Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/85aa348e-7e47-48f3-856c-189cf9d2ab7a.roa
File:                     85aa348e-7e47-48f3-856c-189cf9d2ab7a.roa (raw, json)
Hash identifier:          UFEQ3SljEOJyPAiC6X6edrD7pIS5TbkJj+6v1BNB818=
Subject key identifier:   86:4C:B9:C3:55:51:1F:1F:12:2B:8A:34:6E:C6:BD:69:2C:6E:CD:7A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       632DB4F25AB738917FABB77D6C5F01BB4223F8E5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/85aa348e-7e47-48f3-856c-189cf9d2ab7a.roa
Signing time:             Mon 03 Aug 2026 01:30:18 +0000
ROA not before:           Mon 03 Aug 2026 01:30:18 +0000
ROA not after:            Sun 01 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        110.238.8.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:2d:b4:f2:5a:b7:38:91:7f:ab:b7:7d:6c:5f:01:bb:42:23:f8:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  3 01:30:18 2026 GMT
            Not After : Nov  1 23:59:59 2026 GMT
        Subject: serialNumber=daddf518db7466d732626e7d2d506655930a36e8eed39b8a6f23d7d54469e9ae, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:85:b9:01:df:4a:80:38:87:d2:b7:59:fa:7c:
                    d5:82:74:34:8a:72:b2:ae:ca:fa:ac:a3:65:84:57:
                    cb:4b:e0:03:10:25:85:8f:bc:f5:c1:87:8d:89:a5:
                    14:d3:35:16:b1:7d:e1:59:d1:06:46:52:69:10:a5:
                    4e:a7:ed:7e:8b:09:e7:fe:65:4e:21:e9:31:15:1f:
                    3a:97:04:4b:b6:35:84:0f:a4:c3:b5:34:bb:30:13:
                    28:e0:0c:83:f8:92:de:ea:bb:6f:48:d7:1d:a0:4d:
                    b9:20:91:6d:e3:ab:c0:fd:f5:83:2f:c4:f7:a5:57:
                    58:7b:09:2b:4c:49:06:ce:b3:94:53:5f:03:91:88:
                    d7:6c:69:cb:1e:d2:df:ee:00:72:b6:ff:08:59:d9:
                    d0:5b:c7:6e:fd:9d:d3:bf:0d:3d:7e:0c:c0:8b:05:
                    f6:11:7c:e0:91:c8:f0:18:ba:e4:62:85:d2:d9:d6:
                    8d:cd:b6:eb:c7:97:1f:a2:1c:08:79:7d:27:1b:70:
                    99:e9:fd:9b:2b:01:26:ee:c6:af:7a:44:02:ea:06:
                    70:8e:1d:0b:58:8b:71:9b:60:21:a5:67:d0:8e:22:
                    12:c4:98:f8:a0:a4:08:a9:99:a4:b8:0c:ed:8b:c4:
                    cf:59:2b:dd:3f:6c:d8:d9:42:0d:7f:41:18:55:17:
                    63:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:4C:B9:C3:55:51:1F:1F:12:2B:8A:34:6E:C6:BD:69:2C:6E:CD:7A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/85aa348e-7e47-48f3-856c-189cf9d2ab7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.238.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0b:0f:7b:f4:0a:d2:ae:5b:9e:5e:22:28:1e:ff:b5:42:7c:b8:
         c6:7c:c6:3a:a3:c5:43:d3:79:e5:42:9c:2a:23:63:8c:1d:85:
         9f:e9:8b:3e:94:94:4c:d4:2c:da:35:d1:3d:0b:7e:e3:ed:9e:
         10:aa:c9:57:a8:5b:82:67:2c:3f:51:7a:13:e1:5a:9b:26:58:
         41:e8:6d:21:25:6e:fe:73:a5:b6:80:38:d1:f6:10:8e:92:58:
         11:5d:05:39:cd:3d:01:46:a6:23:a6:fc:6b:33:ec:8f:a2:15:
         89:e7:c0:e2:e9:d6:a0:56:86:72:76:8d:c4:1d:90:d8:bf:10:
         55:1a:ab:ea:c7:a0:f8:00:cd:84:7d:a1:e9:3f:f3:f3:01:a4:
         9a:ec:3a:bd:fa:44:52:c5:0c:88:e8:06:72:1e:29:a0:c8:22:
         8e:8b:d6:54:2d:37:dd:5a:af:fa:6d:0d:01:6b:b5:bc:d0:0d:
         2d:af:c5:e9:67:d3:a3:24:d5:c1:e3:dc:87:94:43:e1:c9:5b:
         55:83:df:ae:04:d9:11:96:1a:13:7a:c3:ac:f5:ea:18:7f:b1:
         14:6c:f6:ef:62:2a:dc:2b:2b:fc:82:22:c1:01:78:48:17:be:
         d4:11:01:c5:50:6f:62:1a:9b:f2:d0:13:74:2b:17:93:90:13:
         2a:64:21:6c
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUYy208lq3OJF/q7d9bF8Bu0Ij+OUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODAzMDEzMDE4WhcNMjYxMTAxMjM1OTU5
WjB6MUkwRwYDVQQFE0BkYWRkZjUxOGRiNzQ2NmQ3MzI2MjZlN2QyZDUwNjY1NTkz
MGEzNmU4ZWVkMzliOGE2ZjIzZDdkNTQ0NjllOWFlMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCxhbkB30qAOIfSt1n6fNWCdDSKcrKuyvqso2WEV8tL4AMQ
JYWPvPXBh42JpRTTNRaxfeFZ0QZGUmkQpU6n7X6LCef+ZU4h6TEVHzqXBEu2NYQP
pMO1NLswEyjgDIP4kt7qu29I1x2gTbkgkW3jq8D99YMvxPelV1h7CStMSQbOs5RT
XwORiNdsacse0t/uAHK2/whZ2dBbx279ndO/DT1+DMCLBfYRfOCRyPAYuuRihdLZ
1o3NtuvHlx+iHAh5fScbcJnp/ZsrASbuxq96RALqBnCOHQtYi3GbYCGlZ9COIhLE
mPigpAipmaS4DO2LxM9ZK90/bNjZQg1/QRhVF2PxAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUhky5w1VRHx8SK4o0bsa9aSxuzXowHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzg1YWEzNDhlLTdlNDctNDhmMy04NTZjLTE4OWNmOWQyYWI3YS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBANu7ggwDQYJKoZIhvcNAQELBQADggEBAAsPe/QK0q5bnl4iKB7/tUJ8uMZ8
xjqjxUPTeeVCnCojY4wdhZ/piz6UlEzULNo10T0LfuPtnhCqyVeoW4JnLD9RehPh
WpsmWEHobSElbv5zpbaAONH2EI6SWBFdBTnNPQFGpiOm/Gsz7I+iFYnnwOLp1qBW
hnJ2jcQdkNi/EFUaq+rHoPgAzYR9oek/8/MBpJrsOr36RFLFDIjoBnIeKaDIIo6L
1lQtN91ar/ptDQFrtbzQDS2vxeln06Mk1cHj3IeUQ+HJW1WD364E2RGWGhN6w6z1
6hh/sRRs9u9iKtwrK/yCIsEBeEgXvtQRAcVQb2Iam/LQE3QrF5OQEypkIWw=
-----END CERTIFICATE-----
Generated at Mon Aug 3 05:37:39 2026 by rpki-client