Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/69ea5e37-ad95-4815-8e82-1aa4f4f37ec6.roa
File:                     69ea5e37-ad95-4815-8e82-1aa4f4f37ec6.roa (raw, json)
Hash identifier:          sAFRUNS0iBsJwJj6Z9NpbHU5kbDV9BS9IIZ2aCVh9ZU=
Subject key identifier:   CB:03:63:FB:47:48:F5:E6:CA:A2:3D:47:3D:95:33:20:7A:95:B1:35
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       24990B50732EC1C14BAE8D31291A38E453616FF8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/69ea5e37-ad95-4815-8e82-1aa4f4f37ec6.roa
Signing time:             Sun 11 Oct 2026 00:10:45 +0000
ROA not before:           Sun 11 Oct 2026 00:10:45 +0000
ROA not after:            Sat 09 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        13.160.32.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:99:0b:50:73:2e:c1:c1:4b:ae:8d:31:29:1a:38:e4:53:61:6f:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 11 00:10:45 2026 GMT
            Not After : Jan  9 23:59:59 2027 GMT
        Subject: serialNumber=abcd72dfd246b8b0ee0b6b2df7b974b4547052f6e7dd03c4e97ab8547d3f161f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:de:53:d1:6e:c2:93:36:35:e2:84:11:dd:49:
                    53:dc:11:8c:71:3a:15:0a:26:19:9a:93:57:58:c8:
                    8f:0f:5d:90:bc:53:92:0a:6d:a0:cf:3c:73:b3:b7:
                    20:17:a2:97:6d:10:76:1c:da:13:4b:ae:ed:35:7b:
                    5d:11:9d:67:cd:a1:da:aa:26:ce:6e:b1:8e:b9:f6:
                    b4:39:eb:69:02:ca:c4:4f:c0:12:f3:17:0a:36:92:
                    4b:b9:a9:00:39:5d:0b:22:1c:37:98:34:44:01:8c:
                    49:fb:88:ab:80:19:e8:a4:5b:dc:f4:aa:cc:27:af:
                    82:d1:d1:b8:32:a5:df:85:4b:c6:2f:84:21:b0:69:
                    9a:ba:fd:ef:28:c9:05:88:07:95:18:e1:5e:42:e8:
                    76:e1:14:4b:eb:f4:ec:bc:96:6b:ee:e8:14:d0:f2:
                    a6:c2:16:c5:88:44:d9:4e:43:18:53:4b:28:8d:48:
                    c0:e0:23:0b:e4:d8:c5:d7:1d:ae:e5:de:77:30:4c:
                    25:16:52:9f:cd:ff:43:c3:3a:72:b6:a6:d3:f8:e1:
                    04:7f:68:99:5c:ca:e3:29:28:a7:98:b5:eb:59:95:
                    ea:b7:98:c4:09:b0:67:91:f3:f7:1e:68:b0:c3:75:
                    50:99:89:79:c5:7c:7c:13:f1:11:ed:b3:e1:d0:ac:
                    64:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:03:63:FB:47:48:F5:E6:CA:A2:3D:47:3D:95:33:20:7A:95:B1:35
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/69ea5e37-ad95-4815-8e82-1aa4f4f37ec6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.160.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         22:6b:46:10:00:a8:5a:16:1f:b0:01:61:7e:fd:7e:09:d4:13:
         08:d8:8f:0a:d7:0b:74:5d:db:0b:bc:3f:94:db:36:a0:2e:b4:
         4c:12:66:8a:7d:99:d8:ad:f7:01:b3:c5:69:87:be:6d:ce:49:
         52:ce:a9:60:bc:26:a0:8b:12:f0:ff:d2:d3:46:ae:b0:0e:a0:
         8e:71:f3:5b:26:a7:49:93:33:dd:45:3a:8c:14:71:62:fd:d3:
         9b:58:4b:b6:ac:82:c5:8d:d4:49:99:da:2c:2f:b5:c2:91:a4:
         fc:8a:06:9c:a5:66:7f:a4:2a:90:37:19:2a:1d:f1:b8:38:b4:
         cb:e6:78:b2:c5:46:47:40:f7:ad:e4:66:e1:0f:9a:9b:76:df:
         8b:50:8a:03:08:84:a3:c3:f2:14:5e:e5:6f:51:25:9b:82:5b:
         27:db:d9:e7:5e:c7:2e:4d:4f:cd:27:42:58:f8:a5:cd:e4:c3:
         b0:40:b7:ff:dd:d3:a8:d5:5f:7d:5b:2c:4b:52:cd:bb:b9:ce:
         ce:e3:98:c0:e9:05:1a:9f:38:53:cc:85:9d:04:49:26:0d:7d:
         21:0d:09:19:1b:15:e3:ee:fe:ea:54:6a:4a:23:87:a7:48:70:
         6c:63:de:e4:b4:4e:2f:63:ad:13:dc:f4:c1:00:a3:64:ab:ae:
         a0:89:d5:c3
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUJJkLUHMuwcFLro0xKRo45FNhb/gwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDExMDAxMDQ1WhcNMjcwMTA5MjM1OTU5
WjB6MUkwRwYDVQQFE0BhYmNkNzJkZmQyNDZiOGIwZWUwYjZiMmRmN2I5NzRiNDU0
NzA1MmY2ZTdkZDAzYzRlOTdhYjg1NDdkM2YxNjFmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDT3lPRbsKTNjXihBHdSVPcEYxxOhUKJhmak1dYyI8PXZC8
U5IKbaDPPHOztyAXopdtEHYc2hNLru01e10RnWfNodqqJs5usY659rQ562kCysRP
wBLzFwo2kku5qQA5XQsiHDeYNEQBjEn7iKuAGeikW9z0qswnr4LR0bgypd+FS8Yv
hCGwaZq6/e8oyQWIB5UY4V5C6HbhFEvr9Oy8lmvu6BTQ8qbCFsWIRNlOQxhTSyiN
SMDgIwvk2MXXHa7l3ncwTCUWUp/N/0PDOnK2ptP44QR/aJlcyuMpKKeYtetZleq3
mMQJsGeR8/ceaLDDdVCZiXnFfHwT8RHts+HQrGSfAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUywNj+0dI9ebKoj1HPZUzIHqVsTUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzY5ZWE1ZTM3LWFkOTUtNDgxNS04ZTgyLTFhYTRmNGYzN2VjNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAMNoCAwDQYJKoZIhvcNAQELBQADggEBACJrRhAAqFoWH7ABYX79fgnUEwjY
jwrXC3Rd2wu8P5TbNqAutEwSZop9mdit9wGzxWmHvm3OSVLOqWC8JqCLEvD/0tNG
rrAOoI5x81smp0mTM91FOowUcWL905tYS7asgsWN1EmZ2iwvtcKRpPyKBpylZn+k
KpA3GSod8bg4tMvmeLLFRkdA963kZuEPmpt234tQigMIhKPD8hRe5W9RJZuCWyfb
2edexy5NT80nQlj4pc3kw7BAt//d06jVX31bLEtSzbu5zs7jmMDpBRqfOFPMhZ0E
SSYNfSENCRkbFePu/upUakojh6dIcGxj3uS0Ti9jrRPc9MEAo2SrrqCJ1cM=
-----END CERTIFICATE-----
Generated at Mon Nov 2 18:48:13 2026 by rpki-client