Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7c0cb74-fe99-4d60-a3ad-d4c299875974.roa
File:                     b7c0cb74-fe99-4d60-a3ad-d4c299875974.roa (raw, json)
Hash identifier:          sE5uoOVqmVPaltAJO9yBTfoQczqt2RW3FrLt901++20=
Subject key identifier:   D7:4D:D6:DF:2A:FF:A7:02:36:7D:B2:DE:8F:09:53:5E:26:FC:23:F7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       44DF11AC0DCBD07A368792D27B42DCBB645451D7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7c0cb74-fe99-4d60-a3ad-d4c299875974.roa
Signing time:             Fri 07 Aug 2026 00:40:06 +0000
ROA not before:           Fri 07 Aug 2026 00:40:06 +0000
ROA not after:            Thu 05 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        204.130.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:df:11:ac:0d:cb:d0:7a:36:87:92:d2:7b:42:dc:bb:64:54:51:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  7 00:40:06 2026 GMT
            Not After : Nov  5 23:59:59 2026 GMT
        Subject: serialNumber=8827c7981f9eaf43173524933978c3d1603e84ed0cff42f1c4de40d9d05bc141, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:20:7a:62:cb:a8:84:35:08:d5:fb:53:b9:e6:
                    84:ca:a6:4b:d7:f7:2b:55:12:29:bd:fc:15:16:fa:
                    5b:01:53:3c:36:3e:fb:df:1f:00:bd:2e:a1:9b:82:
                    0d:1b:5e:9c:05:88:36:2b:47:5e:bd:2d:24:ad:36:
                    9d:93:4c:39:b5:5a:b8:72:1d:99:46:b6:b1:3f:0f:
                    b2:23:7f:0d:a9:7c:4e:10:d1:d4:8f:17:79:01:5e:
                    9c:32:9d:27:8d:06:3d:42:bf:75:95:eb:12:7d:de:
                    59:1c:dd:c2:c3:6d:bc:b6:19:77:49:a1:bb:ac:ee:
                    6f:e6:33:cd:01:d5:f2:a6:78:ce:04:9f:ba:5b:e9:
                    ce:96:ff:88:92:94:64:8e:63:0e:a5:44:43:aa:33:
                    43:d5:9e:b9:70:8f:67:f6:0a:a4:e6:92:0e:9f:88:
                    f6:00:45:11:09:6d:32:63:e3:76:f6:b6:3d:3f:f8:
                    25:22:39:cb:24:de:63:9b:3a:2b:c3:bf:01:79:ac:
                    20:3f:2d:6b:85:97:d4:26:a7:fc:6b:42:20:51:63:
                    c3:fd:17:00:90:f7:59:dc:a0:77:69:02:ca:ea:9c:
                    a0:d6:5e:8b:88:eb:44:52:df:eb:19:d0:1e:2f:7a:
                    27:96:52:a0:b8:06:11:f9:b7:52:eb:26:c1:a6:74:
                    9e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:4D:D6:DF:2A:FF:A7:02:36:7D:B2:DE:8F:09:53:5E:26:FC:23:F7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7c0cb74-fe99-4d60-a3ad-d4c299875974.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.130.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:e4:8e:35:72:00:fd:e0:b8:57:c4:43:01:41:a6:f9:30:86:
         91:ca:06:30:d6:a2:a2:81:86:71:76:c5:33:f9:54:63:38:a1:
         34:91:6b:68:ba:1c:77:71:f1:31:30:85:20:2b:04:48:9c:49:
         0d:3c:c2:c5:e2:a3:72:48:7b:14:f1:82:6e:1a:49:f7:07:e3:
         20:74:ff:fb:97:c4:05:72:53:66:e6:f2:f5:e8:8d:a3:24:41:
         18:5b:d9:61:2d:53:81:1f:cc:d9:24:7c:c7:8d:dd:d5:4f:d9:
         a9:62:15:f9:df:8d:e0:7e:c1:83:d6:16:d1:5b:7d:a3:83:44:
         2b:67:5f:34:57:b0:05:b1:e1:3c:21:ae:76:6e:f2:ce:10:9a:
         77:d2:63:41:f3:ab:89:53:9e:ca:ab:93:a1:95:18:94:5b:f7:
         28:a0:56:24:49:a1:80:5c:30:53:8b:7e:13:a4:99:14:c0:1d:
         dc:17:cb:35:28:2c:da:24:29:62:2a:5f:57:32:8f:15:65:be:
         c8:67:ec:e8:2a:21:70:e5:cb:15:92:6a:8d:a3:03:92:1d:02:
         c8:e4:ea:aa:26:a0:77:3d:0a:ce:82:6a:08:a3:5b:ea:8c:14:
         e9:e5:7f:f8:af:4f:9a:f0:03:38:29:b3:24:8c:61:e7:01:ae:
         b8:19:cb:dc
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIURN8RrA3L0Ho2h5LSe0Lcu2RUUdcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA3MDA0MDA2WhcNMjYxMTA1MjM1OTU5
WjB6MUkwRwYDVQQFE0A4ODI3Yzc5ODFmOWVhZjQzMTczNTI0OTMzOTc4YzNkMTYw
M2U4NGVkMGNmZjQyZjFjNGRlNDBkOWQwNWJjMTQxMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDgIHpiy6iENQjV+1O55oTKpkvX9ytVEim9/BUW+lsBUzw2
PvvfHwC9LqGbgg0bXpwFiDYrR169LSStNp2TTDm1WrhyHZlGtrE/D7Ijfw2pfE4Q
0dSPF3kBXpwynSeNBj1Cv3WV6xJ93lkc3cLDbby2GXdJobus7m/mM80B1fKmeM4E
n7pb6c6W/4iSlGSOYw6lREOqM0PVnrlwj2f2CqTmkg6fiPYARREJbTJj43b2tj0/
+CUiOcsk3mObOivDvwF5rCA/LWuFl9Qmp/xrQiBRY8P9FwCQ91ncoHdpAsrqnKDW
XouI60RS3+sZ0B4veieWUqC4BhH5t1LrJsGmdJ5BAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU103W3yr/pwI2fbLejwlTXib8I/cwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2I3YzBjYjc0LWZlOTktNGQ2MC1hM2FkLWQ0YzI5OTg3NTk3NC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADMgsowDQYJKoZIhvcNAQELBQADggEBAJDkjjVyAP3guFfEQwFBpvkwhpHK
BjDWoqKBhnF2xTP5VGM4oTSRa2i6HHdx8TEwhSArBEicSQ08wsXio3JIexTxgm4a
SfcH4yB0//uXxAVyU2bm8vXojaMkQRhb2WEtU4EfzNkkfMeN3dVP2aliFfnfjeB+
wYPWFtFbfaODRCtnXzRXsAWx4TwhrnZu8s4QmnfSY0Hzq4lTnsqrk6GVGJRb9yig
ViRJoYBcMFOLfhOkmRTAHdwXyzUoLNokKWIqX1cyjxVlvshn7OgqIXDlyxWSao2j
A5IdAsjk6qomoHc9Cs6CagijW+qMFOnlf/ivT5rwAzgpsySMYecBrrgZy9w=
-----END CERTIFICATE-----
Generated at Thu Sep 17 16:16:50 2026 by rpki-client