Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/86311764-a72e-4148-95b8-c858867dfe34.roa
File:                     86311764-a72e-4148-95b8-c858867dfe34.roa (raw, json)
Hash identifier:          /DigFP5eFIxEe8DUtaa1U/CotT6PNvXeA113Kvve6BQ=
Subject key identifier:   21:73:57:62:F2:42:D6:C3:1E:AE:58:E0:30:76:28:40:D5:75:39:55
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       55E44FEF92025C7B034A7FF4FA18FDB18AF6DADC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/86311764-a72e-4148-95b8-c858867dfe34.roa
Signing time:             Mon 03 Aug 2026 02:10:09 +0000
ROA not before:           Mon 03 Aug 2026 02:10:09 +0000
ROA not after:            Sun 01 Nov 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        100.27.238.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:e4:4f:ef:92:02:5c:7b:03:4a:7f:f4:fa:18:fd:b1:8a:f6:da:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  3 02:10:09 2026 GMT
            Not After : Nov  1 23:59:59 2026 GMT
        Subject: serialNumber=3f9284661b0a8e433e514681d8dc1ffeaf8e837aa380308adb6a7a13bc699fe2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2d:a5:bd:9e:9f:4b:b5:ca:56:d0:66:86:8a:
                    3f:0c:3c:fa:2e:f3:74:13:08:eb:0f:e9:b7:71:62:
                    c4:bf:13:dd:3c:4a:de:64:12:72:d2:27:fd:71:b6:
                    e9:20:94:5a:79:5b:36:f1:97:b0:34:b6:f6:34:6b:
                    ea:7e:e3:de:ba:9f:c1:cd:8f:e2:4a:bf:35:76:4d:
                    9f:2a:f1:9e:8f:c4:6e:18:22:0c:40:19:ae:f6:07:
                    30:75:88:5f:87:e9:c0:d4:a3:57:c2:73:d3:c7:fc:
                    ae:b5:d4:e3:3c:91:e4:a0:d6:44:fa:b3:fc:cf:e6:
                    36:16:aa:f5:9d:5d:e7:ed:50:24:ee:ac:ed:49:cd:
                    fc:3a:0e:59:a5:98:8c:33:ed:30:1a:da:ab:75:27:
                    c2:79:5c:6b:a6:75:0d:db:30:f9:bf:30:e6:29:da:
                    7e:80:5d:82:01:de:ff:b5:14:00:41:a3:e3:77:60:
                    cc:77:68:c6:f1:57:72:59:8f:0a:f3:ac:bd:57:a1:
                    59:1d:75:2b:e1:06:e6:c3:cb:c0:6b:80:f0:f2:8d:
                    dc:61:d2:6b:af:da:52:7b:d7:f7:a9:44:22:52:75:
                    f1:d5:97:e5:95:ad:35:fd:2e:77:55:76:ca:fa:d3:
                    c5:08:e9:68:dd:35:56:96:13:f8:0b:43:8d:b4:b3:
                    05:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:73:57:62:F2:42:D6:C3:1E:AE:58:E0:30:76:28:40:D5:75:39:55
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/86311764-a72e-4148-95b8-c858867dfe34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  100.27.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         55:bd:94:f5:3c:63:da:06:7e:ff:c4:a7:62:75:bc:0d:64:3a:
         05:96:91:be:4b:79:da:0a:a3:62:c4:5e:1f:8f:41:47:1e:6d:
         b5:e5:50:bc:11:84:80:5d:4c:78:77:81:a3:8b:21:d6:bf:a4:
         74:2e:67:d7:63:ca:07:36:c5:36:77:68:a8:c9:d8:8d:f1:eb:
         12:bf:77:0a:9f:80:3e:60:04:14:5f:1e:48:9b:d5:63:85:f0:
         a5:76:e2:8b:1d:fe:84:ca:be:12:c0:44:2a:9e:65:27:32:a2:
         10:f9:29:84:f6:fd:ae:0f:f8:5e:f3:60:16:28:16:b1:a0:22:
         3f:4e:68:05:c9:59:85:5b:de:9c:72:5f:14:a8:ea:97:33:3a:
         4e:db:c1:a2:e3:5b:8c:af:14:76:8e:f0:96:69:3c:d1:bc:59:
         f3:23:76:4c:03:25:61:23:f7:7d:79:99:e7:37:1d:ed:4c:66:
         e2:6b:88:3c:f0:2c:61:b1:c2:8c:d9:0b:5f:a8:23:e1:65:59:
         85:09:07:08:32:20:a6:2f:78:6d:ea:28:b9:c1:fb:df:c8:d4:
         0c:35:da:7c:4b:d2:73:34:bf:f5:99:7d:53:62:68:b6:03:da:
         1f:15:a4:ab:33:02:1c:96:1c:33:e2:b5:cd:88:19:63:57:61:
         88:b8:c9:b1
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUVeRP75ICXHsDSn/0+hj9sYr22twwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODAzMDIxMDA5WhcNMjYxMTAxMjM1OTU5
WjB6MUkwRwYDVQQFE0AzZjkyODQ2NjFiMGE4ZTQzM2U1MTQ2ODFkOGRjMWZmZWFm
OGU4MzdhYTM4MDMwOGFkYjZhN2ExM2JjNjk5ZmUyMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC4LaW9np9LtcpW0GaGij8MPPou83QTCOsP6bdxYsS/E908
St5kEnLSJ/1xtukglFp5Wzbxl7A0tvY0a+p+4966n8HNj+JKvzV2TZ8q8Z6PxG4Y
IgxAGa72BzB1iF+H6cDUo1fCc9PH/K611OM8keSg1kT6s/zP5jYWqvWdXeftUCTu
rO1Jzfw6DlmlmIwz7TAa2qt1J8J5XGumdQ3bMPm/MOYp2n6AXYIB3v+1FABBo+N3
YMx3aMbxV3JZjwrzrL1XoVkddSvhBubDy8BrgPDyjdxh0muv2lJ71/epRCJSdfHV
l+WVrTX9LndVdsr608UI6WjdNVaWE/gLQ420swVvAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUIXNXYvJC1sMerljgMHYoQNV1OVUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzg2MzExNzY0LWE3MmUtNDE0OC05NWI4LWM4NTg4NjdkZmUzNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAFkG+4wDQYJKoZIhvcNAQELBQADggEBAFW9lPU8Y9oGfv/Ep2J1vA1kOgWW
kb5LedoKo2LEXh+PQUcebbXlULwRhIBdTHh3gaOLIda/pHQuZ9djygc2xTZ3aKjJ
2I3x6xK/dwqfgD5gBBRfHkib1WOF8KV24osd/oTKvhLARCqeZScyohD5KYT2/a4P
+F7zYBYoFrGgIj9OaAXJWYVb3pxyXxSo6pczOk7bwaLjW4yvFHaO8JZpPNG8WfMj
dkwDJWEj9315mec3He1MZuJriDzwLGGxwozZC1+oI+FlWYUJBwgyIKYveG3qKLnB
+9/I1Aw12nxL0nM0v/WZfVNiaLYD2h8VpKszAhyWHDPitc2IGWNXYYi4ybE=
-----END CERTIFICATE-----
Generated at Thu Aug 20 21:55:42 2026 by rpki-client