Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6ac0660d-1ee7-4b52-8e7f-55804ba7f248.roa
File:                     6ac0660d-1ee7-4b52-8e7f-55804ba7f248.roa (raw, json)
Hash identifier:          +0RdvgxvhN1WJP8WamqiDBzDY1npBpTua5Y3AggSXFA=
Subject key identifier:   C9:88:E3:D5:86:F5:2B:3F:BD:4B:92:05:AD:D0:F4:FD:1C:61:4F:0B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       42E4C372CA71DA80FDB973FB5484623E2FEF80FF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6ac0660d-1ee7-4b52-8e7f-55804ba7f248.roa
Signing time:             Mon 26 Oct 2026 00:10:47 +0000
ROA not before:           Mon 26 Oct 2026 00:10:47 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        45.57.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:e4:c3:72:ca:71:da:80:fd:b9:73:fb:54:84:62:3e:2f:ef:80:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 26 00:10:47 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=4b1664848dd66950d65155d93b09dfe0044579f8078533d7fb9f485c54897ad8, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:36:95:3b:bf:80:e4:bd:7b:fb:3b:ae:86:2c:
                    60:ac:0d:83:e8:e4:34:2a:9d:e3:e9:16:8b:1a:96:
                    4a:af:2b:17:87:68:3b:7d:6e:92:1e:fd:3f:06:84:
                    3d:01:3f:25:52:98:5b:00:94:0a:57:ce:5e:5e:c0:
                    fa:66:07:20:ce:c6:f5:5d:8b:87:ce:3c:54:8c:ea:
                    0e:80:f6:cf:d5:cb:1d:03:f2:2e:92:9f:47:ea:5f:
                    5f:df:b6:d2:a1:70:5e:90:6a:50:81:7b:19:b6:af:
                    ea:6a:2f:86:76:2b:11:96:92:17:5e:bd:6e:82:89:
                    a3:58:cd:0c:a5:a2:1b:03:69:ff:52:c2:a7:3b:15:
                    8c:44:ee:d2:bf:58:89:87:bd:b5:86:3a:55:56:7e:
                    5d:cd:95:b0:2a:7b:bb:e2:b0:1b:15:ac:f9:95:2d:
                    d7:da:7e:03:cf:25:8a:25:02:c0:07:dc:d5:88:c0:
                    ce:0c:b1:f1:3a:cd:17:bc:8d:08:58:3b:8b:c7:f7:
                    3e:30:e6:14:2d:86:64:be:4d:f3:49:b6:be:64:30:
                    c8:12:8c:d1:b5:e4:a4:6b:a0:c3:1b:be:d8:01:bb:
                    8e:f8:29:30:aa:65:df:e9:6c:39:41:e8:5a:5e:fc:
                    8d:f3:ce:ab:88:6d:d4:dd:0f:eb:81:a1:c1:e9:b9:
                    84:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:88:E3:D5:86:F5:2B:3F:BD:4B:92:05:AD:D0:F4:FD:1C:61:4F:0B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6ac0660d-1ee7-4b52-8e7f-55804ba7f248.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.57.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         25:dd:cc:00:7b:5d:6e:07:55:aa:20:60:02:78:c8:dc:67:de:
         3e:8b:6a:0c:0c:f0:da:f0:e7:35:69:82:46:5f:6b:b5:8a:c9:
         08:6b:02:67:9e:7a:9d:16:be:50:a5:7c:03:99:ea:48:72:63:
         3b:c0:fb:95:d9:84:39:c4:56:11:fd:b3:df:f4:98:4b:3e:f0:
         9b:ef:13:74:2e:75:f8:7d:81:88:b5:a0:f6:94:d9:0f:5b:97:
         91:58:c4:52:0c:bd:ac:b3:b4:2c:a0:8d:31:56:9d:69:2a:8b:
         7e:28:8e:16:8a:d1:d1:4d:1d:58:5f:94:15:78:25:cc:4f:fc:
         24:e8:a2:cd:06:49:8f:c1:0a:9d:99:1e:2f:1c:bc:4a:21:d5:
         f0:fd:a5:f1:86:0a:a3:e4:24:22:aa:2b:4d:df:fe:2e:c5:15:
         9a:96:cd:9c:a1:0c:10:d0:76:4a:19:96:df:c0:f2:2a:53:6e:
         b0:31:8f:df:dd:78:71:44:34:4c:0f:43:81:63:1c:17:5a:c9:
         30:24:06:8f:bb:77:27:5a:94:53:59:8a:89:eb:7b:50:0f:59:
         c1:ed:c4:05:e8:84:52:e4:4f:4c:bf:09:d8:01:8f:0f:8d:36:
         80:9a:50:2e:38:45:4b:28:df:af:6a:5e:f7:71:f2:35:89:87:
         b7:01:9b:49
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUQuTDcspx2oD9uXP7VIRiPi/vgP8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDI2MDAxMDQ3WhcNMjcwMTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0A0YjE2NjQ4NDhkZDY2OTUwZDY1MTU1ZDkzYjA5ZGZlMDA0
NDU3OWY4MDc4NTMzZDdmYjlmNDg1YzU0ODk3YWQ4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC6NpU7v4DkvXv7O66GLGCsDYPo5DQqnePpFosalkqvKxeH
aDt9bpIe/T8GhD0BPyVSmFsAlApXzl5ewPpmByDOxvVdi4fOPFSM6g6A9s/Vyx0D
8i6Sn0fqX1/fttKhcF6QalCBexm2r+pqL4Z2KxGWkhdevW6CiaNYzQylohsDaf9S
wqc7FYxE7tK/WImHvbWGOlVWfl3NlbAqe7visBsVrPmVLdfafgPPJYolAsAH3NWI
wM4MsfE6zRe8jQhYO4vH9z4w5hQthmS+TfNJtr5kMMgSjNG15KRroMMbvtgBu474
KTCqZd/pbDlB6Fpe/I3zzquIbdTdD+uBocHpuYRNAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUyYjj1Yb1Kz+9S5IFrdD0/RxhTwswHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzZhYzA2NjBkLTFlZTctNGI1Mi04ZTdmLTU1ODA0YmE3ZjI0OC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAUtOYAwDQYJKoZIhvcNAQELBQADggEBACXdzAB7XW4HVaogYAJ4yNxn3j6L
agwM8Nrw5zVpgkZfa7WKyQhrAmeeep0WvlClfAOZ6khyYzvA+5XZhDnEVhH9s9/0
mEs+8JvvE3Qudfh9gYi1oPaU2Q9bl5FYxFIMvayztCygjTFWnWkqi34ojhaK0dFN
HVhflBV4JcxP/CToos0GSY/BCp2ZHi8cvEoh1fD9pfGGCqPkJCKqK03f/i7FFZqW
zZyhDBDQdkoZlt/A8ipTbrAxj9/deHFENEwPQ4FjHBdayTAkBo+7dydalFNZionr
e1APWcHtxAXohFLkT0y/CdgBjw+NNoCaUC44RUso369qXvdx8jWJh7cBm0k=
-----END CERTIFICATE-----
Generated at Mon Nov 2 16:47:52 2026 by rpki-client