Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1fb13753-cdf2-4e81-bc92-fc32aac769a1.roa
File:                     1fb13753-cdf2-4e81-bc92-fc32aac769a1.roa (raw, json)
Hash identifier:          on2xWn+rrVPM48NZbUFXj2yeJ8BXm98poi0CCnVXebs=
Subject key identifier:   BD:5B:C8:D3:78:2C:EA:E6:F6:0F:C4:25:03:7D:69:6D:9A:E2:48:41
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2C81B82A5C119390E35FECEE6647B9BBB9EC4895
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1fb13753-cdf2-4e81-bc92-fc32aac769a1.roa
Signing time:             Fri 15 May 2026 01:20:06 +0000
ROA not before:           Fri 15 May 2026 01:20:06 +0000
ROA not after:            Thu 13 Aug 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        13.194.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:81:b8:2a:5c:11:93:90:e3:5f:ec:ee:66:47:b9:bb:b9:ec:48:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 15 01:20:06 2026 GMT
            Not After : Aug 13 23:59:59 2026 GMT
        Subject: serialNumber=d75b021123f3f06a5c50268431c22bbf2d0a396f9aa9b2862306c684d0d13f49, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:51:cc:89:17:28:2e:f8:ca:c3:b2:15:7a:db:
                    c6:0a:e4:c6:02:3b:56:39:51:90:6e:91:e9:b3:09:
                    56:df:0a:6d:d9:fb:d6:06:47:8a:4d:f2:82:99:18:
                    c2:c9:ec:25:74:05:bf:25:fa:c5:85:8b:0f:0f:23:
                    2a:ab:ae:74:31:b4:15:8f:13:3f:ec:73:a4:45:d6:
                    a7:12:20:a2:8c:29:3d:4a:f7:c7:06:27:73:df:31:
                    c6:40:05:f0:3a:af:55:3d:64:9d:5c:22:06:63:17:
                    6e:82:8c:b1:86:cf:09:45:02:27:f3:ac:99:20:e2:
                    6e:05:68:17:36:2d:5c:c3:23:72:c0:99:bb:37:97:
                    c0:dc:23:6b:ac:70:aa:e2:35:3a:96:43:f5:ba:36:
                    98:d4:c5:52:ae:1d:6c:71:c5:aa:f5:97:b9:ab:53:
                    69:4e:7a:da:cf:e0:f8:39:47:59:08:0a:a1:27:ec:
                    1c:06:c7:02:13:da:63:b8:1f:1d:4c:36:17:07:c7:
                    e9:41:ec:77:49:55:30:c4:7f:87:7a:8b:3a:8d:6a:
                    0b:d7:f7:17:43:d3:d5:ff:30:be:d1:18:21:d3:e0:
                    e9:53:4f:b0:97:fd:0f:a7:84:0d:82:ec:ed:90:eb:
                    de:6a:51:fa:14:e9:e7:7d:85:d6:3d:95:65:60:61:
                    31:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:5B:C8:D3:78:2C:EA:E6:F6:0F:C4:25:03:7D:69:6D:9A:E2:48:41
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1fb13753-cdf2-4e81-bc92-fc32aac769a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.194.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         bb:d5:1d:b0:a3:62:9b:7f:9e:4d:3c:59:1e:69:d0:f2:63:2e:
         71:2b:61:5a:ad:31:54:5f:d7:35:77:4c:16:60:70:02:c8:88:
         8e:11:35:cb:a2:e7:f5:91:47:0b:ef:6e:ff:d2:db:be:ac:61:
         4a:06:d9:77:16:5b:c1:5c:9f:9b:3e:e3:c9:b4:57:a9:7c:08:
         89:2f:32:c9:4b:ac:05:90:bf:72:4c:dc:22:7a:bd:a8:d9:71:
         ed:19:1b:94:30:33:bf:b4:43:6c:ce:a1:15:4e:ef:61:5d:6d:
         2d:48:e4:02:dc:7a:18:68:6d:f9:82:32:97:47:7e:c9:7e:1b:
         fe:7a:46:ff:49:02:2b:52:91:ff:b4:52:40:91:9e:87:1a:63:
         ec:6e:b1:a8:56:11:19:59:c2:c8:51:7a:46:f0:91:5c:bd:b6:
         52:7d:55:6f:b7:a0:04:7e:90:06:4b:51:2f:66:18:be:8b:ab:
         72:67:f0:15:aa:82:cb:8e:4b:78:37:1f:f8:4e:a1:89:9e:3f:
         c3:8c:7b:90:e0:dd:07:4c:f2:f0:6d:d6:a6:d6:22:87:93:64:
         14:8b:21:ac:06:ff:06:af:9d:68:98:ec:b4:21:a0:30:e1:98:
         f7:b4:23:47:5a:0e:8b:9c:43:f6:3f:e9:fc:31:82:ca:54:1e:
         18:5a:db:e8
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIULIG4KlwRk5DjX+zuZke5u7nsSJUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE1MDEyMDA2WhcNMjYwODEzMjM1OTU5
WjB6MUkwRwYDVQQFE0BkNzViMDIxMTIzZjNmMDZhNWM1MDI2ODQzMWMyMmJiZjJk
MGEzOTZmOWFhOWIyODYyMzA2YzY4NGQwZDEzZjQ5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCvUcyJFygu+MrDshV628YK5MYCO1Y5UZBukemzCVbfCm3Z
+9YGR4pN8oKZGMLJ7CV0Bb8l+sWFiw8PIyqrrnQxtBWPEz/sc6RF1qcSIKKMKT1K
98cGJ3PfMcZABfA6r1U9ZJ1cIgZjF26CjLGGzwlFAifzrJkg4m4FaBc2LVzDI3LA
mbs3l8DcI2uscKriNTqWQ/W6NpjUxVKuHWxxxar1l7mrU2lOetrP4Pg5R1kICqEn
7BwGxwIT2mO4Hx1MNhcHx+lB7HdJVTDEf4d6izqNagvX9xdD09X/ML7RGCHT4OlT
T7CX/Q+nhA2C7O2Q695qUfoU6ed9hdY9lWVgYTElAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUvVvI03gs6ub2D8QlA31pbZriSEEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzFmYjEzNzUzLWNkZjItNGU4MS1iYzkyLWZjMzJhYWM3NjlhMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwENwjANBgkqhkiG9w0BAQsFAAOCAQEAu9UdsKNim3+eTTxZHmnQ8mMucSth
Wq0xVF/XNXdMFmBwAsiIjhE1y6Ln9ZFHC+9u/9LbvqxhSgbZdxZbwVyfmz7jybRX
qXwIiS8yyUusBZC/ckzcInq9qNlx7RkblDAzv7RDbM6hFU7vYV1tLUjkAtx6GGht
+YIyl0d+yX4b/npG/0kCK1KR/7RSQJGehxpj7G6xqFYRGVnCyFF6RvCRXL22Un1V
b7egBH6QBktRL2YYvourcmfwFaqCy45LeDcf+E6hiZ4/w4x7kODdB0zy8G3WptYi
h5NkFIshrAb/Bq+daJjstCGgMOGY97QjR1oOi5xD9j/p/DGCylQeGFrb6A==
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:52:41 2026 by rpki-client