Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67111c8b-4bd5-4381-9d25-28015780cd00.roa
File:                     67111c8b-4bd5-4381-9d25-28015780cd00.roa (raw, json)
Hash identifier:          UbDVw7BgA5T9xmB2cwfBVWEiqbwDPjl8yFIag9wK8+0=
Subject key identifier:   27:C5:B8:13:96:12:70:DA:3D:1B:6C:4F:E0:B2:6C:8D:43:50:4C:A6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       66392F0FCA8C3111D7947EBEBA3C4E47FF458950
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67111c8b-4bd5-4381-9d25-28015780cd00.roa
Signing time:             Fri 07 Aug 2026 00:40:05 +0000
ROA not before:           Fri 07 Aug 2026 00:40:05 +0000
ROA not after:            Thu 05 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        88.108.0.0/14 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:39:2f:0f:ca:8c:31:11:d7:94:7e:be:ba:3c:4e:47:ff:45:89:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  7 00:40:05 2026 GMT
            Not After : Nov  5 23:59:59 2026 GMT
        Subject: serialNumber=f83452dfe708d31fa74f66e084f3c6e8daaa32b060104a37762a62d5e05d795c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3f:e3:78:8e:f2:b0:1b:92:1e:b5:03:99:8f:
                    3a:e1:01:54:76:d6:36:6c:ab:5b:19:7c:87:0b:b0:
                    c1:51:15:1a:da:69:df:ea:82:67:5f:f2:43:d3:d6:
                    a1:ba:c4:d4:a6:0f:14:9f:ad:fb:5d:ee:4b:b5:40:
                    62:e7:8c:29:69:22:85:48:61:63:76:5d:fc:eb:f8:
                    b7:2b:ad:a5:e6:a7:c5:66:4d:3f:ba:c9:68:98:55:
                    d1:97:07:52:84:d9:da:d4:6e:f6:3f:13:cc:5a:58:
                    09:5d:4c:6d:29:74:04:21:b3:fe:68:3a:62:84:be:
                    54:61:27:dc:49:35:07:42:3a:3a:6e:ac:51:d5:f8:
                    25:6a:dc:cc:af:58:6b:ad:5d:4c:5a:3e:87:58:24:
                    7d:65:bd:df:1f:45:88:75:4d:bb:fd:9c:cc:48:f6:
                    3e:fe:9d:e9:6e:48:c4:55:14:91:48:0a:c9:3e:a5:
                    ef:ac:ff:c4:cc:b4:c6:db:7c:a4:0a:9b:f2:f3:35:
                    0e:4c:c1:04:b3:f4:d7:9c:a6:e4:b6:2a:e3:36:e4:
                    31:b1:12:0c:fc:04:e9:d3:a1:c4:01:69:1a:d8:e0:
                    37:72:90:04:6e:b7:fc:00:c5:21:cf:de:8c:6f:bc:
                    5e:b9:6b:6a:96:cf:77:3a:a9:b7:19:62:2e:e9:f2:
                    8f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:C5:B8:13:96:12:70:DA:3D:1B:6C:4F:E0:B2:6C:8D:43:50:4C:A6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67111c8b-4bd5-4381-9d25-28015780cd00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.108.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         0a:3b:40:9b:8c:c6:0d:2c:ee:50:0d:2d:1f:78:df:f7:dc:9b:
         30:0d:c8:39:04:8c:a8:0b:fb:74:f4:37:e7:18:ed:95:3d:23:
         6a:0e:8e:da:9c:f7:fc:5b:e4:6e:33:b4:c3:fb:23:91:3e:dc:
         09:ef:0c:68:8a:93:38:65:7a:21:ad:1f:98:05:b3:5c:ab:96:
         3f:9d:af:49:40:8c:a0:4c:68:d7:0c:6e:0d:db:89:37:d4:bb:
         61:4e:04:8b:0b:b1:52:fe:2e:ec:68:7c:a4:ee:e3:c6:da:5e:
         78:b7:bf:51:e2:7c:64:cc:a5:50:ed:d4:07:02:a8:4f:8a:25:
         e7:ba:7e:49:79:cc:af:05:44:b9:6f:7e:7f:9b:b2:9e:74:3f:
         d7:38:f3:78:1a:c7:17:64:16:73:ec:97:7e:2b:90:2d:19:15:
         d2:31:d0:6c:c7:cd:9a:26:26:91:cc:ca:42:e7:ad:fe:db:ee:
         5c:66:80:5c:ee:ab:c6:e5:2b:60:0a:7f:f9:db:77:41:86:ad:
         6f:2f:1d:25:b4:9a:5b:1d:de:d1:6f:d3:d2:01:d4:f5:51:e9:
         9b:be:74:f0:04:1d:2c:46:cb:67:74:1b:2f:f6:c2:f4:1b:b4:
         d6:70:9a:06:7f:72:30:70:fa:82:f1:b0:a4:98:fa:30:1a:17:
         64:fd:3a:5e
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUZjkvD8qMMRHXlH6+ujxOR/9FiVAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA3MDA0MDA1WhcNMjYxMTA1MjM1OTU5
WjB6MUkwRwYDVQQFE0BmODM0NTJkZmU3MDhkMzFmYTc0ZjY2ZTA4NGYzYzZlOGRh
YWEzMmIwNjAxMDRhMzc3NjJhNjJkNWUwNWQ3OTVjMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC8P+N4jvKwG5IetQOZjzrhAVR21jZsq1sZfIcLsMFRFRra
ad/qgmdf8kPT1qG6xNSmDxSfrftd7ku1QGLnjClpIoVIYWN2Xfzr+LcrraXmp8Vm
TT+6yWiYVdGXB1KE2drUbvY/E8xaWAldTG0pdAQhs/5oOmKEvlRhJ9xJNQdCOjpu
rFHV+CVq3MyvWGutXUxaPodYJH1lvd8fRYh1Tbv9nMxI9j7+neluSMRVFJFICsk+
pe+s/8TMtMbbfKQKm/LzNQ5MwQSz9NecpuS2KuM25DGxEgz8BOnTocQBaRrY4Ddy
kARut/wAxSHP3oxvvF65a2qWz3c6qbcZYi7p8o+rAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUJ8W4E5YScNo9G2xP4LJsjUNQTKYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzY3MTExYzhiLTRiZDUtNDM4MS05ZDI1LTI4MDE1NzgwY2QwMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwJYbDANBgkqhkiG9w0BAQsFAAOCAQEACjtAm4zGDSzuUA0tH3jf99ybMA3I
OQSMqAv7dPQ35xjtlT0jag6O2pz3/FvkbjO0w/sjkT7cCe8MaIqTOGV6Ia0fmAWz
XKuWP52vSUCMoExo1wxuDduJN9S7YU4EiwuxUv4u7Gh8pO7jxtpeeLe/UeJ8ZMyl
UO3UBwKoT4ol57p+SXnMrwVEuW9+f5uynnQ/1zjzeBrHF2QWc+yXfiuQLRkV0jHQ
bMfNmiYmkczKQuet/tvuXGaAXO6rxuUrYAp/+dt3QYatby8dJbSaWx3e0W/T0gHU
9VHpm7508AQdLEbLZ3QbL/bC9Bu01nCaBn9yMHD6gvGwpJj6MBoXZP06Xg==
-----END CERTIFICATE-----
Generated at Thu Sep 17 16:58:14 2026 by rpki-client