Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/78849b7f-165a-4e30-b65b-4f5c6e884579.roa
File:                     78849b7f-165a-4e30-b65b-4f5c6e884579.roa (raw, json)
Hash identifier:          6BuCXhsKCh81Ay6cTjLbiRZYjFvWOqdYpzU+zk0WgLE=
Subject key identifier:   9F:6E:C5:8A:AC:2F:EB:09:71:4C:9D:92:46:1C:47:BF:C9:C6:25:4E
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       2973286883C2A29017352FBD8D0CE40542363AC4
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/78849b7f-165a-4e30-b65b-4f5c6e884579.roa
Signing time:             Sat 01 Aug 2026 01:00:11 +0000
ROA not before:           Sat 01 Aug 2026 01:00:11 +0000
ROA not after:            Fri 30 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        144.220.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:73:28:68:83:c2:a2:90:17:35:2f:bd:8d:0c:e4:05:42:36:3a:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Aug  1 01:00:11 2026 GMT
            Not After : Oct 30 23:59:59 2026 GMT
        Subject: serialNumber=686d8e2330dcce3b9521107d6691f8d75fadf7de7bb841d0243031a656c85683, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:94:3f:ba:e7:30:e7:9c:0b:6e:f0:8d:31:9d:
                    1d:ab:e0:39:27:cc:94:99:3b:87:1f:00:c3:39:26:
                    4d:7e:8b:20:3e:64:4b:49:c7:c7:ad:89:52:0b:23:
                    c4:40:61:1b:88:3d:3c:8c:43:d0:12:c6:a8:26:66:
                    34:fd:31:c3:b5:55:78:5c:f4:e4:5a:84:85:16:63:
                    70:8b:b1:9e:39:be:05:a3:77:ea:0a:0c:e3:a9:de:
                    f8:26:65:0f:4a:36:ec:33:5c:8c:0e:5e:d3:47:98:
                    c2:16:2e:7c:a9:5b:9a:0c:bb:a1:9a:b3:26:50:f8:
                    89:18:9a:ad:57:1f:6f:4c:24:e3:d2:34:a0:45:14:
                    b6:45:d3:75:ee:7a:7b:a4:ca:7b:9a:e5:5e:d3:76:
                    ed:59:35:37:dc:64:cc:af:3c:8c:4f:38:bd:94:87:
                    15:c5:55:fd:e6:c4:6c:04:c6:b5:45:f8:64:5b:b0:
                    7d:64:a3:9f:5b:04:19:42:66:c2:78:27:6e:d7:2d:
                    e9:e4:df:bf:b3:89:97:7a:6e:fd:5c:c9:3a:b4:3e:
                    e9:fb:69:c4:18:52:5b:38:b7:17:8c:82:b4:36:78:
                    69:e4:5f:e0:d5:1d:7f:b4:ad:0d:4e:61:8f:a1:57:
                    4c:4b:3f:68:66:52:d1:54:d1:03:e6:82:38:c6:0a:
                    44:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:6E:C5:8A:AC:2F:EB:09:71:4C:9D:92:46:1C:47:BF:C9:C6:25:4E
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/78849b7f-165a-4e30-b65b-4f5c6e884579.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.220.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:8b:b4:5c:7d:d5:c5:fa:dd:84:77:90:d0:58:60:9b:69:7c:
         48:23:1e:b7:a9:d4:b2:27:08:f8:0f:60:c8:29:86:22:27:e5:
         57:2a:96:f1:13:ae:57:cc:49:e5:81:94:8a:2f:67:5c:dd:33:
         67:c8:cf:9a:2b:01:f7:e3:71:41:a3:6f:d2:3f:20:be:20:44:
         8d:3e:84:48:b0:ff:ee:14:17:6f:04:9b:14:85:33:1b:81:f5:
         18:e1:24:57:20:15:bb:db:09:a0:22:0a:ee:14:b5:27:e0:4a:
         6d:9c:d7:df:9b:36:45:8c:cb:d2:be:e0:e4:7a:05:6b:ce:dc:
         f1:09:07:2e:98:14:93:48:4e:ce:6a:6d:b5:6a:e2:1c:33:f7:
         91:9b:49:5b:1c:1f:41:f8:bc:a6:f2:bc:cd:db:49:42:03:f2:
         06:51:5d:2a:56:d1:c3:fd:9a:a4:dd:09:a1:ee:f0:39:5e:08:
         e1:f5:0d:b7:d6:45:e4:48:ba:10:c7:c7:c0:08:bb:0b:0b:05:
         b9:22:b4:39:a1:6d:b3:d4:c5:1c:97:d0:1e:8f:e3:58:bd:31:
         7a:de:3b:9c:fb:74:4a:a7:b6:d0:ba:a5:e6:83:94:46:29:1b:
         35:97:69:7c:0b:99:4b:e8:10:14:25:78:e9:6c:01:60:46:64:
         f9:df:53:9c
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUKXMoaIPCopAXNS+9jQzkBUI2OsQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwODAxMDEwMDExWhcNMjYxMDMwMjM1OTU5
WjB6MUkwRwYDVQQFE0A2ODZkOGUyMzMwZGNjZTNiOTUyMTEwN2Q2NjkxZjhkNzVm
YWRmN2RlN2JiODQxZDAyNDMwMzFhNjU2Yzg1NjgzMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC1lD+65zDnnAtu8I0xnR2r4DknzJSZO4cfAMM5Jk1+iyA+
ZEtJx8etiVILI8RAYRuIPTyMQ9ASxqgmZjT9McO1VXhc9ORahIUWY3CLsZ45vgWj
d+oKDOOp3vgmZQ9KNuwzXIwOXtNHmMIWLnypW5oMu6GasyZQ+IkYmq1XH29MJOPS
NKBFFLZF03Xuenukynua5V7Tdu1ZNTfcZMyvPIxPOL2UhxXFVf3mxGwExrVF+GRb
sH1ko59bBBlCZsJ4J27XLenk37+ziZd6bv1cyTq0Pun7acQYUls4txeMgrQ2eGnk
X+DVHX+0rQ1OYY+hV0xLP2hmUtFU0QPmgjjGCkQpAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUn27Fiqwv6wlxTJ2SRhxHv8nGJU4wHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzc4ODQ5YjdmLTE2NWEtNGUzMC1iNjViLTRmNWM2ZTg4NDU3OS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBACQ3CQwDQYJKoZIhvcNAQELBQADggEBAI+LtFx91cX63YR3kNBYYJtpfEgj
Hrep1LInCPgPYMgphiIn5VcqlvETrlfMSeWBlIovZ1zdM2fIz5orAffjcUGjb9I/
IL4gRI0+hEiw/+4UF28EmxSFMxuB9RjhJFcgFbvbCaAiCu4UtSfgSm2c19+bNkWM
y9K+4OR6BWvO3PEJBy6YFJNITs5qbbVq4hwz95GbSVscH0H4vKbyvM3bSUID8gZR
XSpW0cP9mqTdCaHu8DleCOH1DbfWReRIuhDHx8AIuwsLBbkitDmhbbPUxRyX0B6P
41i9MXreO5z7dEqnttC6peaDlEYpGzWXaXwLmUvoEBQleOlsAWBGZPnfU5w=
-----END CERTIFICATE-----
Generated at Sat Aug 22 08:42:19 2026 by rpki-client