Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6ea182e0-a1c4-49ec-8dc3-92e05b25706f.roa
File:                     6ea182e0-a1c4-49ec-8dc3-92e05b25706f.roa (raw, json)
Hash identifier:          8J8dXx3Ik0GXbG3nkQf2bKzARmgjdt9w0PUz7BX9uJM=
Subject key identifier:   65:A4:1A:E5:D0:96:0F:1E:3D:6F:F8:F6:67:68:3A:32:4E:3C:9F:23
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       22F1798948886A1A0F978741FB77C7E06AA950BB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6ea182e0-a1c4-49ec-8dc3-92e05b25706f.roa
Signing time:             Mon 19 Oct 2026 00:30:44 +0000
ROA not before:           Mon 19 Oct 2026 00:30:44 +0000
ROA not after:            Sun 17 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        71.152.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:f1:79:89:48:88:6a:1a:0f:97:87:41:fb:77:c7:e0:6a:a9:50:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 19 00:30:44 2026 GMT
            Not After : Jan 17 23:59:59 2027 GMT
        Subject: serialNumber=3394d303809b96d0df1d1bedf65b7a44157d5cdb10460759a110316a1e3df378, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ef:ea:f1:4f:14:92:db:45:4d:c9:ba:4f:57:
                    95:ba:ba:50:2c:93:8c:a6:a1:25:08:8f:ae:22:af:
                    fe:53:e8:e9:e1:61:e2:3b:c1:cf:27:b2:f3:ae:aa:
                    f9:78:a5:96:73:d6:24:5b:f5:b2:2a:c2:ee:b6:0a:
                    91:91:d8:d6:fb:ce:a6:8e:d8:f5:1f:e4:f8:bb:92:
                    77:2c:57:28:9e:c7:d5:3a:f9:19:04:5b:f1:9a:da:
                    67:9c:1c:c6:10:42:bc:c9:d5:6e:07:87:88:e9:ca:
                    68:b6:9e:4c:e9:98:48:8b:bc:1f:5e:60:9f:a1:5c:
                    e5:72:12:7c:42:ad:10:ec:8b:95:e2:93:cd:c4:f0:
                    79:20:0a:ec:e7:0c:c8:e8:d8:f2:29:8d:fe:d5:f8:
                    af:0f:b5:90:d5:5f:11:34:d8:ab:50:8a:e3:39:21:
                    58:60:38:85:35:80:4c:17:b7:e9:ff:aa:7a:af:c6:
                    20:83:ae:70:ec:bf:cb:06:7d:53:2b:81:c0:36:8f:
                    94:7a:54:21:d0:52:53:1e:a3:76:c6:b3:7b:aa:c3:
                    05:46:3f:d9:bc:27:59:25:54:cd:f1:96:ad:e7:f4:
                    5c:4d:a3:ab:6d:0d:d1:27:d2:6b:7b:97:60:3e:c4:
                    10:fe:c9:e6:d9:d3:11:85:7e:86:09:74:95:d5:2d:
                    fe:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:A4:1A:E5:D0:96:0F:1E:3D:6F:F8:F6:67:68:3A:32:4E:3C:9F:23
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6ea182e0-a1c4-49ec-8dc3-92e05b25706f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.152.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:28:8d:23:68:74:8c:36:47:48:0f:72:45:20:54:69:bb:6d:
         aa:7a:ed:82:f9:62:39:ed:48:ba:7e:80:53:b8:e4:a9:ec:7d:
         89:ec:b8:a4:5e:bb:5d:56:2c:aa:88:4c:d0:ff:81:38:f3:1a:
         8d:e1:3f:0d:ad:6e:1a:6d:8f:be:68:92:3d:0f:32:96:69:e0:
         2f:fa:fb:1b:23:b5:13:e6:df:55:fc:92:4c:0c:4d:d5:d5:19:
         38:22:52:a7:79:7e:c0:0c:87:b4:0c:ba:75:30:78:4e:83:68:
         9e:33:fe:19:e6:78:c6:f7:04:7d:76:f0:78:b7:9c:8e:e2:22:
         e4:7e:87:e9:27:1d:7b:1b:d6:22:63:5a:72:d4:91:f4:5a:ad:
         dc:37:f6:af:cd:02:9f:89:5b:a9:5a:ff:70:98:f1:2f:fd:2a:
         54:77:b8:57:8f:5e:eb:b0:7d:aa:2f:26:b2:33:1b:55:c2:2a:
         05:4d:1b:e8:cb:e5:8f:eb:d6:4d:b9:c6:ad:2d:83:a6:11:32:
         55:a6:87:15:ad:93:e8:a9:f1:1e:79:53:4a:07:8b:2a:26:e4:
         70:9c:d9:ae:08:0b:a3:56:64:2f:64:8c:9a:36:3a:af:8d:2a:
         0d:f7:39:cf:44:b8:5a:f0:c5:29:37:81:2d:87:df:ea:75:e2:
         f4:8b:e7:1b
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUIvF5iUiIahoPl4dB+3fH4GqpULswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDE5MDAzMDQ0WhcNMjcwMTE3MjM1OTU5
WjB6MUkwRwYDVQQFE0AzMzk0ZDMwMzgwOWI5NmQwZGYxZDFiZWRmNjViN2E0NDE1
N2Q1Y2RiMTA0NjA3NTlhMTEwMzE2YTFlM2RmMzc4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDf7+rxTxSS20VNybpPV5W6ulAsk4ymoSUIj64ir/5T6Onh
YeI7wc8nsvOuqvl4pZZz1iRb9bIqwu62CpGR2Nb7zqaO2PUf5Pi7kncsVyiex9U6
+RkEW/Ga2mecHMYQQrzJ1W4Hh4jpymi2nkzpmEiLvB9eYJ+hXOVyEnxCrRDsi5Xi
k83E8HkgCuznDMjo2PIpjf7V+K8PtZDVXxE02KtQiuM5IVhgOIU1gEwXt+n/qnqv
xiCDrnDsv8sGfVMrgcA2j5R6VCHQUlMeo3bGs3uqwwVGP9m8J1klVM3xlq3n9FxN
o6ttDdEn0mt7l2A+xBD+yebZ0xGFfoYJdJXVLf61AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUZaQa5dCWDx49b/j2Z2g6Mk48nyMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzZlYTE4MmUwLWExYzQtNDllYy04ZGMzLTkyZTA1YjI1NzA2Zi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABHmAIwDQYJKoZIhvcNAQELBQADggEBAGAojSNodIw2R0gPckUgVGm7bap6
7YL5YjntSLp+gFO45KnsfYnsuKReu11WLKqITND/gTjzGo3hPw2tbhptj75okj0P
MpZp4C/6+xsjtRPm31X8kkwMTdXVGTgiUqd5fsAMh7QMunUweE6DaJ4z/hnmeMb3
BH128Hi3nI7iIuR+h+knHXsb1iJjWnLUkfRardw39q/NAp+JW6la/3CY8S/9KlR3
uFePXuuwfaovJrIzG1XCKgVNG+jL5Y/r1k25xq0tg6YRMlWmhxWtk+ip8R55U0oH
iyom5HCc2a4IC6NWZC9kjJo2Oq+NKg33Oc9EuFrwxSk3gS2H3+p14vSL5xs=
-----END CERTIFICATE-----
Generated at Mon Nov 2 21:31:48 2026 by rpki-client