Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b095ba23-4f90-4fe2-9413-e7d439cef9a8.roa
File:                     b095ba23-4f90-4fe2-9413-e7d439cef9a8.roa (raw, json)
Hash identifier:          PCGIkD2+deUu7gIqhfmHOyjrhwd/ryP6g1EI35fSo9A=
Subject key identifier:   8C:9B:65:64:3E:36:30:10:E7:55:0B:0B:5E:EB:AB:52:E6:03:89:C3
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       235580C8AAE1FCE648E37A8F842B7FE497912DEE
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b095ba23-4f90-4fe2-9413-e7d439cef9a8.roa
Signing time:             Fri 07 Aug 2026 02:20:57 +0000
ROA not before:           Fri 07 Aug 2026 02:20:57 +0000
ROA not after:            Thu 05 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        136.20.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:55:80:c8:aa:e1:fc:e6:48:e3:7a:8f:84:2b:7f:e4:97:91:2d:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Aug  7 02:20:57 2026 GMT
            Not After : Nov  5 23:59:59 2026 GMT
        Subject: serialNumber=1e31466f4ff94d8139811fb2e293e368e316406d67485705e4d77690aff563c2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:0b:62:63:6e:61:ce:b3:db:5f:ad:ff:2e:d5:
                    7a:f2:5d:54:50:e0:0a:cf:b2:54:05:7e:4b:e7:ae:
                    c4:63:f0:fe:da:06:02:c9:a0:e1:9b:8a:45:b1:bd:
                    6d:8e:b3:43:4c:ce:95:16:72:d8:72:dc:8a:61:9b:
                    3b:3c:59:36:1b:79:16:66:68:06:52:a2:af:70:ac:
                    1e:c5:30:2f:64:c3:53:81:3d:b5:d3:82:ce:d7:2c:
                    13:06:b8:d2:2b:de:7d:77:2e:dc:dc:07:36:4c:3f:
                    cf:55:bb:cd:f1:5d:6b:06:79:e2:83:02:54:07:ec:
                    a3:69:4a:83:36:74:2d:f4:84:c0:91:a8:9b:0e:1d:
                    c5:25:53:7d:6a:10:07:f4:13:6e:3f:98:33:71:e1:
                    a8:7e:32:95:cb:78:1c:39:ae:6f:ed:12:fa:0a:94:
                    42:cc:62:35:3a:00:f4:2a:82:c8:b1:55:80:d6:7f:
                    18:18:af:c2:a8:4c:f0:d6:cb:15:53:33:85:59:e0:
                    4a:63:52:79:1e:59:29:81:4b:ca:34:75:d5:0e:b6:
                    d6:a2:be:ff:30:84:0c:06:2a:15:3d:23:0b:fa:67:
                    2d:bd:97:d9:82:a1:dc:b1:3c:c5:f5:54:85:fb:dc:
                    6e:2a:f9:b7:f2:62:e2:1e:d1:02:bc:79:ec:20:36:
                    6f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:9B:65:64:3E:36:30:10:E7:55:0B:0B:5E:EB:AB:52:E6:03:89:C3
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b095ba23-4f90-4fe2-9413-e7d439cef9a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.20.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         72:b3:52:3b:86:69:02:aa:9b:00:23:a0:5c:eb:2f:0c:10:0a:
         11:62:26:d7:24:1d:19:2f:a6:4d:ac:f1:aa:1b:54:b2:d1:05:
         2e:cc:a7:ad:7e:2e:05:b2:c7:0c:25:68:ae:7d:59:e5:b0:e8:
         50:d6:aa:7c:99:5b:bb:3a:03:31:c5:bf:ff:f6:13:c8:18:33:
         10:b7:dd:86:b2:cb:c6:e5:9c:db:29:a4:cc:57:45:63:ff:0c:
         a1:c3:fa:20:c5:3c:05:78:86:56:45:3b:48:06:1e:28:ea:9c:
         d6:44:d8:74:b9:9c:cf:f5:5d:99:87:75:87:c2:1d:0e:3b:ac:
         13:f7:b2:29:13:5e:d8:48:13:85:fe:d0:08:ff:a1:fb:2a:8c:
         fd:3c:fc:01:61:b4:70:fa:da:a0:27:2a:1d:72:0b:e3:5f:de:
         5d:19:c5:37:98:61:96:4f:a1:3e:97:5c:8e:fb:09:40:e6:7b:
         e3:5a:ef:e2:8a:07:3a:99:e2:c0:87:37:f5:f2:06:7c:8f:32:
         dc:9d:0b:3b:22:2f:cc:fe:ef:c3:f6:b3:51:94:2d:da:a6:8f:
         bf:d4:22:32:59:9d:1f:74:7a:1d:ca:f4:29:bb:2c:1a:6d:07:
         f1:e0:a2:d1:d1:85:e7:dc:78:1f:9a:7e:fe:49:30:08:bb:37:
         48:19:ec:35
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUI1WAyKrh/OZI43qPhCt/5JeRLe4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwODA3MDIyMDU3WhcNMjYxMTA1MjM1OTU5
WjB6MUkwRwYDVQQFE0AxZTMxNDY2ZjRmZjk0ZDgxMzk4MTFmYjJlMjkzZTM2OGUz
MTY0MDZkNjc0ODU3MDVlNGQ3NzY5MGFmZjU2M2MyMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDcC2JjbmHOs9tfrf8u1XryXVRQ4ArPslQFfkvnrsRj8P7a
BgLJoOGbikWxvW2Os0NMzpUWcthy3Iphmzs8WTYbeRZmaAZSoq9wrB7FMC9kw1OB
PbXTgs7XLBMGuNIr3n13LtzcBzZMP89Vu83xXWsGeeKDAlQH7KNpSoM2dC30hMCR
qJsOHcUlU31qEAf0E24/mDNx4ah+MpXLeBw5rm/tEvoKlELMYjU6APQqgsixVYDW
fxgYr8KoTPDWyxVTM4VZ4EpjUnkeWSmBS8o0ddUOttaivv8whAwGKhU9Iwv6Zy29
l9mCodyxPMX1VIX73G4q+bfyYuIe0QK8eewgNm9ZAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUjJtlZD42MBDnVQsLXuurUuYDicMwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2IwOTViYTIzLTRmOTAtNGZlMi05NDEzLWU3ZDQzOWNlZjlhOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwGIFDANBgkqhkiG9w0BAQsFAAOCAQEAcrNSO4ZpAqqbACOgXOsvDBAKEWIm
1yQdGS+mTazxqhtUstEFLsynrX4uBbLHDCVorn1Z5bDoUNaqfJlbuzoDMcW///YT
yBgzELfdhrLLxuWc2ymkzFdFY/8MocP6IMU8BXiGVkU7SAYeKOqc1kTYdLmcz/Vd
mYd1h8IdDjusE/eyKRNe2EgThf7QCP+h+yqM/Tz8AWG0cPraoCcqHXIL41/eXRnF
N5hhlk+hPpdcjvsJQOZ741rv4ooHOpniwIc39fIGfI8y3J0LOyIvzP7vw/azUZQt
2qaPv9QiMlmdH3R6Hcr0KbssGm0H8eCi0dGF59x4H5p+/kkwCLs3SBnsNQ==
-----END CERTIFICATE-----
Generated at Sat Sep 19 12:09:39 2026 by rpki-client