Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/15928b78-d58e-4f3e-9b74-ccd32f84228f.roa
File:                     15928b78-d58e-4f3e-9b74-ccd32f84228f.roa (raw, json)
Hash identifier:          vWi5U9XtMZFLVtxuW1bQDu0Jdl+C6ujpoEj6aXr3PqA=
Subject key identifier:   2E:7C:8C:72:AA:5E:61:00:52:9F:82:54:94:7F:9D:47:BB:18:51:1E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       57D6C9CCB07FAC0DF49E89D82A5E2DC01623F064
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/15928b78-d58e-4f3e-9b74-ccd32f84228f.roa
Signing time:             Fri 30 Oct 2026 00:03:27 +0000
ROA not before:           Fri 30 Oct 2026 00:03:27 +0000
ROA not after:            Thu 28 Jan 2027 23:59:59 +0000
asID:                     14618
IP address blocks:        32.200.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:d6:c9:cc:b0:7f:ac:0d:f4:9e:89:d8:2a:5e:2d:c0:16:23:f0:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 30 00:03:27 2026 GMT
            Not After : Jan 28 23:59:59 2027 GMT
        Subject: serialNumber=95df0d62f562af38fce9223a01c51436f5e0761f635acc3c4d9c8c10db045f43, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f7:1b:77:4f:3e:1b:f2:5a:b7:a8:c4:2a:22:
                    0b:cb:3c:13:bf:1d:f0:50:67:57:e9:65:0c:48:e3:
                    83:1e:43:c7:0f:b0:3c:72:b8:86:44:97:8e:c7:73:
                    31:ce:81:30:f1:5f:04:46:5f:c0:58:d7:e3:78:c0:
                    97:63:73:5e:d2:e4:38:4f:94:7a:87:72:03:d1:96:
                    0a:fc:f2:9e:0f:db:ad:82:ff:c7:dc:b7:1b:fd:08:
                    a2:b6:3e:0e:57:30:9c:80:bc:13:2b:d9:9b:cb:75:
                    02:d1:68:1a:65:6b:8f:04:14:94:23:ea:07:6b:8a:
                    8e:19:30:7f:4f:70:52:b8:49:03:ba:f3:7b:88:c4:
                    27:53:b4:8d:1b:c1:c3:8a:78:c3:d7:6b:98:0b:ee:
                    02:37:9d:cd:04:00:86:81:c7:1f:f8:36:ba:50:77:
                    d3:06:d8:b5:45:73:6d:ea:53:5f:5b:7c:4b:2d:1c:
                    f0:2b:95:ee:6d:8d:aa:cc:26:54:d3:f4:cc:0b:97:
                    a6:57:d4:a9:4b:7c:4f:cc:6f:94:4b:13:2f:91:be:
                    85:ef:5b:6d:2a:ea:85:6b:d5:c6:52:8d:50:26:01:
                    d2:91:80:d5:83:37:7b:a6:72:af:ca:4a:a9:69:af:
                    74:76:0c:7e:10:d5:4e:79:72:fc:64:3d:6c:a9:0a:
                    f0:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:7C:8C:72:AA:5E:61:00:52:9F:82:54:94:7F:9D:47:BB:18:51:1E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/15928b78-d58e-4f3e-9b74-ccd32f84228f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  32.200.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         54:91:8a:6b:cb:4b:e4:42:b1:d3:ec:b1:f8:28:4f:fd:ef:79:
         d0:e2:bd:c4:dc:56:7c:c0:30:3d:16:95:9f:a4:06:45:7d:be:
         23:1c:48:8b:b1:f7:4f:fd:d5:65:cf:70:c9:4e:d3:d2:d5:04:
         71:db:5e:5b:4c:ff:66:20:e9:98:37:0f:ee:2d:44:9f:0e:f4:
         13:e7:96:2f:fb:2a:3a:42:1e:d4:61:d8:0a:dc:25:8c:04:56:
         32:56:7f:ca:93:d3:e9:5e:cb:91:4d:da:d6:95:2f:5b:39:90:
         c6:d8:ac:5f:25:f8:17:19:44:8b:a8:01:1b:11:3d:2a:4d:30:
         8e:73:a3:a8:89:11:ba:5b:12:d9:09:66:09:f3:81:fe:64:90:
         63:d2:53:9a:bf:ef:31:87:24:a3:d3:8e:fc:e2:ff:f8:bc:a1:
         23:61:33:0d:d9:76:1a:7e:3c:bd:f0:5c:17:6e:96:83:51:2d:
         34:ec:a1:1e:ce:26:28:af:4e:12:42:79:31:7e:e6:37:6a:c7:
         87:4b:a9:56:10:06:6e:39:a8:36:c6:f3:a3:99:6d:95:e6:76:
         c7:10:96:02:5c:26:eb:03:59:ac:83:5f:c8:f8:4f:4b:a9:4c:
         08:a9:10:7a:d9:3a:92:8f:16:25:a5:b7:f4:35:4e:49:7d:0e:
         31:0e:bc:4a
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUV9bJzLB/rA30nonYKl4twBYj8GQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDMwMDAwMzI3WhcNMjcwMTI4MjM1OTU5
WjB6MUkwRwYDVQQFE0A5NWRmMGQ2MmY1NjJhZjM4ZmNlOTIyM2EwMWM1MTQzNmY1
ZTA3NjFmNjM1YWNjM2M0ZDljOGMxMGRiMDQ1ZjQzMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDP9xt3Tz4b8lq3qMQqIgvLPBO/HfBQZ1fpZQxI44MeQ8cP
sDxyuIZEl47HczHOgTDxXwRGX8BY1+N4wJdjc17S5DhPlHqHcgPRlgr88p4P262C
/8fctxv9CKK2Pg5XMJyAvBMr2ZvLdQLRaBpla48EFJQj6gdrio4ZMH9PcFK4SQO6
83uIxCdTtI0bwcOKeMPXa5gL7gI3nc0EAIaBxx/4NrpQd9MG2LVFc23qU19bfEst
HPArle5tjarMJlTT9MwLl6ZX1KlLfE/Mb5RLEy+RvoXvW20q6oVr1cZSjVAmAdKR
gNWDN3umcq/KSqlpr3R2DH4Q1U55cvxkPWypCvDnAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQULnyMcqpeYQBSn4JUlH+dR7sYUR4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzE1OTI4Yjc4LWQ1OGUtNGYzZS05Yjc0LWNjZDMyZjg0MjI4Zi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwIgyDANBgkqhkiG9w0BAQsFAAOCAQEAVJGKa8tL5EKx0+yx+ChP/e950OK9
xNxWfMAwPRaVn6QGRX2+IxxIi7H3T/3VZc9wyU7T0tUEcdteW0z/ZiDpmDcP7i1E
nw70E+eWL/sqOkIe1GHYCtwljARWMlZ/ypPT6V7LkU3a1pUvWzmQxtisXyX4FxlE
i6gBGxE9Kk0wjnOjqIkRulsS2QlmCfOB/mSQY9JTmr/vMYcko9OO/OL/+LyhI2Ez
Ddl2Gn48vfBcF26Wg1EtNOyhHs4mKK9OEkJ5MX7mN2rHh0upVhAGbjmoNsbzo5lt
leZ2xxCWAlwm6wNZrINfyPhPS6lMCKkQetk6ko8WJaW39DVOSX0OMQ68Sg==
-----END CERTIFICATE-----
Generated at Thu Nov 5 07:18:58 2026 by rpki-client