Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a535178-1ef5-4988-b043-365e7f2c989e.roa
File:                     6a535178-1ef5-4988-b043-365e7f2c989e.roa (raw, json)
Hash identifier:          3p7S/OSAdQDngo5kl9ukaZwrXCOrL+FflZNrZBeVywA=
Subject key identifier:   52:94:38:FD:C1:B0:A6:64:73:7C:06:8A:80:01:D5:6A:BB:90:5F:45
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       598B03C6E90A27D175A66094CFAC6DA652D832C8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a535178-1ef5-4988-b043-365e7f2c989e.roa
Signing time:             Tue 06 Oct 2026 00:02:36 +0000
ROA not before:           Tue 06 Oct 2026 00:02:36 +0000
ROA not after:            Mon 04 Jan 2027 23:59:59 +0000
asID:                     8987
IP address blocks:        76.223.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 19 Oct 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:8b:03:c6:e9:0a:27:d1:75:a6:60:94:cf:ac:6d:a6:52:d8:32:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  6 00:02:36 2026 GMT
            Not After : Jan  4 23:59:59 2027 GMT
        Subject: serialNumber=9b4e768899ffa82b9f962199363ffcc2466bd477f43b6d1326d32ff82a0feb47, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:26:61:98:ae:5d:7d:ce:d9:22:76:5b:0f:9d:
                    df:7a:95:85:fe:99:1f:48:be:0a:38:f4:57:58:05:
                    7a:39:bd:a4:33:7e:fb:bd:89:f6:c2:94:4f:c0:40:
                    9e:59:5b:8a:f2:fa:ec:a0:b2:21:aa:fd:19:9b:31:
                    7c:07:b8:61:4e:15:6e:97:14:29:25:68:c6:2b:9d:
                    c2:9a:74:a8:0b:bb:1f:31:7d:9c:9c:e8:a3:bb:d1:
                    2a:8b:14:31:df:bf:d5:7f:f3:35:2c:cb:41:d8:74:
                    de:e0:1d:c5:b7:2f:64:ba:c2:34:a5:32:d2:f7:62:
                    58:9e:e8:a9:c1:c8:4d:af:6f:28:9a:48:29:a5:0f:
                    4e:70:92:72:26:16:07:13:e9:03:d9:ca:48:eb:ab:
                    bb:6a:fe:74:02:85:d9:73:50:0c:2b:9a:85:6c:82:
                    f1:7c:f9:6e:76:8b:92:8a:0e:91:87:bf:ea:30:f7:
                    38:26:50:08:ef:a9:b1:5f:b3:28:e7:16:66:f6:7f:
                    03:00:97:41:55:ba:3d:39:be:5c:c1:b3:39:68:03:
                    4b:31:c4:31:71:0a:69:97:c0:14:01:ac:09:84:38:
                    77:74:33:82:7b:60:b2:d8:5a:39:20:bc:f6:f9:0c:
                    b1:97:ce:45:53:68:e6:21:4e:92:2f:41:7f:3e:9f:
                    7f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:94:38:FD:C1:B0:A6:64:73:7C:06:8A:80:01:D5:6A:BB:90:5F:45
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a535178-1ef5-4988-b043-365e7f2c989e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.223.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ca:9b:83:08:49:50:f8:7b:a0:0e:15:dc:a0:f7:0e:7a:01:f1:
         31:ee:02:e7:30:4d:83:c3:08:fd:5b:48:b1:80:c6:8f:c2:1d:
         6c:06:27:45:7e:61:df:79:f9:a1:c7:34:70:60:89:7a:1a:26:
         77:b8:fd:95:e5:80:65:e5:c9:70:cc:89:e3:50:b9:5b:77:0d:
         50:53:45:82:cb:c0:ee:9f:95:b3:41:58:de:8f:5a:97:6f:78:
         a3:68:57:c7:c4:20:6c:34:35:b1:99:37:61:c6:12:c2:1a:6a:
         20:17:1e:4a:b6:f4:ba:ed:60:94:ed:ea:8c:78:b3:fa:ec:4f:
         89:d9:b0:34:2f:25:cf:b1:f2:39:e3:c2:4d:86:a1:6b:ea:03:
         7b:6e:30:9a:d7:e6:81:71:1f:2d:7d:d4:68:d2:8d:39:fd:6b:
         af:6f:fe:03:79:e7:b8:8b:3c:0b:90:26:ec:18:5c:f3:a5:74:
         b9:97:e2:24:45:93:b7:71:43:83:24:3f:30:0e:9f:1d:cf:ba:
         5b:56:b2:5f:10:7e:7a:27:e3:4c:19:f7:4a:f0:d2:fc:54:2e:
         ba:2f:4d:c7:05:33:26:97:24:26:cd:2c:1a:bc:94:11:cc:49:
         cd:31:cb:64:2f:0c:ea:22:87:7b:ca:ec:38:4a:52:8e:91:4c:
         09:41:5c:4f
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUWYsDxukKJ9F1pmCUz6xtplLYMsgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA2MDAwMjM2WhcNMjcwMTA0MjM1OTU5
WjB6MUkwRwYDVQQFE0A5YjRlNzY4ODk5ZmZhODJiOWY5NjIxOTkzNjNmZmNjMjQ2
NmJkNDc3ZjQzYjZkMTMyNmQzMmZmODJhMGZlYjQ3MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC9JmGYrl19ztkidlsPnd96lYX+mR9Ivgo49FdYBXo5vaQz
fvu9ifbClE/AQJ5ZW4ry+uygsiGq/RmbMXwHuGFOFW6XFCklaMYrncKadKgLux8x
fZyc6KO70SqLFDHfv9V/8zUsy0HYdN7gHcW3L2S6wjSlMtL3Ylie6KnByE2vbyia
SCmlD05wknImFgcT6QPZykjrq7tq/nQChdlzUAwrmoVsgvF8+W52i5KKDpGHv+ow
9zgmUAjvqbFfsyjnFmb2fwMAl0FVuj05vlzBszloA0sxxDFxCmmXwBQBrAmEOHd0
M4J7YLLYWjkgvPb5DLGXzkVTaOYhTpIvQX8+n38pAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUUpQ4/cGwpmRzfAaKgAHVaruQX0UwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzZhNTM1MTc4LTFlZjUtNDk4OC1iMDQzLTM2NWU3ZjJjOTg5ZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABM34cwDQYJKoZIhvcNAQELBQADggEBAMqbgwhJUPh7oA4V3KD3DnoB8THu
AucwTYPDCP1bSLGAxo/CHWwGJ0V+Yd95+aHHNHBgiXoaJne4/ZXlgGXlyXDMieNQ
uVt3DVBTRYLLwO6flbNBWN6PWpdveKNoV8fEIGw0NbGZN2HGEsIaaiAXHkq29Lrt
YJTt6ox4s/rsT4nZsDQvJc+x8jnjwk2GoWvqA3tuMJrX5oFxHy191GjSjTn9a69v
/gN557iLPAuQJuwYXPOldLmX4iRFk7dxQ4MkPzAOnx3PultWsl8Qfnon40wZ90rw
0vxULrovTccFMyaXJCbNLBq8lBHMSc0xy2QvDOoih3vK7DhKUo6RTAlBXE8=
-----END CERTIFICATE-----
Generated at Sun Oct 18 03:16:54 2026 by rpki-client