Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/14a5a826-4e23-42a8-bf85-ad094f67717e.roa
File:                     14a5a826-4e23-42a8-bf85-ad094f67717e.roa (raw, json)
Hash identifier:          AkwbeBiN5mYM3MP4HBjC26vumXW2gXB1QC+NtJckkdM=
Subject key identifier:   0D:03:BF:18:27:53:7C:EF:08:18:47:1D:F3:F4:91:7E:F2:9F:36:8D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4543577117CDD8559E37C5536B5E5B95A308B92E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/14a5a826-4e23-42a8-bf85-ad094f67717e.roa
Signing time:             Sat 25 Jul 2026 00:20:07 +0000
ROA not before:           Sat 25 Jul 2026 00:20:07 +0000
ROA not after:            Fri 23 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        99.151.112.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:43:57:71:17:cd:d8:55:9e:37:c5:53:6b:5e:5b:95:a3:08:b9:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 25 00:20:07 2026 GMT
            Not After : Oct 23 23:59:59 2026 GMT
        Subject: serialNumber=9e8ebd4cc41a5ee32dafd8bdcc3b2110ba629488d933852c67740e2a16c61474, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9d:4e:5e:86:e2:48:55:c4:a2:1b:51:ae:33:
                    18:47:00:7e:60:9b:5d:1f:ff:46:11:2c:3a:05:09:
                    cb:fe:ee:76:45:61:cb:69:e8:92:3f:a1:a6:f4:94:
                    e3:22:2a:93:cd:c7:db:6d:65:1a:0e:be:91:37:6d:
                    33:d3:d1:65:83:36:45:25:32:37:7b:3e:dc:8f:14:
                    ce:da:a0:d7:54:ff:c0:7f:fc:28:06:04:1a:41:bb:
                    b1:f1:d0:56:9c:5d:21:4c:24:21:6d:2f:82:76:d3:
                    07:57:19:58:ed:bb:a4:8e:72:78:76:20:f6:d6:9f:
                    47:e1:e4:4a:74:b3:5c:a8:84:18:38:d8:7f:02:45:
                    88:02:77:d7:14:9c:16:7a:4b:b6:ff:b6:90:ee:fb:
                    16:bd:87:80:8a:74:12:98:61:18:b4:45:7d:f5:2b:
                    cd:1a:13:5e:66:21:70:d9:09:5f:89:59:be:2c:26:
                    f1:3f:0d:63:6a:b2:8e:ac:55:a6:5e:c9:ba:f8:19:
                    59:3b:3e:5d:63:45:2d:e5:33:be:58:f3:a1:d5:ee:
                    79:02:fc:d9:bb:f4:75:2d:16:8e:15:09:80:cf:8b:
                    11:4d:21:83:ff:3d:cb:73:c6:ce:8d:96:53:d0:c3:
                    b4:02:a5:3b:c0:e8:40:dd:89:b1:ba:c2:aa:f7:32:
                    16:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:03:BF:18:27:53:7C:EF:08:18:47:1D:F3:F4:91:7E:F2:9F:36:8D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/14a5a826-4e23-42a8-bf85-ad094f67717e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.151.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c5:a7:81:78:bf:a2:5f:47:82:c6:29:85:c8:92:9b:45:4d:c6:
         da:aa:21:61:54:a9:b4:98:76:5f:52:3a:09:db:78:43:ee:e1:
         d0:cc:f2:87:35:b0:55:72:1d:74:4c:e9:f3:49:6a:78:bb:34:
         f0:4d:81:5c:0b:8d:e0:d4:14:a0:a6:3c:b3:58:0e:23:2f:11:
         28:29:14:d5:e6:91:ac:9d:ce:7a:14:f8:92:39:ef:4e:02:9f:
         d5:8b:f4:75:56:a2:23:2c:6b:81:d4:38:cf:1a:eb:41:fe:97:
         c4:fa:de:63:be:50:71:15:56:16:a9:4b:00:ae:0d:b9:15:25:
         1c:6e:3b:95:a6:b1:db:e2:8d:0e:c8:61:37:f7:29:ee:4f:90:
         ec:23:a7:66:d9:dd:23:56:2c:a0:e3:bf:09:65:1b:6c:69:d5:
         dd:e7:0d:72:a9:10:d2:20:b9:89:3f:62:a1:89:3a:22:b9:e3:
         51:a1:76:5a:2b:b9:13:b3:f1:4f:7d:06:4b:2b:06:3e:75:25:
         72:44:30:ac:6c:b1:49:5f:7f:77:82:38:2d:c7:97:07:d6:48:
         a0:c3:76:cf:e0:32:a3:59:c2:4c:a3:c3:0c:5b:50:96:ae:fa:
         a5:a2:d3:79:eb:ce:a7:b4:a2:51:50:d4:1f:b8:af:83:a3:8e:
         3b:2a:59:29
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIURUNXcRfN2FWeN8VTa15blaMIuS4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzI1MDAyMDA3WhcNMjYxMDIzMjM1OTU5
WjB6MUkwRwYDVQQFE0A5ZThlYmQ0Y2M0MWE1ZWUzMmRhZmQ4YmRjYzNiMjExMGJh
NjI5NDg4ZDkzMzg1MmM2Nzc0MGUyYTE2YzYxNDc0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCsnU5ehuJIVcSiG1GuMxhHAH5gm10f/0YRLDoFCcv+7nZF
Yctp6JI/oab0lOMiKpPNx9ttZRoOvpE3bTPT0WWDNkUlMjd7PtyPFM7aoNdU/8B/
/CgGBBpBu7Hx0FacXSFMJCFtL4J20wdXGVjtu6SOcnh2IPbWn0fh5Ep0s1yohBg4
2H8CRYgCd9cUnBZ6S7b/tpDu+xa9h4CKdBKYYRi0RX31K80aE15mIXDZCV+JWb4s
JvE/DWNqso6sVaZeybr4GVk7Pl1jRS3lM75Y86HV7nkC/Nm79HUtFo4VCYDPixFN
IYP/Pctzxs6NllPQw7QCpTvA6EDdibG6wqr3MhbvAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUDQO/GCdTfO8IGEcd8/SRfvKfNo0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzE0YTVhODI2LTRlMjMtNDJhOC1iZjg1LWFkMDk0ZjY3NzE3ZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAFjl3AwDQYJKoZIhvcNAQELBQADggEBAMWngXi/ol9HgsYphciSm0VNxtqq
IWFUqbSYdl9SOgnbeEPu4dDM8oc1sFVyHXRM6fNJani7NPBNgVwLjeDUFKCmPLNY
DiMvESgpFNXmkaydznoU+JI5704Cn9WL9HVWoiMsa4HUOM8a60H+l8T63mO+UHEV
VhapSwCuDbkVJRxuO5WmsdvijQ7IYTf3Ke5PkOwjp2bZ3SNWLKDjvwllG2xp1d3n
DXKpENIguYk/YqGJOiK541GhdloruROz8U99BksrBj51JXJEMKxssUlff3eCOC3H
lwfWSKDDds/gMqNZwkyjwwxbUJau+qWi03nrzqe0olFQ1B+4r4OjjjsqWSk=
-----END CERTIFICATE-----
Generated at Tue Jul 28 14:50:39 2026 by rpki-client