Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/579ee110-a8b2-4e29-8507-77b59ba75ce7.roa
File:                     579ee110-a8b2-4e29-8507-77b59ba75ce7.roa (raw, json)
Hash identifier:          UlkYrZlVQYhifDC8HsbsW7t6l1FBnikYUbpoaj2OVSQ=
Subject key identifier:   E1:14:61:17:F9:6C:6D:40:BF:3C:9C:1A:8F:B2:24:E7:22:C4:4A:CB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0C7D539FD53610C4E41732EDF67A2253A0483B86
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/579ee110-a8b2-4e29-8507-77b59ba75ce7.roa
Signing time:             Tue 28 Jul 2026 00:31:11 +0000
ROA not before:           Tue 28 Jul 2026 00:31:11 +0000
ROA not after:            Mon 26 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        203.110.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:7d:53:9f:d5:36:10:c4:e4:17:32:ed:f6:7a:22:53:a0:48:3b:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 28 00:31:11 2026 GMT
            Not After : Oct 26 23:59:59 2026 GMT
        Subject: serialNumber=55696205a5f8d84b90c0f3ad4b7ae840af8e246662a40ac591f0a045b15cb29f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ca:ab:32:6f:ce:2e:b2:c0:37:0e:88:ee:fd:
                    56:23:31:ea:f5:d1:7e:f8:3d:16:dd:32:fc:fb:12:
                    93:91:54:9d:2c:3e:2f:c2:e0:2e:45:dc:0c:ae:83:
                    b8:18:13:6b:b6:45:4b:3c:ae:a1:c1:5b:0a:6f:42:
                    ef:6d:7c:0c:da:63:a9:18:85:8c:65:93:1c:d0:da:
                    c4:98:b4:6f:50:4b:ea:5e:b7:f6:3b:6a:df:7a:d8:
                    14:b0:3a:34:ef:ec:45:d1:e8:b3:8a:ca:15:69:3f:
                    57:23:e5:26:50:54:df:01:9c:f4:4e:22:e8:89:93:
                    b9:46:9e:8b:f3:17:38:28:5e:cd:c0:b7:52:36:78:
                    8d:76:9d:83:1b:f6:11:2b:72:95:bb:5c:f8:66:f4:
                    2a:b1:c8:06:96:95:32:d0:95:5b:b1:74:db:6f:73:
                    f9:d3:75:48:eb:ee:ab:c3:f9:d7:fc:20:8d:89:bd:
                    e2:3a:75:a2:1f:b2:a5:d7:f4:02:f8:be:9c:d7:f4:
                    60:2b:31:a6:bc:b7:e3:5c:33:ab:c9:20:c3:79:75:
                    a6:02:22:09:ac:a5:bb:25:e7:af:1c:5a:96:aa:26:
                    ec:62:46:12:cc:28:ee:5c:b9:00:ab:ae:fd:c4:62:
                    b2:05:91:fc:28:dd:02:fa:21:9c:87:e9:c7:82:e5:
                    49:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:14:61:17:F9:6C:6D:40:BF:3C:9C:1A:8F:B2:24:E7:22:C4:4A:CB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/579ee110-a8b2-4e29-8507-77b59ba75ce7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.110.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:28:df:5e:bf:0c:d0:14:cb:e6:5d:34:f1:c1:cd:e5:b7:5f:
         73:cb:3c:4e:42:c7:55:2f:52:af:c3:1e:de:4f:b7:fb:e2:10:
         1e:36:63:02:9b:c6:a4:11:19:d8:be:36:d8:d9:15:ea:cc:60:
         a1:7e:8a:7d:92:f0:a6:85:2f:00:f4:01:d1:52:c3:86:5e:8f:
         e1:d5:18:c6:b8:89:1e:d3:81:a6:b2:48:d9:1a:31:d0:62:12:
         00:07:8d:45:f3:00:7b:a2:d1:62:3e:50:16:5b:18:01:d2:2f:
         02:b8:50:22:2b:e3:d1:a5:0e:f6:3b:67:fd:25:ca:b5:a4:a7:
         05:68:fa:60:db:92:7f:8b:5b:f0:d0:02:84:3c:f4:42:a5:4e:
         d0:14:85:22:56:46:b0:e9:63:7a:d0:df:6e:1b:b1:03:41:9e:
         9e:61:48:9f:a1:ce:6a:02:e9:a6:df:4b:cb:1d:f2:0f:ed:8b:
         ca:dd:a9:4d:88:d8:d7:5b:68:ed:ac:bc:7d:0d:c7:01:53:ba:
         83:b9:cb:e8:c8:64:be:f0:7f:3e:69:ac:43:83:8a:9c:de:22:
         6d:c2:8d:c8:79:fc:4a:41:0c:75:11:9d:5d:b9:30:e0:1a:bc:
         7b:f2:5a:66:8f:93:d7:cf:3f:f5:ba:a9:72:19:01:26:33:68:
         a0:6c:11:45
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUDH1Tn9U2EMTkFzLt9noiU6BIO4YwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzI4MDAzMTExWhcNMjYxMDI2MjM1OTU5
WjB6MUkwRwYDVQQFE0A1NTY5NjIwNWE1ZjhkODRiOTBjMGYzYWQ0YjdhZTg0MGFm
OGUyNDY2NjJhNDBhYzU5MWYwYTA0NWIxNWNiMjlmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCmyqsyb84ussA3Doju/VYjMer10X74PRbdMvz7EpORVJ0s
Pi/C4C5F3Ayug7gYE2u2RUs8rqHBWwpvQu9tfAzaY6kYhYxlkxzQ2sSYtG9QS+pe
t/Y7at962BSwOjTv7EXR6LOKyhVpP1cj5SZQVN8BnPROIuiJk7lGnovzFzgoXs3A
t1I2eI12nYMb9hErcpW7XPhm9CqxyAaWlTLQlVuxdNtvc/nTdUjr7qvD+df8II2J
veI6daIfsqXX9AL4vpzX9GArMaa8t+NcM6vJIMN5daYCIgmspbsl568cWpaqJuxi
RhLMKO5cuQCrrv3EYrIFkfwo3QL6IZyH6ceC5Uk3AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU4RRhF/lsbUC/PJwaj7Ik5yLESsswHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzU3OWVlMTEwLWE4YjItNGUyOS04NTA3LTc3YjU5YmE3NWNlNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADLbskwDQYJKoZIhvcNAQELBQADggEBALso316/DNAUy+ZdNPHBzeW3X3PL
PE5Cx1UvUq/DHt5Pt/viEB42YwKbxqQRGdi+NtjZFerMYKF+in2S8KaFLwD0AdFS
w4Zej+HVGMa4iR7TgaaySNkaMdBiEgAHjUXzAHui0WI+UBZbGAHSLwK4UCIr49Gl
DvY7Z/0lyrWkpwVo+mDbkn+LW/DQAoQ89EKlTtAUhSJWRrDpY3rQ324bsQNBnp5h
SJ+hzmoC6abfS8sd8g/ti8rdqU2I2NdbaO2svH0NxwFTuoO5y+jIZL7wfz5prEOD
ipzeIm3Cjch5/EpBDHURnV25MOAavHvyWmaPk9fPP/W6qXIZASYzaKBsEUU=
-----END CERTIFICATE-----
Generated at Tue Jul 28 14:50:13 2026 by rpki-client