Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/e0073d5a-9507-4588-b834-e01ed691ccb6.roa
File:                     e0073d5a-9507-4588-b834-e01ed691ccb6.roa (raw, json)
Hash identifier:          XgTYhMUaTOSdv5pvnYExQRLt6Hq6ud6Lh4fXbhKDD+Y=
Subject key identifier:   D3:B5:63:66:71:11:AF:88:DD:56:08:58:6B:0B:F6:4A:ED:94:3E:22
Certificate issuer:       /CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173
Certificate serial:       712ADF6E4F181D99C3352D20CE487BEF5F5D4CA4
Authority key identifier: CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/e0073d5a-9507-4588-b834-e01ed691ccb6.roa
Signing time:             Tue 04 Aug 2026 00:10:26 +0000
ROA not before:           Tue 04 Aug 2026 00:10:26 +0000
ROA not after:            Mon 02 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        198.41.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:2a:df:6e:4f:18:1d:99:c3:35:2d:20:ce:48:7b:ef:5f:5d:4c:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173
        Validity
            Not Before: Aug  4 00:10:26 2026 GMT
            Not After : Nov  2 23:59:59 2026 GMT
        Subject: serialNumber=8551cb205b04974785bfafbfdfcc3e2cbb1b34260a7454830fbc1ac547db524c, CN=88af7b95-2ef7-49fc-a37d-1b8f0547180d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b2:6b:ae:00:cd:c8:0c:bf:b7:21:21:81:d3:
                    5e:65:14:8c:6c:06:b8:47:06:e8:1c:9b:58:82:9f:
                    70:a3:43:b3:d2:6c:f4:e3:71:60:af:66:ee:00:3b:
                    40:31:18:0f:1a:70:6b:f9:1a:95:ae:99:d4:05:50:
                    91:74:41:10:cb:c6:10:bc:ff:c1:cd:32:df:a7:64:
                    85:3a:83:be:a0:65:af:b0:58:66:33:ff:86:f5:ab:
                    c6:84:c4:1d:6d:72:05:10:69:0c:c1:88:f6:63:bb:
                    c9:67:92:ae:87:3f:4b:b2:91:95:bb:5d:64:ed:bb:
                    95:eb:17:af:d4:61:78:8a:dc:af:ed:91:39:df:2a:
                    92:bd:fe:a0:81:0d:6a:91:d6:8f:7e:62:b6:a3:36:
                    a3:57:28:e3:62:b9:aa:2b:8d:a3:05:36:46:db:74:
                    4e:c7:a9:c2:eb:13:82:0c:94:18:ea:5f:d4:64:5b:
                    ea:c1:ff:7e:2f:19:aa:fb:24:75:c9:ec:70:20:01:
                    8d:d9:e8:bc:e4:61:90:cd:eb:dd:d7:17:2d:e8:49:
                    5b:e2:32:3b:a9:97:42:82:b7:b3:35:26:28:cf:f8:
                    59:6a:92:61:17:87:b2:bf:bb:41:15:4c:26:65:c1:
                    8e:ba:c0:a4:ba:ba:58:aa:e5:8a:03:a4:57:7b:64:
                    e4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:B5:63:66:71:11:AF:88:DD:56:08:58:6B:0B:F6:4A:ED:94:3E:22
            X509v3 Authority Key Identifier:
                keyid:CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/e0073d5a-9507-4588-b834-e01ed691ccb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:39:ea:46:62:ab:62:2a:1d:46:b4:7c:99:f1:c6:ba:de:ca:
         69:12:cc:5b:f5:d4:42:93:5a:a0:9b:86:e2:9f:12:14:1f:ed:
         be:f9:2d:a1:34:bd:1d:35:95:8c:6c:5a:67:78:68:f3:c7:9d:
         2f:3c:f8:1d:a4:b3:ad:ec:94:07:a9:e3:9c:b5:de:aa:43:aa:
         6e:ff:37:bc:2e:51:e7:a9:77:0c:84:9b:49:72:e8:de:97:5c:
         14:c4:8f:38:40:fe:3c:4d:34:3b:3b:62:dd:27:2c:29:40:65:
         72:ee:d2:41:f5:1c:34:d8:61:62:7b:9d:e4:4e:db:e6:4f:5f:
         8c:14:cd:e2:44:4d:45:e1:97:b2:98:00:1a:bc:89:4a:61:6b:
         df:20:c0:8c:de:65:2f:97:d3:64:92:5c:84:ac:58:3e:b1:58:
         f6:dd:32:a9:ff:6d:82:3c:f0:95:8e:4f:4b:ab:b5:1a:e9:19:
         8d:63:f2:8c:b3:1f:93:6f:2b:ab:9f:0e:a3:d3:c7:93:87:f4:
         69:26:ec:99:16:89:b9:bd:c6:e6:f2:74:a3:4d:7b:32:bf:d6:
         d4:1f:2c:f3:76:62:70:3e:c9:6b:93:69:42:e5:dc:a5:2f:74:
         66:26:26:a7:6a:45:68:fe:a0:b2:e3:cb:55:ff:9e:3d:20:fd:
         ab:74:da:3b
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUcSrfbk8YHZnDNS0gzkh7719dTKQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYzMxOTQyNGUwMzlmODZkNmFkOWZjNGU3MjIzZGY4NDFk
MjBhZTZkMGZmMTI0MjgxNzMwHhcNMjYwODA0MDAxMDI2WhcNMjYxMTAyMjM1OTU5
WjB6MUkwRwYDVQQFE0A4NTUxY2IyMDViMDQ5NzQ3ODViZmFmYmZkZmNjM2UyY2Ji
MWIzNDI2MGE3NDU0ODMwZmJjMWFjNTQ3ZGI1MjRjMS0wKwYDVQQDEyQ4OGFmN2I5
NS0yZWY3LTQ5ZmMtYTM3ZC0xYjhmMDU0NzE4MGQwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDMsmuuAM3IDL+3ISGB015lFIxsBrhHBugcm1iCn3CjQ7PS
bPTjcWCvZu4AO0AxGA8acGv5GpWumdQFUJF0QRDLxhC8/8HNMt+nZIU6g76gZa+w
WGYz/4b1q8aExB1tcgUQaQzBiPZju8lnkq6HP0uykZW7XWTtu5XrF6/UYXiK3K/t
kTnfKpK9/qCBDWqR1o9+YrajNqNXKONiuaorjaMFNkbbdE7HqcLrE4IMlBjqX9Rk
W+rB/34vGar7JHXJ7HAgAY3Z6LzkYZDN693XFy3oSVviMjupl0KCt7M1JijP+Flq
kmEXh7K/u0EVTCZlwY66wKS6uliq5YoDpFd7ZOQhAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU07VjZnERr4jdVghYawv2Su2UPiIwHwYDVR0jBBgwFoAUzBBhJz//dj92
0t7ihYPoujsFxDAwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lNWRlYTY2MC1i
ZjU5LTRiNGMtYjlhZC00YTY3ODdlMDNmY2UvYzMxOTQyNGUwMzlmODZkNmFkOWZj
NGU3MjIzZGY4NDFkMjBhZTZkMGZmMTI0MjgxNzMuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMmRmNTFjZDItZTZhZi00OTNhLWE4OGEtMzIy
MWQwMWY3ZDkwL2UwMDczZDVhLTk1MDctNDU4OC1iODM0LWUwMWVkNjkxY2NiNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJkZjUxY2QyLWU2YWYtNDkzYS1hODhh
LTMyMjFkMDFmN2Q5MC9uNGJXclpfRTV5STktRUhTQ3ViUV94SkNnWE0uY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADGKWYwDQYJKoZIhvcNAQELBQADggEBAF856kZiq2IqHUa0fJnxxrreymkS
zFv11EKTWqCbhuKfEhQf7b75LaE0vR01lYxsWmd4aPPHnS88+B2ks63slAep45y1
3qpDqm7/N7wuUeepdwyEm0ly6N6XXBTEjzhA/jxNNDs7Yt0nLClAZXLu0kH1HDTY
YWJ7neRO2+ZPX4wUzeJETUXhl7KYABq8iUpha98gwIzeZS+X02SSXISsWD6xWPbd
Mqn/bYI88JWOT0urtRrpGY1j8oyzH5NvK6ufDqPTx5OH9Gkm7JkWibm9xubydKNN
ezK/1tQfLPN2YnA+yWuTaULl3KUvdGYmJqdqRWj+oLLjy1X/nj0g/at02js=
-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:39 2026 by rpki-client