Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1aa1ce22-611e-497d-b5a2-a85a34928e7b.roa
File:                     1aa1ce22-611e-497d-b5a2-a85a34928e7b.roa (raw, json)
Hash identifier:          kyg+Hukb8/E8Ak3kBMqu8XCh8ivd+3/DaUabKPXy8b8=
Subject key identifier:   CE:02:F1:9F:16:19:6D:4D:CB:50:93:1E:75:74:6A:C3:93:93:5D:4A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       071071EF8A932B88D3E42C55DFDCE7FEACA695E8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1aa1ce22-611e-497d-b5a2-a85a34928e7b.roa
Signing time:             Sat 14 Feb 2026 00:30:15 +0000
ROA not before:           Sat 14 Feb 2026 00:30:15 +0000
ROA not after:            Fri 15 May 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        56.97.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:10:71:ef:8a:93:2b:88:d3:e4:2c:55:df:dc:e7:fe:ac:a6:95:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 14 00:30:15 2026 GMT
            Not After : May 15 23:59:59 2026 GMT
        Subject: serialNumber=7421a637a6d777a78f8fdea2b46dd906e6e706b8d86dd0c7c036d113d1c45a0e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:53:fa:71:18:74:d7:7b:50:94:08:63:95:e7:
                    1d:69:b1:81:ad:c3:03:75:72:01:a2:10:d4:58:5a:
                    da:c5:5b:b4:b0:ec:1d:d4:a5:b9:25:c4:2d:68:d1:
                    b1:53:47:4b:ff:40:6c:3f:55:68:e6:cc:ff:72:1d:
                    fa:cf:cf:db:d7:50:c0:9b:df:db:0c:99:73:10:df:
                    bc:b8:b8:cb:b5:66:81:51:da:dd:6c:f2:0e:a6:6f:
                    cc:68:4d:38:46:3c:16:5b:ef:68:0f:71:40:ab:97:
                    e8:17:dc:04:d1:1b:a2:4a:63:eb:ee:43:4e:d2:15:
                    7d:d9:c3:2e:74:d1:5a:92:09:0a:c4:02:d5:62:a1:
                    14:92:31:7c:4b:99:2e:fc:35:de:55:56:55:ed:0e:
                    87:bd:b3:68:ed:07:66:dc:b0:f1:8b:c4:e3:00:91:
                    cf:5e:e8:16:02:e3:a8:ac:46:cc:30:df:bd:b2:e5:
                    eb:ac:b1:c8:96:6d:e6:ae:cc:91:4b:3a:ce:0c:d6:
                    0a:f8:48:3e:45:6e:8b:33:3f:64:eb:bb:a4:33:ca:
                    d4:fe:c0:9f:76:10:84:dd:30:d8:63:4d:e3:38:35:
                    c1:a6:63:7f:08:79:75:60:26:83:2f:6c:ad:12:60:
                    bb:43:4c:97:2a:c0:f4:1d:77:8f:1f:39:e9:77:90:
                    7d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:02:F1:9F:16:19:6D:4D:CB:50:93:1E:75:74:6A:C3:93:93:5D:4A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1aa1ce22-611e-497d-b5a2-a85a34928e7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.97.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         54:91:07:fb:2c:78:dd:3a:12:0a:76:cd:e8:14:b9:22:93:8f:
         a3:86:69:ec:93:7d:55:f7:96:3f:cb:33:45:eb:57:80:40:64:
         ad:d9:c2:84:14:aa:c5:26:d4:86:e4:ed:06:a8:2e:ec:9b:44:
         2a:32:1c:d7:90:60:99:be:31:a4:2a:62:5d:0f:0a:fc:e8:09:
         50:c6:c6:0b:c7:7e:02:ce:c9:37:bf:f6:38:25:e8:38:37:6e:
         7f:71:99:23:bb:60:11:08:3b:a2:1d:d6:8a:7e:ed:d9:54:5c:
         cb:f3:a6:62:57:8f:ba:08:47:d4:0c:04:fe:68:6b:28:2f:6d:
         2d:8f:2b:c0:50:ce:97:a4:56:7a:8d:18:36:82:ee:c1:37:3f:
         84:3c:a4:87:32:34:68:cf:60:3e:8d:3e:d8:5d:22:7a:45:4c:
         d7:4a:96:0e:80:3e:56:0f:b2:44:54:ae:4f:b6:0a:70:f2:05:
         0e:7b:0b:24:2d:e2:15:84:86:c5:16:cb:7b:b4:97:c6:86:08:
         06:d8:6a:ec:8f:58:cb:6e:8d:aa:16:83:3e:d8:6c:2f:73:9f:
         34:09:a4:c0:ce:35:0f:b2:5a:37:0e:67:e7:26:f2:d5:80:c1:
         9d:ac:59:a2:ec:5c:38:65:fd:11:2e:b3:db:ce:1b:f6:fb:96:
         d8:3b:36:03
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUBxBx74qTK4jT5CxV39zn/qymlegwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjE0MDAzMDE1WhcNMjYwNTE1MjM1OTU5
WjB6MUkwRwYDVQQFE0A3NDIxYTYzN2E2ZDc3N2E3OGY4ZmRlYTJiNDZkZDkwNmU2
ZTcwNmI4ZDg2ZGQwYzdjMDM2ZDExM2QxYzQ1YTBlMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC6U/pxGHTXe1CUCGOV5x1psYGtwwN1cgGiENRYWtrFW7Sw
7B3UpbklxC1o0bFTR0v/QGw/VWjmzP9yHfrPz9vXUMCb39sMmXMQ37y4uMu1ZoFR
2t1s8g6mb8xoTThGPBZb72gPcUCrl+gX3ATRG6JKY+vuQ07SFX3Zwy500VqSCQrE
AtVioRSSMXxLmS78Nd5VVlXtDoe9s2jtB2bcsPGLxOMAkc9e6BYC46isRsww372y
5eussciWbeauzJFLOs4M1gr4SD5FboszP2Tru6QzytT+wJ92EITdMNhjTeM4NcGm
Y38IeXVgJoMvbK0SYLtDTJcqwPQdd48fOel3kH1LAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUzgLxnxYZbU3LUJMedXRqw5OTXUowHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzFhYTFjZTIyLTYxMWUtNDk3ZC1iNWEyLWE4NWEzNDkyOGU3Yi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA4YTANBgkqhkiG9w0BAQsFAAOCAQEAVJEH+yx43ToSCnbN6BS5IpOPo4Zp
7JN9VfeWP8szRetXgEBkrdnChBSqxSbUhuTtBqgu7JtEKjIc15Bgmb4xpCpiXQ8K
/OgJUMbGC8d+As7JN7/2OCXoODduf3GZI7tgEQg7oh3Win7t2VRcy/OmYlePughH
1AwE/mhrKC9tLY8rwFDOl6RWeo0YNoLuwTc/hDykhzI0aM9gPo0+2F0iekVM10qW
DoA+Vg+yRFSuT7YKcPIFDnsLJC3iFYSGxRbLe7SXxoYIBthq7I9Yy26NqhaDPths
L3OfNAmkwM41D7JaNw5n5yby1YDBnaxZouxcOGX9ES6z284b9vuW2Ds2Aw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:22:43 2026 by rpki-client