Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e0e8d25e-8735-4880-bcc8-79e6b0fc8a6e.roa
File:                     e0e8d25e-8735-4880-bcc8-79e6b0fc8a6e.roa (raw, json)
Hash identifier:          C9hlcAUQ2wkXzN2aBrGYQAd5IXyKkkM3XQjBZN0+YZk=
Subject key identifier:   6D:C0:24:D0:5A:A2:60:68:9A:14:4A:85:53:BB:72:31:7D:D8:5C:D3
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4BB5A2E833B41D5D445F92BC3754C133A03D6418
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e0e8d25e-8735-4880-bcc8-79e6b0fc8a6e.roa
Signing time:             Wed 05 Aug 2026 00:31:29 +0000
ROA not before:           Wed 05 Aug 2026 00:31:29 +0000
ROA not after:            Tue 03 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        56.154.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:b5:a2:e8:33:b4:1d:5d:44:5f:92:bc:37:54:c1:33:a0:3d:64:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  5 00:31:29 2026 GMT
            Not After : Nov  3 23:59:59 2026 GMT
        Subject: serialNumber=91b33c3af25d0e2edfea6c894a0a344a07ad8936183368a04330603f38415d55, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b3:2f:05:48:5d:91:8d:b9:22:93:14:1a:15:
                    10:99:b4:27:80:f5:55:48:01:2c:e5:69:d2:7e:f2:
                    ba:ed:0d:7b:42:5a:22:8e:f3:17:df:35:2d:26:0c:
                    58:de:06:3a:10:a0:b6:e8:60:3d:0e:7f:84:31:09:
                    d9:5c:21:82:23:c1:5d:09:3e:88:18:3f:b0:96:de:
                    ca:c0:89:f6:36:96:de:7b:40:63:d5:30:97:f0:a0:
                    3f:4f:25:97:ba:81:52:b2:22:77:7f:e9:17:15:7c:
                    bf:7a:6f:00:4a:00:a7:18:7f:ae:58:83:6e:4e:f3:
                    51:76:a7:79:da:de:1c:23:0d:d1:d6:b5:de:95:13:
                    e7:7d:fc:fe:7c:17:ef:6b:35:bb:ef:b4:6c:82:3c:
                    e6:da:4b:c6:d8:0f:c1:a7:1a:dd:8a:8f:33:0a:b2:
                    f2:d8:da:df:3e:68:98:51:53:c9:b3:97:96:9c:b8:
                    9e:d4:12:e1:5a:af:4e:0d:9f:b5:27:32:97:a9:2f:
                    da:de:9a:55:63:f0:5e:6c:f4:75:ef:01:69:69:ee:
                    d7:ca:10:23:42:31:ab:65:8e:e0:30:aa:81:89:96:
                    b6:6d:e2:88:2c:70:ae:f1:81:c2:78:6f:45:a1:80:
                    8b:5b:27:05:71:f7:c0:0b:6b:b2:5b:16:16:9f:ff:
                    d3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:C0:24:D0:5A:A2:60:68:9A:14:4A:85:53:BB:72:31:7D:D8:5C:D3
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e0e8d25e-8735-4880-bcc8-79e6b0fc8a6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.154.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4a:9d:4b:aa:22:c2:dc:e6:d0:c1:46:73:1d:70:ab:c9:8d:12:
         fa:98:ff:48:b5:25:4d:ad:6a:bb:8a:7f:af:28:86:9c:a8:4b:
         e4:2e:9d:ad:85:9f:3c:65:48:0c:ed:7a:da:89:fb:73:73:2c:
         14:66:b8:d4:bb:c0:4f:76:1c:d0:ae:20:5e:f5:1b:83:9d:86:
         a6:4a:dc:be:92:ca:56:be:80:ff:2f:a0:21:d6:8d:97:d8:5d:
         ed:a6:ba:7c:a1:34:ae:4a:d4:81:fc:66:5b:d3:60:87:28:b1:
         9d:36:2a:9d:4a:d5:47:06:68:ca:82:52:ba:12:71:be:0d:f0:
         f5:cf:75:1c:14:ab:40:d7:1e:68:91:d3:55:6e:5f:b7:54:bc:
         b2:27:35:54:1d:65:63:26:f7:cf:8d:f9:dd:5f:5b:92:63:d3:
         0e:b3:69:79:19:1d:63:22:d9:97:2b:8a:04:3a:53:64:77:b6:
         bf:e5:c8:c0:e1:f0:2b:cd:3a:ee:6b:44:90:c3:26:a6:a4:03:
         0e:8d:13:b2:d1:67:8c:0d:32:f2:c1:e2:a5:ec:2a:4b:78:ad:
         f8:6a:eb:60:84:a9:3a:4a:21:8d:0a:cd:a9:48:e2:ed:44:4d:
         c5:f9:c9:b0:e9:29:ad:fe:50:b4:e6:69:8c:77:61:5c:a6:48:
         11:e1:ae:f8
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUS7Wi6DO0HV1EX5K8N1TBM6A9ZBgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA1MDAzMTI5WhcNMjYxMTAzMjM1OTU5
WjB6MUkwRwYDVQQFE0A5MWIzM2MzYWYyNWQwZTJlZGZlYTZjODk0YTBhMzQ0YTA3
YWQ4OTM2MTgzMzY4YTA0MzMwNjAzZjM4NDE1ZDU1MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDCsy8FSF2RjbkikxQaFRCZtCeA9VVIASzladJ+8rrtDXtC
WiKO8xffNS0mDFjeBjoQoLboYD0Of4QxCdlcIYIjwV0JPogYP7CW3srAifY2lt57
QGPVMJfwoD9PJZe6gVKyInd/6RcVfL96bwBKAKcYf65Yg25O81F2p3na3hwjDdHW
td6VE+d9/P58F+9rNbvvtGyCPObaS8bYD8GnGt2KjzMKsvLY2t8+aJhRU8mzl5ac
uJ7UEuFar04Nn7UnMpepL9remlVj8F5s9HXvAWlp7tfKECNCMatljuAwqoGJlrZt
4ogscK7xgcJ4b0WhgItbJwVx98ALa7JbFhaf/9M3AgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUbcAk0FqiYGiaFEqFU7tyMX3YXNMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2UwZThkMjVlLTg3MzUtNDg4MC1iY2M4LTc5ZTZiMGZjOGE2ZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA4mjANBgkqhkiG9w0BAQsFAAOCAQEASp1LqiLC3ObQwUZzHXCryY0S+pj/
SLUlTa1qu4p/ryiGnKhL5C6drYWfPGVIDO162on7c3MsFGa41LvAT3Yc0K4gXvUb
g52GpkrcvpLKVr6A/y+gIdaNl9hd7aa6fKE0rkrUgfxmW9NghyixnTYqnUrVRwZo
yoJSuhJxvg3w9c91HBSrQNceaJHTVW5ft1S8sic1VB1lYyb3z4353V9bkmPTDrNp
eRkdYyLZlyuKBDpTZHe2v+XIwOHwK8067mtEkMMmpqQDDo0TstFnjA0y8sHipewq
S3it+GrrYISpOkohjQrNqUji7URNxfnJsOkprf5QtOZpjHdhXKZIEeGu+A==
-----END CERTIFICATE-----
Generated at Tue Sep 15 11:37:44 2026 by rpki-client