Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/962a97b8-aceb-40a5-bf34-ae02e5895d46.roa
File:                     962a97b8-aceb-40a5-bf34-ae02e5895d46.roa (raw, json)
Hash identifier:          16t0uv/QND2XkM/IJ91Szifrp6/Ex8KXupH0xyoxuyI=
Subject key identifier:   56:41:6D:20:B6:86:E9:43:AE:59:4A:DF:9B:6F:7E:61:7D:28:87:56
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       3225295938ECAE4760947010DEB1E8DD6C31B75E
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/962a97b8-aceb-40a5-bf34-ae02e5895d46.roa
Signing time:             Mon 27 Jul 2026 02:21:02 +0000
ROA not before:           Mon 27 Jul 2026 02:21:02 +0000
ROA not after:            Sun 25 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        3.248.0.0/13 maxlen: 13
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:25:29:59:38:ec:ae:47:60:94:70:10:de:b1:e8:dd:6c:31:b7:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jul 27 02:21:02 2026 GMT
            Not After : Oct 25 23:59:59 2026 GMT
        Subject: serialNumber=06ac2f4813fbeba1086acb650a0250b2bcb2b6bc340af6b123d475845e7ccec5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ce:2a:f5:a5:ec:53:01:93:5f:15:24:e9:b7:
                    1e:04:0d:db:8e:30:4f:b7:40:08:e1:58:51:f4:25:
                    54:2e:d9:e0:ef:ad:a9:bf:99:7f:9e:dc:dd:80:75:
                    bc:f5:3f:48:66:e2:89:7b:e1:aa:3a:28:b4:52:fc:
                    aa:af:e6:91:79:71:69:64:59:91:60:fa:b2:2e:52:
                    d1:26:86:d9:c9:6d:4d:9d:4d:87:4d:8a:c2:ae:fb:
                    26:5a:b2:37:56:3c:27:65:8d:16:38:db:6a:f5:01:
                    fc:8a:c4:a4:e5:1c:30:2d:e1:7b:cb:26:31:0b:0e:
                    02:35:2c:b2:44:21:7a:8f:1b:2c:b1:3e:73:ec:70:
                    43:3f:fa:13:fe:37:e3:74:b6:ed:a8:ce:8f:b4:b9:
                    a6:df:f0:1e:24:2e:2a:4e:d9:a2:03:d4:69:3a:50:
                    c4:d4:72:df:fd:1f:59:26:8d:84:cb:10:31:51:5a:
                    5e:4d:30:8f:70:3b:6d:19:06:ea:29:91:80:21:d3:
                    2a:61:fb:a5:7c:e0:ff:04:11:cc:94:4f:a1:7d:db:
                    f4:87:10:c1:43:72:86:51:d8:f1:f7:90:2d:41:aa:
                    25:32:15:e9:11:a8:ff:3b:03:d1:1c:3b:a6:16:0b:
                    b9:94:22:07:9e:b7:ea:dc:54:e4:56:9b:f1:85:2c:
                    1f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:41:6D:20:B6:86:E9:43:AE:59:4A:DF:9B:6F:7E:61:7D:28:87:56
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/962a97b8-aceb-40a5-bf34-ae02e5895d46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.248.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         95:ff:93:eb:82:b4:b5:82:c3:10:86:c7:9f:2d:e6:09:5e:a2:
         5a:11:3f:53:7e:72:84:ab:1b:a8:f1:c0:f5:4c:97:5e:7d:cc:
         6a:bc:3d:c2:aa:15:67:4a:39:fd:b7:68:85:9c:3f:32:e2:ae:
         28:b3:93:51:8f:22:46:f2:41:2c:2e:2a:d0:40:4e:0d:20:cd:
         fe:92:e0:7d:1f:a3:50:ad:bb:af:35:bd:cc:0e:5d:32:64:bd:
         47:99:bb:e1:c9:47:4b:8f:11:d7:23:94:c0:f0:bb:64:69:5b:
         ba:76:1b:ac:b2:b8:cd:4d:99:2a:96:9b:6b:a8:ee:46:5b:01:
         ef:8e:de:62:70:a9:7e:a6:a0:30:9e:ba:90:a6:2c:a8:b3:ba:
         b4:d7:ab:9a:10:18:63:9f:48:51:78:ac:31:b3:36:11:e7:41:
         3c:c5:6f:d1:49:b1:f6:b5:95:4c:8c:4b:db:13:02:bb:3b:32:
         de:b4:b2:85:8f:18:ef:09:90:06:d4:06:0d:a8:69:36:53:56:
         eb:c9:bf:08:55:ec:6a:4e:f2:f4:53:4a:32:e8:7c:fa:46:e2:
         ba:61:70:2e:85:05:7c:80:b4:cd:1c:1c:bd:8a:e3:82:12:8c:
         b1:c6:6d:8f:c2:d6:7a:3e:ac:a0:66:d8:00:49:91:c0:3f:37:
         5d:ca:82:e3
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUMiUpWTjsrkdglHAQ3rHo3Wwxt14wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNzI3MDIyMTAyWhcNMjYxMDI1MjM1OTU5
WjB6MUkwRwYDVQQFE0AwNmFjMmY0ODEzZmJlYmExMDg2YWNiNjUwYTAyNTBiMmJj
YjJiNmJjMzQwYWY2YjEyM2Q0NzU4NDVlN2NjZWM1MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCtzir1pexTAZNfFSTptx4EDduOME+3QAjhWFH0JVQu2eDv
ram/mX+e3N2Adbz1P0hm4ol74ao6KLRS/Kqv5pF5cWlkWZFg+rIuUtEmhtnJbU2d
TYdNisKu+yZasjdWPCdljRY422r1AfyKxKTlHDAt4XvLJjELDgI1LLJEIXqPGyyx
PnPscEM/+hP+N+N0tu2ozo+0uabf8B4kLipO2aID1Gk6UMTUct/9H1kmjYTLEDFR
Wl5NMI9wO20ZBuopkYAh0yph+6V84P8EEcyUT6F92/SHEMFDcoZR2PH3kC1BqiUy
FekRqP87A9EcO6YWC7mUIgeet+rcVORWm/GFLB8TAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUVkFtILaG6UOuWUrfm29+YX0oh1YwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzk2MmE5N2I4LWFjZWItNDBhNS1iZjM0LWFlMDJlNTg5NWQ0Ni5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwMD+DANBgkqhkiG9w0BAQsFAAOCAQEAlf+T64K0tYLDEIbHny3mCV6iWhE/
U35yhKsbqPHA9UyXXn3Marw9wqoVZ0o5/bdohZw/MuKuKLOTUY8iRvJBLC4q0EBO
DSDN/pLgfR+jUK27rzW9zA5dMmS9R5m74clHS48R1yOUwPC7ZGlbunYbrLK4zU2Z
Kpaba6juRlsB747eYnCpfqagMJ66kKYsqLO6tNermhAYY59IUXisMbM2EedBPMVv
0Umx9rWVTIxL2xMCuzsy3rSyhY8Y7wmQBtQGDahpNlNW68m/CFXsak7y9FNKMuh8
+kbiumFwLoUFfIC0zRwcvYrjghKMscZtj8LWej6soGbYAEmRwD83XcqC4w==
-----END CERTIFICATE-----
Generated at Sat Aug 22 07:41:04 2026 by rpki-client