Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b2f3095-813c-4aa6-ad8f-5cfe7b34fd26.roa
File:                     6b2f3095-813c-4aa6-ad8f-5cfe7b34fd26.roa (raw, json)
Hash identifier:          kBS8o/6etZ+MfnN08AKD6WKVYKkcUud7DBrhVecxWVU=
Subject key identifier:   90:22:67:B0:0D:37:8E:8B:B4:49:7E:5A:92:DF:B2:6C:87:80:35:58
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3F3D962F973916DE951C112440AC5565B8D83FFE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b2f3095-813c-4aa6-ad8f-5cfe7b34fd26.roa
Signing time:             Thu 15 Oct 2026 00:31:26 +0000
ROA not before:           Thu 15 Oct 2026 00:31:26 +0000
ROA not after:            Wed 13 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        78.12.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:3d:96:2f:97:39:16:de:95:1c:11:24:40:ac:55:65:b8:d8:3f:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 15 00:31:26 2026 GMT
            Not After : Jan 13 23:59:59 2027 GMT
        Subject: serialNumber=ec43b3319349db956fe3b75b9db14448efc75eea2ea8b64244d1c4ad4ba2650b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4b:0c:a7:3a:2c:5a:5c:59:17:a6:90:32:f7:
                    e6:87:02:25:43:3e:42:d8:c1:50:ec:0e:b8:c4:3a:
                    bc:13:4c:b7:01:a3:34:4c:90:db:43:ec:0e:28:ca:
                    5e:3e:04:21:5b:8d:52:3a:0a:8f:88:29:f7:ea:eb:
                    68:3f:aa:5e:13:8a:2b:6b:e7:5a:9b:89:96:e3:68:
                    8a:44:76:ae:9a:09:01:67:5d:6b:67:83:eb:9a:6c:
                    5b:88:e9:6b:9e:85:7a:f3:de:67:63:9f:ce:23:2d:
                    af:77:53:77:3f:36:8f:b3:89:2b:86:9a:aa:f9:1e:
                    14:1a:a4:51:61:9b:f5:92:bd:92:d8:c6:24:ab:be:
                    de:ee:e0:36:3f:2f:ba:1a:39:e6:35:a0:80:c8:ea:
                    b1:12:75:d6:f9:72:3c:84:9d:17:59:5c:a6:c8:7c:
                    9c:c6:23:a9:35:8c:69:6f:6f:23:e5:7d:48:84:44:
                    06:0f:12:03:5a:48:6e:a7:d6:03:81:55:4c:24:12:
                    6c:f1:79:fe:62:98:79:8c:08:61:00:9d:45:08:cb:
                    2d:96:0e:9c:83:51:3a:7d:6e:29:e6:23:89:27:c3:
                    2a:48:43:25:ef:5b:66:56:f6:c8:fa:cb:1a:d1:1c:
                    16:61:33:df:01:d6:e2:32:73:a2:a6:9c:da:0a:11:
                    fc:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:22:67:B0:0D:37:8E:8B:B4:49:7E:5A:92:DF:B2:6C:87:80:35:58
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b2f3095-813c-4aa6-ad8f-5cfe7b34fd26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  78.12.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:06:1f:e6:3c:ca:85:5d:cf:fd:69:29:a7:ca:9a:c7:56:4e:
         b0:c1:af:1f:92:a5:9d:f2:ed:88:f7:4d:ae:c1:47:f7:58:a3:
         f5:25:91:e3:56:62:6a:53:23:fb:56:7f:46:2b:3e:02:c2:d8:
         da:7b:b2:31:cc:c0:21:17:6f:c0:5a:fc:0e:9f:56:9c:12:1a:
         72:26:ab:4a:db:f3:ca:5c:fc:13:2c:30:29:7f:72:1a:27:6f:
         32:3e:9a:e1:5d:64:83:79:ae:ee:63:c7:e3:ac:1c:74:fd:64:
         2a:3b:45:65:50:bd:c1:81:c1:e0:ee:0c:f9:a7:62:82:d2:28:
         e3:77:4e:4a:e2:07:d7:3e:00:76:81:e6:c8:34:2d:eb:95:29:
         62:e3:ce:71:2e:3a:a6:b2:87:ab:64:4a:21:bf:0a:b0:b6:a3:
         77:bd:59:ca:6b:3d:6c:e1:93:d2:fc:71:94:ad:68:fa:ef:51:
         6a:33:9c:4b:bf:72:ae:19:97:c2:08:b8:07:21:8a:01:03:0c:
         81:99:c0:a2:88:7f:7f:59:8d:b0:d8:e9:2f:53:cd:2f:b2:a9:
         0a:e0:3c:fe:22:31:13:0f:14:ea:e3:b8:e8:2c:a7:26:ed:7e:
         61:e1:6a:7a:96:3b:82:9c:74:eb:f2:c8:08:c1:48:d4:e4:b3:
         fe:8a:e9:bc
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUPz2WL5c5Ft6VHBEkQKxVZbjYP/4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDE1MDAzMTI2WhcNMjcwMTEzMjM1OTU5
WjB6MUkwRwYDVQQFE0BlYzQzYjMzMTkzNDlkYjk1NmZlM2I3NWI5ZGIxNDQ0OGVm
Yzc1ZWVhMmVhOGI2NDI0NGQxYzRhZDRiYTI2NTBiMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDCSwynOixaXFkXppAy9+aHAiVDPkLYwVDsDrjEOrwTTLcB
ozRMkNtD7A4oyl4+BCFbjVI6Co+IKffq62g/ql4Tiitr51qbiZbjaIpEdq6aCQFn
XWtng+uabFuI6WuehXrz3mdjn84jLa93U3c/No+ziSuGmqr5HhQapFFhm/WSvZLY
xiSrvt7u4DY/L7oaOeY1oIDI6rESddb5cjyEnRdZXKbIfJzGI6k1jGlvbyPlfUiE
RAYPEgNaSG6n1gOBVUwkEmzxef5imHmMCGEAnUUIyy2WDpyDUTp9binmI4knwypI
QyXvW2ZW9sj6yxrRHBZhM98B1uIyc6KmnNoKEfyzAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUkCJnsA03jou0SX5akt+ybIeANVgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzZiMmYzMDk1LTgxM2MtNGFhNi1hZDhmLTVjZmU3YjM0ZmQyNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABODD8wDQYJKoZIhvcNAQELBQADggEBAJoGH+Y8yoVdz/1pKafKmsdWTrDB
rx+SpZ3y7Yj3Ta7BR/dYo/UlkeNWYmpTI/tWf0YrPgLC2Np7sjHMwCEXb8Ba/A6f
VpwSGnImq0rb88pc/BMsMCl/chonbzI+muFdZIN5ru5jx+OsHHT9ZCo7RWVQvcGB
weDuDPmnYoLSKON3TkriB9c+AHaB5sg0LeuVKWLjznEuOqayh6tkSiG/CrC2o3e9
WcprPWzhk9L8cZStaPrvUWoznEu/cq4Zl8IIuAchigEDDIGZwKKIf39ZjbDY6S9T
zS+yqQrgPP4iMRMPFOrjuOgspybtfmHhanqWO4KcdOvyyAjBSNTks/6K6bw=
-----END CERTIFICATE-----
Generated at Mon Nov 2 22:29:45 2026 by rpki-client