Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/69efde29-08ee-4f8e-ac98-6477bb18db8f.roa
File:                     69efde29-08ee-4f8e-ac98-6477bb18db8f.roa (raw, json)
Hash identifier:          +3iT7/J3vNHV9Bxp+J9K9SI7bPRQtaluCXvhQ0yt6tI=
Subject key identifier:   61:CD:74:ED:6E:ED:BC:95:30:F6:49:04:F1:A9:46:0D:4F:FE:44:CD
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       466540D10239272E2660756C7A13CA4CD89CC69F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/69efde29-08ee-4f8e-ac98-6477bb18db8f.roa
Signing time:             Tue 06 Oct 2026 00:20:32 +0000
ROA not before:           Tue 06 Oct 2026 00:20:32 +0000
ROA not after:            Mon 04 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        74.250.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:65:40:d1:02:39:27:2e:26:60:75:6c:7a:13:ca:4c:d8:9c:c6:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  6 00:20:32 2026 GMT
            Not After : Jan  4 23:59:59 2027 GMT
        Subject: serialNumber=009b8467af2af3ad8f8528f4fbb8cff64cec5388adf8742409fd30b822963bae, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:61:99:6f:98:96:fd:1f:47:73:cf:48:1a:82:
                    41:5e:f4:fb:da:dd:d9:f1:f4:b2:c2:57:56:e3:24:
                    c0:7b:8b:5c:a2:f3:41:93:25:eb:ec:7d:18:a2:82:
                    59:c7:86:5f:58:6f:16:92:0f:29:a2:62:6e:e5:98:
                    b2:34:33:4b:64:8c:6d:3b:c5:f6:b2:d5:fc:f3:e3:
                    33:89:cc:ef:68:ca:f7:01:06:0c:d0:a8:5c:48:2c:
                    e0:83:23:10:59:6e:cd:fa:c9:cb:b2:5c:05:91:a8:
                    ef:8b:ae:3b:bc:22:c8:83:f2:bb:9a:aa:b8:58:51:
                    3c:12:95:e3:7a:6d:e7:2f:79:24:87:e3:9c:36:d4:
                    80:cb:5f:26:b7:13:33:95:1d:0b:19:ad:5c:a3:c2:
                    32:2d:2f:d3:7a:90:06:03:25:38:a2:35:97:2c:a4:
                    1c:e2:4d:41:6a:11:c9:77:9e:02:2b:84:d4:b1:26:
                    e5:25:b6:ba:61:2e:d2:8d:4a:61:d4:02:01:d8:41:
                    c9:46:e9:35:dc:e4:34:47:59:e8:f2:8b:42:ff:31:
                    fc:21:ad:08:bd:3a:f8:85:4c:d9:f5:ea:ed:e6:b8:
                    a5:a9:d8:d2:12:64:6b:4c:3c:3a:4d:e7:ea:43:1e:
                    38:45:55:8a:63:dc:ec:b5:8a:23:5d:d2:d8:29:bb:
                    dc:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:CD:74:ED:6E:ED:BC:95:30:F6:49:04:F1:A9:46:0D:4F:FE:44:CD
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/69efde29-08ee-4f8e-ac98-6477bb18db8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.250.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         30:66:c5:40:ee:0a:bd:5f:f3:ee:0f:50:d0:7b:44:0e:65:b7:
         e7:41:bb:97:0d:1e:fe:d9:3d:6d:51:5f:ed:67:47:9c:e1:a3:
         42:9e:c6:74:52:e0:91:b2:db:a6:2a:ba:2c:6e:13:b7:a9:a3:
         60:72:bc:a7:bc:f2:ab:25:b5:66:42:75:8f:8c:75:a8:04:ca:
         70:1a:03:7f:50:ee:e2:f0:63:a4:7c:2e:e0:be:23:74:d3:d9:
         02:a7:6a:f2:30:b6:55:c8:f2:98:bc:2d:15:14:02:18:a4:a6:
         1d:68:50:58:b9:d4:16:ab:50:5b:77:9a:09:73:97:88:6b:4b:
         1a:e2:69:4c:73:c1:72:f9:44:9b:c3:d5:2b:ec:01:d2:cf:6d:
         9c:7c:ea:ad:78:12:e0:2e:8a:35:88:57:28:60:4e:92:f9:eb:
         54:64:2e:42:f5:a5:1b:1c:b2:37:28:7d:08:29:48:bc:53:70:
         7c:cf:ba:21:39:fc:c5:a0:0d:43:c8:fa:0f:91:ed:28:5a:ea:
         15:2e:47:af:3e:0d:25:ec:3c:e3:ac:88:48:97:19:e6:62:de:
         08:38:a8:d8:41:d1:c2:e3:d6:81:54:17:51:57:c9:16:ce:46:
         2d:47:06:e7:96:98:d6:7f:da:40:23:fa:0d:8d:cd:7f:cd:24:
         c5:1e:ef:7b
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIURmVA0QI5Jy4mYHVsehPKTNicxp8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA2MDAyMDMyWhcNMjcwMTA0MjM1OTU5
WjB6MUkwRwYDVQQFE0AwMDliODQ2N2FmMmFmM2FkOGY4NTI4ZjRmYmI4Y2ZmNjRj
ZWM1Mzg4YWRmODc0MjQwOWZkMzBiODIyOTYzYmFlMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDFYZlvmJb9H0dzz0gagkFe9Pva3dnx9LLCV1bjJMB7i1yi
80GTJevsfRiiglnHhl9YbxaSDymiYm7lmLI0M0tkjG07xfay1fzz4zOJzO9oyvcB
BgzQqFxILOCDIxBZbs36ycuyXAWRqO+Lrju8IsiD8ruaqrhYUTwSleN6becveSSH
45w21IDLXya3EzOVHQsZrVyjwjItL9N6kAYDJTiiNZcspBziTUFqEcl3ngIrhNSx
JuUltrphLtKNSmHUAgHYQclG6TXc5DRHWejyi0L/MfwhrQi9OviFTNn16u3muKWp
2NISZGtMPDpN5+pDHjhFVYpj3Oy1iiNd0tgpu9zTAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUYc107W7tvJUw9kkE8alGDU/+RM0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzY5ZWZkZTI5LTA4ZWUtNGY4ZS1hYzk4LTY0NzdiYjE4ZGI4Zi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwBK+jANBgkqhkiG9w0BAQsFAAOCAQEAMGbFQO4KvV/z7g9Q0HtEDmW350G7
lw0e/tk9bVFf7WdHnOGjQp7GdFLgkbLbpiq6LG4Tt6mjYHK8p7zyqyW1ZkJ1j4x1
qATKcBoDf1Du4vBjpHwu4L4jdNPZAqdq8jC2VcjymLwtFRQCGKSmHWhQWLnUFqtQ
W3eaCXOXiGtLGuJpTHPBcvlEm8PVK+wB0s9tnHzqrXgS4C6KNYhXKGBOkvnrVGQu
QvWlGxyyNyh9CClIvFNwfM+6ITn8xaANQ8j6D5HtKFrqFS5Hrz4NJew846yISJcZ
5mLeCDio2EHRwuPWgVQXUVfJFs5GLUcG55aY1n/aQCP6DY3Nf80kxR7vew==
-----END CERTIFICATE-----
Generated at Tue Nov 3 20:12:56 2026 by rpki-client