Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/80504e6a-5c12-479d-b42f-a9ddcb2639c5.roa
File:                     80504e6a-5c12-479d-b42f-a9ddcb2639c5.roa (raw, json)
Hash identifier:          L7XExDoT6Z4Pb8Se4jvb5UwSZ5Kqt8pHpK9YnrVvlu4=
Subject key identifier:   8C:BF:94:6A:A0:8B:12:5B:2F:1D:28:56:FB:B5:75:80:3D:33:57:14
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       634D00A2D6B657E2CFCEE16B2788193DC7D6290F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/80504e6a-5c12-479d-b42f-a9ddcb2639c5.roa
Signing time:             Fri 07 Aug 2026 00:20:38 +0000
ROA not before:           Fri 07 Aug 2026 00:20:38 +0000
ROA not after:            Thu 05 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        192.189.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:4d:00:a2:d6:b6:57:e2:cf:ce:e1:6b:27:88:19:3d:c7:d6:29:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  7 00:20:38 2026 GMT
            Not After : Nov  5 23:59:59 2026 GMT
        Subject: serialNumber=c322944f4f5ddaea1203a6783b558e0e71f54ec915d0081c1efa51d0d7db3557, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2e:30:51:01:57:70:32:d4:cd:87:f5:aa:0d:
                    bf:51:1c:78:09:a4:f8:f4:8e:75:06:8e:49:c7:a2:
                    6b:50:35:2b:e7:cc:44:56:ee:e6:d2:30:98:ff:2d:
                    68:a6:f6:75:99:a0:51:2a:a7:d1:58:45:bb:29:6e:
                    b8:55:2a:7a:a1:99:1f:13:bb:c1:18:50:8c:4e:57:
                    0d:82:0f:ec:99:fc:4a:86:1a:41:32:88:43:a6:1f:
                    6d:6c:4b:64:2f:13:89:8d:da:e4:bf:6b:68:c1:8c:
                    32:2d:59:99:a7:a0:7f:96:1a:b7:ae:4f:04:e4:96:
                    d2:c4:3e:e8:89:cf:fd:74:e2:53:01:db:7b:01:ca:
                    3b:db:a9:40:47:dc:71:1d:c2:c8:96:26:ee:3a:a6:
                    ed:a9:dd:d8:76:96:e5:1d:cf:8f:fa:88:d4:87:5d:
                    b7:eb:c9:4c:fb:ae:66:d9:c5:59:27:00:55:56:f5:
                    62:70:08:84:ec:28:42:64:96:03:0c:e7:9d:23:1c:
                    21:49:cf:94:9e:23:69:06:9e:9d:c4:67:0e:70:fe:
                    5f:85:f5:3b:f3:ea:65:d3:a2:70:64:68:06:5c:1a:
                    00:77:85:d7:75:03:35:1b:3f:91:52:4e:49:1c:c4:
                    bf:57:7c:cc:bd:ee:c8:09:4c:2d:ab:a1:44:44:15:
                    04:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:BF:94:6A:A0:8B:12:5B:2F:1D:28:56:FB:B5:75:80:3D:33:57:14
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/80504e6a-5c12-479d-b42f-a9ddcb2639c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.189.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:20:de:2f:f2:c5:47:97:b4:51:70:9e:4e:ea:d4:10:02:76:
         d0:8e:cf:43:f1:3c:d6:09:d9:12:9a:eb:22:76:3c:47:98:6e:
         37:b3:03:6c:18:03:3f:bc:e1:c2:e2:b7:0c:25:d1:11:9e:6e:
         11:6f:da:53:8e:57:77:e6:dd:b5:18:84:ba:a7:ab:7d:11:5a:
         e8:48:19:95:b1:88:95:00:be:6b:6f:72:fa:66:cd:a4:86:56:
         c7:47:fd:cc:c7:17:fb:77:98:c6:ba:37:74:21:84:3e:2d:4f:
         23:ef:d8:99:b1:a4:91:ea:7c:5e:08:56:01:6a:34:13:d5:14:
         9b:fd:3a:9d:0f:94:ec:17:79:42:46:94:ac:0a:9f:ab:05:a4:
         8e:d5:9c:c8:54:f3:d3:0e:5f:36:87:0a:ed:b1:ea:d6:9a:de:
         85:27:80:45:ff:d8:57:d3:36:83:12:38:92:cb:f6:41:10:49:
         32:61:7a:f7:2e:b1:80:6c:15:4b:63:7b:06:b1:55:03:2a:4d:
         80:54:12:6b:5f:78:5e:61:54:42:ec:d3:67:cf:59:2a:08:f1:
         59:10:71:de:ea:f4:c5:3e:de:4b:d2:8a:c8:36:88:a4:da:37:
         62:fc:0c:b4:9c:3f:98:51:c5:91:cf:07:1f:65:26:86:03:5e:
         49:db:e0:5a
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUY00Aota2V+LPzuFrJ4gZPcfWKQ8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA3MDAyMDM4WhcNMjYxMTA1MjM1OTU5
WjB6MUkwRwYDVQQFE0BjMzIyOTQ0ZjRmNWRkYWVhMTIwM2E2NzgzYjU1OGUwZTcx
ZjU0ZWM5MTVkMDA4MWMxZWZhNTFkMGQ3ZGIzNTU3MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDCLjBRAVdwMtTNh/WqDb9RHHgJpPj0jnUGjknHomtQNSvn
zERW7ubSMJj/LWim9nWZoFEqp9FYRbspbrhVKnqhmR8Tu8EYUIxOVw2CD+yZ/EqG
GkEyiEOmH21sS2QvE4mN2uS/a2jBjDItWZmnoH+WGreuTwTkltLEPuiJz/104lMB
23sByjvbqUBH3HEdwsiWJu46pu2p3dh2luUdz4/6iNSHXbfryUz7rmbZxVknAFVW
9WJwCITsKEJklgMM550jHCFJz5SeI2kGnp3EZw5w/l+F9Tvz6mXTonBkaAZcGgB3
hdd1AzUbP5FSTkkcxL9XfMy97sgJTC2roUREFQQnAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUjL+UaqCLElsvHShW+7V1gD0zVxQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzgwNTA0ZTZhLTVjMTItNDc5ZC1iNDJmLWE5ZGRjYjI2MzljNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADAvcUwDQYJKoZIhvcNAQELBQADggEBADEg3i/yxUeXtFFwnk7q1BACdtCO
z0PxPNYJ2RKa6yJ2PEeYbjezA2wYAz+84cLitwwl0RGebhFv2lOOV3fm3bUYhLqn
q30RWuhIGZWxiJUAvmtvcvpmzaSGVsdH/czHF/t3mMa6N3QhhD4tTyPv2JmxpJHq
fF4IVgFqNBPVFJv9Op0PlOwXeUJGlKwKn6sFpI7VnMhU89MOXzaHCu2x6taa3oUn
gEX/2FfTNoMSOJLL9kEQSTJhevcusYBsFUtjewaxVQMqTYBUEmtfeF5hVELs02fP
WSoI8VkQcd7q9MU+3kvSisg2iKTaN2L8DLScP5hRxZHPBx9lJoYDXknb4Fo=
-----END CERTIFICATE-----
Generated at Tue Sep 15 13:25:25 2026 by rpki-client