Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/191de0ae-0124-484d-9697-eb4c11a47537.roa
File:                     191de0ae-0124-484d-9697-eb4c11a47537.roa (raw, json)
Hash identifier:          NoQvKFOZj1rAx0/8biizoftTebnuqXQllvRzjnwhu84=
Subject key identifier:   71:3C:1A:B4:0D:F3:7C:95:C3:59:B6:27:3B:1E:83:66:36:91:9B:9E
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       117200DCD3BCA06EEA5582B1F9B21A8E6951848E
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/191de0ae-0124-484d-9697-eb4c11a47537.roa
Signing time:             Fri 07 Aug 2026 01:40:08 +0000
ROA not before:           Fri 07 Aug 2026 01:40:08 +0000
ROA not after:            Thu 05 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        3.173.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:72:00:dc:d3:bc:a0:6e:ea:55:82:b1:f9:b2:1a:8e:69:51:84:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Aug  7 01:40:08 2026 GMT
            Not After : Nov  5 23:59:59 2026 GMT
        Subject: serialNumber=839b135cbaf1d2c2530ee1333e2b3d763b77e483165f11d308feefef2a6ef14e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:88:21:2f:2c:4b:12:20:3f:0a:b8:cd:37:75:
                    8c:12:14:50:86:5d:b0:24:d2:53:82:1b:79:16:b7:
                    49:1f:d8:8b:d3:35:83:8e:4a:0f:dc:a2:4a:54:cb:
                    22:2b:10:c3:b5:78:7b:7e:d1:a5:16:4b:a0:95:b7:
                    35:fc:4e:ec:0f:53:39:d9:0e:10:7a:68:f8:6c:73:
                    72:ca:72:24:cb:a2:db:8c:c2:4c:07:e8:9c:2a:1b:
                    a1:f6:c9:02:77:7b:6a:f5:33:46:50:83:6a:40:c8:
                    b8:f8:af:ee:13:f7:75:46:cf:5a:59:79:13:25:e6:
                    90:2b:41:f4:9d:a8:d0:8f:8e:62:ce:15:6f:a2:4e:
                    4f:d7:3b:aa:1e:91:31:a8:9e:bc:cf:6e:91:42:72:
                    56:1d:23:3a:59:7f:6a:18:15:5f:63:ff:e0:01:57:
                    f4:66:c1:5a:1a:fb:4b:e1:38:8e:d1:fc:7d:fb:91:
                    b8:b9:31:9e:56:c7:6e:98:a6:60:eb:1d:f2:05:a5:
                    82:72:8e:c9:01:cd:89:52:70:b1:27:89:72:b6:f8:
                    bd:53:1f:7d:c4:3d:37:d8:f6:40:08:de:76:63:6e:
                    ec:d7:9e:53:a7:68:1f:cd:88:8c:43:c2:d3:33:b0:
                    31:be:3f:3c:b0:c3:64:cf:8d:bc:75:59:1c:26:c2:
                    ae:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:3C:1A:B4:0D:F3:7C:95:C3:59:B6:27:3B:1E:83:66:36:91:9B:9E
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/191de0ae-0124-484d-9697-eb4c11a47537.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.173.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:9f:f6:fa:02:0a:7c:01:63:d0:89:ff:52:05:99:6c:c1:6d:
         9c:d3:eb:56:57:41:9d:28:90:d3:92:e8:66:c0:2d:05:71:26:
         ec:55:1d:ae:90:ad:e1:9b:15:e1:a7:2c:17:84:ee:3d:58:e9:
         1b:f6:6f:70:9b:db:e1:73:60:2e:ac:e0:b3:88:73:b6:6e:e6:
         9a:cc:42:c9:04:7f:fa:08:34:02:44:64:d6:eb:f3:06:9d:da:
         dc:43:9d:01:64:57:35:8b:03:5a:24:90:1b:68:fd:58:aa:dd:
         04:aa:89:bc:be:0b:05:62:3a:81:f2:ae:3e:8a:7f:eb:38:42:
         36:f1:d5:6a:18:84:02:05:f2:bb:84:f2:04:cd:7c:29:73:8f:
         23:e2:b3:d7:dd:a9:03:3f:99:27:52:00:9a:eb:c1:72:7a:7d:
         f6:ba:9e:85:d3:4f:a9:85:68:8f:9d:37:5b:d6:d4:be:ba:d9:
         2e:e2:3e:e4:a7:20:74:df:58:0a:3c:ba:bf:84:ae:8d:61:5c:
         77:fd:5b:0a:dd:35:94:03:1c:56:99:12:e8:fc:bd:40:d2:b1:
         b4:d6:14:3d:a9:a8:d8:67:ba:bd:39:2d:c7:dd:cf:e7:ce:35:
         f9:27:f2:37:b1:aa:3d:57:78:b6:fa:a1:34:12:d7:c4:7d:aa:
         4f:7c:53:e9
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUEXIA3NO8oG7qVYKx+bIajmlRhI4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwODA3MDE0MDA4WhcNMjYxMTA1MjM1OTU5
WjB6MUkwRwYDVQQFE0A4MzliMTM1Y2JhZjFkMmMyNTMwZWUxMzMzZTJiM2Q3NjNi
NzdlNDgzMTY1ZjExZDMwOGZlZWZlZjJhNmVmMTRlMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDeiCEvLEsSID8KuM03dYwSFFCGXbAk0lOCG3kWt0kf2IvT
NYOOSg/cokpUyyIrEMO1eHt+0aUWS6CVtzX8TuwPUznZDhB6aPhsc3LKciTLotuM
wkwH6JwqG6H2yQJ3e2r1M0ZQg2pAyLj4r+4T93VGz1pZeRMl5pArQfSdqNCPjmLO
FW+iTk/XO6oekTGonrzPbpFCclYdIzpZf2oYFV9j/+ABV/RmwVoa+0vhOI7R/H37
kbi5MZ5Wx26YpmDrHfIFpYJyjskBzYlScLEniXK2+L1TH33EPTfY9kAI3nZjbuzX
nlOnaB/NiIxDwtMzsDG+Pzyww2TPjbx1WRwmwq6ZAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUcTwatA3zfJXDWbYnOx6DZjaRm54wHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzE5MWRlMGFlLTAxMjQtNDg0ZC05Njk3LWViNGMxMWE0NzUzNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIDrVwwDQYJKoZIhvcNAQELBQADggEBADif9voCCnwBY9CJ/1IFmWzBbZzT
61ZXQZ0okNOS6GbALQVxJuxVHa6QreGbFeGnLBeE7j1Y6Rv2b3Cb2+FzYC6s4LOI
c7Zu5prMQskEf/oINAJEZNbr8wad2txDnQFkVzWLA1okkBto/Viq3QSqiby+CwVi
OoHyrj6Kf+s4Qjbx1WoYhAIF8ruE8gTNfClzjyPis9fdqQM/mSdSAJrrwXJ6ffa6
noXTT6mFaI+dN1vW1L662S7iPuSnIHTfWAo8ur+Ero1hXHf9WwrdNZQDHFaZEuj8
vUDSsbTWFD2pqNhnur05Lcfdz+fONfkn8jexqj1XeLb6oTQS18R9qk98U+k=
-----END CERTIFICATE-----
Generated at Sat Aug 22 08:45:12 2026 by rpki-client