Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e4df06b-3548-461b-a74c-4446484dc350.roa
File:                     6e4df06b-3548-461b-a74c-4446484dc350.roa (raw, json)
Hash identifier:          3rLR2VzPm0b0z0Uxc0dRL0Uj7CFk6JwG3kVvIHATEdg=
Subject key identifier:   65:3E:87:3B:AA:3E:38:ED:30:2B:04:63:9B:DD:B4:75:3B:9F:83:92
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       195A164E6E53DEC47C3128F0F311EA714480A5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e4df06b-3548-461b-a74c-4446484dc350.roa
Signing time:             Thu 08 Oct 2026 00:41:33 +0000
ROA not before:           Thu 08 Oct 2026 00:41:33 +0000
ROA not after:            Wed 06 Jan 2027 23:59:59 +0000
asID:                     8987
IP address blocks:        16.65.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:5a:16:4e:6e:53:de:c4:7c:31:28:f0:f3:11:ea:71:44:80:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  8 00:41:33 2026 GMT
            Not After : Jan  6 23:59:59 2027 GMT
        Subject: serialNumber=8d5cd69bd8e4e0c4aac7e4a35c619cdefbac15c370190c6d95a66bb31a9c8179, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7e:0b:1d:cc:22:60:d2:33:c9:5e:4f:7f:a3:
                    71:92:0e:d2:60:c5:34:14:51:90:05:5b:05:de:f8:
                    4f:ba:3f:b9:a0:ed:6c:7e:1c:2b:cd:30:e1:4b:96:
                    ee:2c:4a:48:9d:ae:8e:90:a2:4d:cc:e8:80:63:a4:
                    2a:db:3c:5b:01:69:a1:9a:5c:b9:b2:fd:a7:da:e8:
                    46:1d:7f:8e:e1:e7:c6:6d:c0:03:17:12:07:f6:fc:
                    0a:98:64:8f:e8:9b:06:45:2a:d5:d5:6e:c9:e5:c2:
                    f1:e5:71:38:54:5b:dc:c9:f5:91:0a:5c:e4:54:a6:
                    0c:73:f4:1d:37:a2:f4:a0:27:27:17:93:98:e6:e0:
                    75:71:b1:1a:90:90:58:ff:e1:47:10:e2:db:6b:9a:
                    5f:40:a4:62:2c:30:48:90:0f:e2:3f:71:cd:90:13:
                    98:4f:b6:f6:11:2f:80:b4:cb:b9:3c:9e:50:6a:ee:
                    22:6c:ed:82:16:29:d8:c4:a1:3a:37:50:13:16:61:
                    a9:e7:09:1e:7c:d3:da:16:d7:7f:c6:b6:dc:cf:e1:
                    05:d5:df:28:4f:e6:85:e0:bb:2c:1d:dd:cf:28:cd:
                    50:44:9b:d0:6b:04:b2:0b:af:c1:3c:12:e9:e9:ac:
                    f6:33:22:7a:fc:ba:26:9a:21:01:a9:c2:96:9e:ea:
                    b1:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:3E:87:3B:AA:3E:38:ED:30:2B:04:63:9B:DD:B4:75:3B:9F:83:92
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e4df06b-3548-461b-a74c-4446484dc350.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.65.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b7:14:91:28:f9:d3:63:2f:a5:15:b7:81:54:c3:5e:49:a8:46:
         88:22:ed:16:62:26:36:f9:f7:af:86:1d:d6:23:76:0d:6d:c9:
         de:75:4f:a4:fe:f4:0a:eb:7a:2b:cb:d8:21:7f:56:f3:c2:78:
         bc:0a:9f:24:f6:49:6b:7f:65:6d:4c:eb:2e:74:77:60:57:b0:
         06:5f:e4:77:8a:24:d4:fb:14:15:bc:f5:8c:e7:97:a4:ce:19:
         55:a8:77:b8:78:4f:f8:34:c9:5d:24:7b:ed:36:0d:8e:a0:30:
         bd:20:20:cb:bc:5c:16:45:59:96:72:f6:95:e2:c6:b1:9c:08:
         3a:8d:34:3c:30:19:33:cb:16:07:cb:12:73:6f:32:6f:36:37:
         e0:31:03:99:84:cc:cc:a9:b0:7c:cb:51:80:9d:61:c0:98:84:
         62:93:d0:6c:44:73:51:3a:bd:83:0a:18:69:92:35:4e:b7:8b:
         95:47:e3:30:dd:a3:45:e2:fa:d7:11:a8:66:5a:de:9e:17:18:
         a5:7c:39:e8:c4:b1:53:7c:95:9e:d7:2b:27:fa:d1:60:40:87:
         1a:c7:a7:77:56:19:5c:03:b5:3c:83:41:b1:1c:3f:76:6e:17:
         79:cb:55:40:47:7b:8d:81:cb:bf:5f:f0:25:f7:43:f0:ff:e6:
         9b:7a:31:9e
-----BEGIN CERTIFICATE-----
MIIF9jCCBN6gAwIBAgITGVoWTm5T3sR8MSjw8xHqcUSApTANBgkqhkiG9w0BAQsF
ADA9MTswOQYDVQQDEzI2ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAxOGQ0MmJlMzU4ZWIz
NzEwN2RiZThjYjcxZDBhNzAeFw0yNjEwMDgwMDQxMzNaFw0yNzAxMDYyMzU5NTla
MHoxSTBHBgNVBAUTQDhkNWNkNjliZDhlNGUwYzRhYWM3ZTRhMzVjNjE5Y2RlZmJh
YzE1YzM3MDE5MGM2ZDk1YTY2YmIzMWE5YzgxNzkxLTArBgNVBAMTJGIyNWM5NzBm
LWQ4MTMtNDQ1Yy1iZmUyLTYyNjY4NTE4Yzg3ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK9+Cx3MImDSM8leT3+jcZIO0mDFNBRRkAVbBd74T7o/uaDt
bH4cK80w4UuW7ixKSJ2ujpCiTczogGOkKts8WwFpoZpcubL9p9roRh1/juHnxm3A
AxcSB/b8Cphkj+ibBkUq1dVuyeXC8eVxOFRb3Mn1kQpc5FSmDHP0HTei9KAnJxeT
mObgdXGxGpCQWP/hRxDi22uaX0CkYiwwSJAP4j9xzZATmE+29hEvgLTLuTyeUGru
ImztghYp2MShOjdQExZhqecJHnzT2hbXf8a23M/hBdXfKE/mheC7LB3dzyjNUESb
0GsEsguvwTwS6ems9jMievy6JpohAanClp7qsd0CAwEAAaOCArAwggKsMB0GA1Ud
DgQWBBRlPoc7qj447TArBGOb3bR1O5+DkjAfBgNVHSMEGDAWgBQQXdeNVXhAq0Nd
vRUhII8p+kk/rjAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg
BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy
aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv
MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiYTMwMmI4LThk
YWItNDkxZC1iOWVkLWQ3YzkyZDAzMGQ4Mi82ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAx
OGQ0MmJlMzU4ZWIzNzEwN2RiZThjYjcxZDBhNy5jZXIwgZ4GCCsGAQUFBwELBIGR
MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8yMGFhMzI5Yi1mYzUyLTRjNjEtYmY1My0wOTcy
NWMwNDI5NDIvNmU0ZGYwNmItMzU0OC00NjFiLWE3NGMtNDQ0NjQ4NGRjMzUwLnJv
YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0
LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMt
MDk3MjVjMDQyOTQyL19xeDNSSjhCalVLLU5ZNnpjUWZiNk10eDBLYy5jcmwwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw
BQMDABBBMA0GCSqGSIb3DQEBCwUAA4IBAQC3FJEo+dNjL6UVt4FUw15JqEaIIu0W
YiY2+fevhh3WI3YNbcnedU+k/vQK63ory9ghf1bzwni8Cp8k9klrf2VtTOsudHdg
V7AGX+R3iiTU+xQVvPWM55ekzhlVqHe4eE/4NMldJHvtNg2OoDC9ICDLvFwWRVmW
cvaV4saxnAg6jTQ8MBkzyxYHyxJzbzJvNjfgMQOZhMzMqbB8y1GAnWHAmIRik9Bs
RHNROr2DChhpkjVOt4uVR+Mw3aNF4vrXEahmWt6eFxilfDnoxLFTfJWe1ysn+tFg
QIcax6d3VhlcA7U8g0GxHD92bhd5y1VAR3uNgcu/X/Al90Pw/+abejGe
-----END CERTIFICATE-----
Generated at Tue Nov 3 22:38:23 2026 by rpki-client