Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bc6b9b9b-ca0b-4630-b992-c5d2bbe150aa.roa
File:                     bc6b9b9b-ca0b-4630-b992-c5d2bbe150aa.roa (raw, json)
Hash identifier:          vZFABLCERBKUWuXsU9qv1ANChjNcEMwhZ+Xnmh3qz/s=
Subject key identifier:   82:11:27:93:A9:ED:58:04:BD:83:7E:7F:C9:CD:2D:B5:EB:0F:A2:27
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       154D96E8A715ED0C1C8198DFCDD4C56A605F35F2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bc6b9b9b-ca0b-4630-b992-c5d2bbe150aa.roa
Signing time:             Mon 12 Oct 2026 00:50:31 +0000
ROA not before:           Mon 12 Oct 2026 00:50:31 +0000
ROA not after:            Sun 10 Jan 2027 23:59:59 +0000
asID:                     14618
IP address blocks:        184.72.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:4d:96:e8:a7:15:ed:0c:1c:81:98:df:cd:d4:c5:6a:60:5f:35:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 12 00:50:31 2026 GMT
            Not After : Jan 10 23:59:59 2027 GMT
        Subject: serialNumber=53a4dac33c2c097e0a483bcb442bfe69718ad63711582a5a57d61d0ecd59f800, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e4:ea:e6:16:d2:58:9a:22:c6:8b:bf:d8:2b:
                    f5:12:66:7e:5f:d2:1e:43:22:b6:07:7a:f2:ef:51:
                    5f:be:36:c1:cb:90:a2:52:1c:9e:58:fb:08:30:0c:
                    29:15:c5:ea:e2:b9:ba:91:20:98:6a:fe:02:b3:10:
                    0c:7e:f6:65:eb:d0:13:aa:c1:06:a6:e2:6d:44:c1:
                    17:e0:c1:44:f8:35:54:7e:01:19:2f:7e:da:06:b9:
                    0b:8f:db:a2:5e:1d:62:58:d5:08:52:f9:2a:20:03:
                    8d:e2:34:0a:84:98:10:b9:54:3c:d8:cf:9c:88:38:
                    5f:35:cd:90:63:4f:e2:40:2b:62:54:cc:05:32:16:
                    07:9f:8f:e5:57:1e:bb:c1:b5:cc:8d:df:51:3d:ec:
                    89:55:91:2f:47:db:74:9e:df:b4:a4:23:fd:0a:e7:
                    f9:a2:29:eb:d0:e0:2a:8f:08:97:32:9f:d8:66:77:
                    24:1c:e1:4c:35:dc:86:62:72:e6:92:8d:60:5e:dc:
                    f7:30:29:5f:80:27:d6:e4:53:7a:eb:f1:c4:50:f0:
                    b4:7c:b4:9e:7f:fa:dc:94:0a:87:53:16:e8:44:19:
                    88:b6:34:6b:88:3d:7a:a0:59:0a:5a:16:c3:77:ab:
                    7f:5a:17:59:25:16:06:ee:d6:e9:d5:32:73:ab:73:
                    6a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:11:27:93:A9:ED:58:04:BD:83:7E:7F:C9:CD:2D:B5:EB:0F:A2:27
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bc6b9b9b-ca0b-4630-b992-c5d2bbe150aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.72.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3d:f0:89:5d:40:69:a5:ce:55:82:2f:b6:5a:0e:f5:5b:01:70:
         f3:92:ac:6d:33:12:d4:41:de:02:d2:c5:d2:2b:79:50:3f:e6:
         a1:66:ce:9e:cf:59:a9:3f:5c:f8:9d:73:c2:21:d3:85:9e:b3:
         61:69:50:9d:71:a3:ea:5b:c0:ff:cc:ba:77:99:5b:ed:40:a1:
         a2:d6:9d:01:17:93:08:07:ca:56:ce:ac:d4:0f:24:ad:15:0e:
         a2:84:ae:ee:50:c2:55:50:25:a2:6f:cf:d8:49:6d:96:15:c6:
         cc:b3:f6:b4:a5:d6:f6:46:e7:2b:17:7d:15:27:ed:75:30:eb:
         2f:33:a7:45:d2:7d:2d:c9:d3:8b:81:95:42:d2:02:b6:0a:1b:
         82:74:a9:6f:9f:f3:e5:26:7d:fa:5c:dc:ac:6b:3c:22:3a:c8:
         e8:55:ff:a3:80:94:33:f8:12:18:11:a0:33:ac:a0:a1:a5:0c:
         bc:4e:99:a5:5c:8e:dc:d3:9e:af:af:7a:27:fc:4e:6a:9e:41:
         d5:55:44:74:ce:eb:70:5b:c2:36:b9:4b:4f:89:d6:5f:79:65:
         ee:da:1d:94:4c:a2:11:f4:93:31:56:2b:3b:51:bd:67:90:b1:
         47:65:da:7b:29:56:9e:2d:6d:00:62:b5:8d:11:e1:2f:12:65:
         33:64:d8:95
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUFU2W6KcV7QwcgZjfzdTFamBfNfIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDEyMDA1MDMxWhcNMjcwMTEwMjM1OTU5
WjB6MUkwRwYDVQQFE0A1M2E0ZGFjMzNjMmMwOTdlMGE0ODNiY2I0NDJiZmU2OTcx
OGFkNjM3MTE1ODJhNWE1N2Q2MWQwZWNkNTlmODAwMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCg5OrmFtJYmiLGi7/YK/USZn5f0h5DIrYHevLvUV++NsHL
kKJSHJ5Y+wgwDCkVxeriubqRIJhq/gKzEAx+9mXr0BOqwQam4m1EwRfgwUT4NVR+
ARkvftoGuQuP26JeHWJY1QhS+SogA43iNAqEmBC5VDzYz5yIOF81zZBjT+JAK2JU
zAUyFgefj+VXHrvBtcyN31E97IlVkS9H23Se37SkI/0K5/miKevQ4CqPCJcyn9hm
dyQc4Uw13IZicuaSjWBe3PcwKV+AJ9bkU3rr8cRQ8LR8tJ5/+tyUCodTFuhEGYi2
NGuIPXqgWQpaFsN3q39aF1klFgbu1unVMnOrc2odAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUghEnk6ntWAS9g35/yc0ttesPoicwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2JjNmI5YjliLWNhMGItNDYzMC1iOTkyLWM1ZDJiYmUxNTBhYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAS4SMAwDQYJKoZIhvcNAQELBQADggEBAD3wiV1AaaXOVYIvtloO9VsBcPOS
rG0zEtRB3gLSxdIreVA/5qFmzp7PWak/XPidc8Ih04Wes2FpUJ1xo+pbwP/MuneZ
W+1AoaLWnQEXkwgHylbOrNQPJK0VDqKEru5QwlVQJaJvz9hJbZYVxsyz9rSl1vZG
5ysXfRUn7XUw6y8zp0XSfS3J04uBlULSArYKG4J0qW+f8+Umffpc3KxrPCI6yOhV
/6OAlDP4EhgRoDOsoKGlDLxOmaVcjtzTnq+veif8TmqeQdVVRHTO63Bbwja5S0+J
1l95Ze7aHZRMohH0kzFWKztRvWeQsUdl2nspVp4tbQBitY0R4S8SZTNk2JU=
-----END CERTIFICATE-----
Generated at Wed Nov 4 17:11:50 2026 by rpki-client