Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fcf3ad48-0d1f-4ba4-87d3-c4086df92e62.roa
File:                     fcf3ad48-0d1f-4ba4-87d3-c4086df92e62.roa (raw, json)
Hash identifier:          1yudYfiVVihkMW9rV6EQDZ8A7R1uPbnK7jHjZ7Bi3OI=
Subject key identifier:   EF:9F:B5:EE:AF:4B:E8:8A:5C:7F:E4:90:12:96:00:09:E8:6F:53:27
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0B44C94407C86D6ECEDAAC325598F06613EC3961
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fcf3ad48-0d1f-4ba4-87d3-c4086df92e62.roa
Signing time:             Tue 28 Jul 2026 00:10:10 +0000
ROA not before:           Tue 28 Jul 2026 00:10:10 +0000
ROA not after:            Mon 26 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        115.177.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:44:c9:44:07:c8:6d:6e:ce:da:ac:32:55:98:f0:66:13:ec:39:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 28 00:10:10 2026 GMT
            Not After : Oct 26 23:59:59 2026 GMT
        Subject: serialNumber=d1fc9d93d5295582f7982de90fe6157e2dcbb9e74405a083baede5538b7d2d3e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:6f:13:73:81:e6:a2:5f:4d:6e:65:2e:b5:74:
                    67:3f:42:18:97:db:4f:60:0d:14:0a:7f:48:10:b7:
                    a8:8f:08:77:78:aa:1a:74:37:79:a8:7d:ef:a9:13:
                    ef:3d:fb:3d:45:02:99:a9:a7:f5:94:19:1f:bd:da:
                    78:b0:5c:8e:76:f4:d6:71:d7:1c:51:6a:96:59:5c:
                    86:77:06:0a:7f:78:02:61:e4:77:2f:fb:36:e6:65:
                    9b:4e:26:03:c0:83:7a:12:07:0c:ce:3f:bd:6a:c8:
                    e2:b8:bf:ea:e1:73:e5:be:57:94:5e:80:85:bd:9c:
                    7d:38:77:32:6b:32:39:2e:82:83:7e:ea:6e:4a:80:
                    5a:2b:73:3a:e3:a8:8c:98:76:80:bc:34:bc:a0:a5:
                    b7:40:d2:cf:33:8b:a3:6f:5f:2c:52:e2:93:55:fb:
                    0d:44:c5:a2:1f:62:fe:f3:93:ae:1a:6c:79:41:8e:
                    9b:8b:e3:98:b0:53:76:da:6c:a2:49:ef:7f:ca:e6:
                    fd:40:e9:32:86:76:8c:13:1a:2b:99:07:01:5f:77:
                    e2:8e:88:60:6f:35:ab:77:d6:f5:57:76:b2:76:17:
                    10:af:62:e4:a7:29:2f:e7:03:b3:53:53:a5:62:f6:
                    39:f8:90:26:1b:0c:90:81:b2:95:92:2c:52:bb:ed:
                    8d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:9F:B5:EE:AF:4B:E8:8A:5C:7F:E4:90:12:96:00:09:E8:6F:53:27
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fcf3ad48-0d1f-4ba4-87d3-c4086df92e62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.177.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         13:f0:83:8b:9d:a9:fe:71:77:21:02:37:5f:d0:59:b5:ce:50:
         b3:8a:6b:36:bf:a1:89:64:2f:0c:52:bb:b9:4d:5d:86:86:54:
         f6:e1:99:0d:18:da:f5:f8:66:3a:0f:99:02:46:9b:89:1a:6a:
         86:f3:c2:f7:2f:5b:82:d8:50:d7:68:aa:09:a2:17:94:88:93:
         0b:9c:3f:9b:b7:2c:fd:e3:aa:68:6d:4b:e7:9d:58:5f:6a:ec:
         c5:c6:56:d6:4f:48:81:e1:d7:70:02:96:7c:9f:1d:b2:ee:03:
         bf:9b:84:f4:55:6b:55:aa:97:45:34:25:b7:92:1c:db:37:eb:
         9c:fe:86:bf:6f:4d:ed:6e:a9:e7:74:ed:bf:50:34:dd:ca:fd:
         bb:10:9e:0a:09:ee:83:a7:0b:d3:bb:d5:b7:59:69:49:d7:12:
         e4:1f:78:40:ea:9c:1d:4e:8c:54:5d:b8:f2:cb:32:e7:fd:90:
         ec:9a:74:c9:20:d4:74:ff:41:d6:53:7d:4e:7d:e0:e5:15:1d:
         e2:50:b7:06:7f:07:a2:bc:6d:78:0d:53:16:99:49:6d:d9:56:
         81:52:5d:18:ed:b1:69:0e:48:a8:67:03:b1:ab:06:49:ae:fd:
         18:84:8e:16:4f:f9:19:a3:26:84:9b:f9:df:2e:0a:e2:1c:47:
         2a:6d:77:2a
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUC0TJRAfIbW7O2qwyVZjwZhPsOWEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzI4MDAxMDEwWhcNMjYxMDI2MjM1OTU5
WjB6MUkwRwYDVQQFE0BkMWZjOWQ5M2Q1Mjk1NTgyZjc5ODJkZTkwZmU2MTU3ZTJk
Y2JiOWU3NDQwNWEwODNiYWVkZTU1MzhiN2QyZDNlMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDubxNzgeaiX01uZS61dGc/QhiX209gDRQKf0gQt6iPCHd4
qhp0N3mofe+pE+89+z1FApmpp/WUGR+92niwXI529NZx1xxRapZZXIZ3Bgp/eAJh
5Hcv+zbmZZtOJgPAg3oSBwzOP71qyOK4v+rhc+W+V5RegIW9nH04dzJrMjkugoN+
6m5KgForczrjqIyYdoC8NLygpbdA0s8zi6NvXyxS4pNV+w1ExaIfYv7zk64abHlB
jpuL45iwU3babKJJ73/K5v1A6TKGdowTGiuZBwFfd+KOiGBvNat31vVXdrJ2FxCv
YuSnKS/nA7NTU6Vi9jn4kCYbDJCBspWSLFK77Y0rAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU75+17q9L6Ipcf+SQEpYACehvUycwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2ZjZjNhZDQ4LTBkMWYtNGJhNC04N2QzLWM0MDg2ZGY5MmU2Mi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAZzsYAwDQYJKoZIhvcNAQELBQADggEBABPwg4udqf5xdyECN1/QWbXOULOK
aza/oYlkLwxSu7lNXYaGVPbhmQ0Y2vX4ZjoPmQJGm4kaaobzwvcvW4LYUNdoqgmi
F5SIkwucP5u3LP3jqmhtS+edWF9q7MXGVtZPSIHh13AClnyfHbLuA7+bhPRVa1Wq
l0U0JbeSHNs365z+hr9vTe1uqed07b9QNN3K/bsQngoJ7oOnC9O71bdZaUnXEuQf
eEDqnB1OjFRduPLLMuf9kOyadMkg1HT/QdZTfU594OUVHeJQtwZ/B6K8bXgNUxaZ
SW3ZVoFSXRjtsWkOSKhnA7GrBkmu/RiEjhZP+RmjJoSb+d8uCuIcRyptdyo=
-----END CERTIFICATE-----
Generated at Tue Sep 15 12:45:28 2026 by rpki-client