f:d8:10:28:
         17:ec:8e:40:78:7b:ec:31:cf:fb:54:e1:53:4a:43:94:82:a7:
         6c:66:7d:c6:4f:c4:ed:32:7b:bf:58:71:f1:2e:ab:ea:fe:54:
         e3:87:2c:fe:d7:a6:c2:51:3a:56:de:dd:13:7e:66:6f:68:d1:
         ae:42:e3:f0:ff:81:d5:7f:68:3d:72:68:88:f8:1d:1b:e3:5a:
         05:9d:0c:5c:ce:6b:8c:9c:71:59:9c:ae:07:d1:06:35:16:4f:
         de:9c:fc:27:12:25:58:c5:be:f4:40:97:81:ae:6e:bf:8e:fb:
         6d:b5:34:25:b0:86:c0:98:1c:89:27:8d:f9:ba:1b:fb:1b:50:
         92:37:a1:e5:4c:04:c8:c3:13:bc:ab:c4:ca:96:51:d4:2f:db:
         b8:43:af:30:61:2d:e8:41:c6:f7:30:70:c2:4b:ca:43:e0:df:
         d4:79:67:0f
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUC94a2xYynWUJ74B6IF9J4mV4uMQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNDI5MDAyMDI5WhcNMjYwNzI4MjM1OTU5
WjB6MUkwRwYDVQQFE0AxZTE1Nzc0NjNlMmY1NWFiYzlkNmFjMDUzZjUzMDM1Yjdi
NDE0ZTg5YmExOTdhMjc1ZDdjOTAwZDY0ZGY4ZGM5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCI6VibonWQCuhsbZTYyxVLiAtBfE87Gu0ga/iUbYuepeIx
t/xH4nnm0+0l6X5vGdRzbdw3LqndfVGjNOBzJoneawDT3QW3vDmsf0MjnFMd71f8
T8nUE7AQCNXEP2T4LU2lDrzBkkA8DyZRyGTamaaXCsaRMSotxkFadpavGtsjNgDG
HUeCrEehH+20sIOWSx3O1h5EEu8IrW7pndzjdiY4NnsgB5k7dkJrfyXnjt6PUH5v
GpZHB2hrkvjjyBUSzwuCpOV0rf5KmRsbHeHTLga7ZN/i30d6ldIy9u6p5Ulay+Ru
1jfMcGWbspkf4KsncfgQW21ETM92zR9Y1YZBnWmzAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQU32+w5X87R7Xsd9+vsrEv5BOdiXswHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzYyMDg2YThjLWQxOGEtNDkwOC1hMWY2LTcxNjMwZmNkZjhmZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA4cjANBgkqhkiG9w0BAQsFAAOCAQEAD5Cjr00joHtjh4a2g5EtkT5UDe3b
RhJEW9JEWOgJA2tlZC1ZulYTRt0O8e6scHg2h7NvUbM0WV+u8Y0MHVXjbuH4eDsI
/pjqd63gD/w5Pwb5dd61rfWf2BAoF+yOQHh77DHP+1ThU0pDlIKnbGZ9xk/E7TJ7
v1hx8S6r6v5U44cs/temwlE6Vt7dE35mb2jRrkLj8P+B1X9oPXJoiPgdG+NaBZ0M
XM5rjJxxWZyuB9EGNRZP3pz8JxIlWMW+9ECXga5uv477bbU0JbCGwJgciSeN+bob
+xtQkjeh5UwEyMMTvKvEypZR1C/buEOvMGEt6EHG9zBwwkvKQ+Df1HlnDw==
-----END CERTIFICATE-----
Generated at Mon May 4 21:38:43 2026 by rpki-client