Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a22c470d-8074-414a-ac14-cdafb7379aed.roa
File:                     a22c470d-8074-414a-ac14-cdafb7379aed.roa (raw, json)
Hash identifier:          j8KGnY6G9db+N/LH67jqTMP1UcTDFQEgsWApm2Qnua4=
Subject key identifier:   06:86:41:AE:B5:C2:77:CD:86:F0:A8:75:BA:1D:73:92:44:EB:12:A0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       46CF87F01F25596BD5ED8965632FF6545815B003
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a22c470d-8074-414a-ac14-cdafb7379aed.roa
Signing time:             Tue 10 Feb 2026 00:10:57 +0000
ROA not before:           Tue 10 Feb 2026 00:10:57 +0000
ROA not after:            Mon 11 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        162.250.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:cf:87:f0:1f:25:59:6b:d5:ed:89:65:63:2f:f6:54:58:15:b0:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 10 00:10:57 2026 GMT
            Not After : May 11 23:59:59 2026 GMT
        Subject: serialNumber=af6188c70c479c95ce6cd2e473abe22611dedaad9f6f746449ed4f9bef326f52, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d8:8c:ce:57:40:81:31:28:2f:fa:fe:e4:41:
                    eb:29:c4:cb:f4:58:3e:37:93:18:fc:f6:27:c4:00:
                    c0:d6:0d:e5:3f:81:10:05:30:5f:87:f6:ee:fe:17:
                    45:a8:4b:85:57:ba:05:f2:40:72:5a:db:87:3b:72:
                    8a:d2:64:8a:06:38:29:d4:73:07:10:68:95:a1:ae:
                    c5:7b:4c:98:c9:1d:52:6e:79:90:93:d9:5f:b8:2d:
                    5b:85:0c:b2:15:ba:49:86:77:d4:df:eb:d0:0e:ee:
                    02:54:3c:6e:26:e2:d4:e0:e5:61:11:a0:1a:c5:a9:
                    95:e4:6b:11:81:0f:44:62:6d:68:d4:c2:f8:c9:d0:
                    ff:b0:49:85:80:57:37:c7:8a:bf:6e:39:43:0c:af:
                    ed:bb:14:80:c3:4c:6d:c3:18:fa:dd:fd:de:2d:be:
                    3f:62:92:ca:5b:28:ec:99:41:cf:07:54:f8:55:59:
                    9d:b4:53:92:a8:67:53:e0:5a:db:30:c0:89:1c:b0:
                    59:de:0e:3d:1f:0a:44:9f:3e:27:e2:bf:08:d4:a0:
                    8a:f1:7c:9c:79:fe:4c:69:2a:f7:9f:3a:6c:fb:0d:
                    e1:b1:c6:dc:62:42:32:7d:03:69:ef:60:1f:36:b7:
                    d3:92:37:25:f9:49:78:77:75:57:fe:77:a4:7d:03:
                    b4:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:86:41:AE:B5:C2:77:CD:86:F0:A8:75:BA:1D:73:92:44:EB:12:A0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a22c470d-8074-414a-ac14-cdafb7379aed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.250.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d8:7c:b5:90:e4:1c:fa:20:d5:74:99:ae:7a:9d:a3:94:d0:ad:
         d1:db:fd:5f:c2:8c:64:81:c0:04:8a:51:3a:a3:79:6e:24:95:
         19:94:aa:08:84:27:c7:d2:8e:c6:6e:f5:fb:6d:35:35:63:25:
         9c:6f:99:fe:be:f6:45:6f:5a:92:07:9e:81:3b:cf:0f:22:79:
         1d:92:cc:1d:a0:e5:b1:b8:07:15:9f:30:4d:02:dc:5a:6e:d2:
         89:5c:ea:bd:f0:38:a0:b9:4a:c0:9f:94:39:9f:eb:0f:fc:94:
         e2:16:29:27:33:fc:16:3d:fc:f7:cb:aa:3a:84:fe:c1:c8:a4:
         7d:c7:5f:e6:69:8d:84:d2:f3:41:4a:18:3f:ce:47:39:2b:f6:
         a2:a5:05:82:05:a7:9f:9f:44:bb:c0:c7:9a:9f:6c:04:4d:b8:
         b3:5a:79:7f:e0:d5:8e:40:2f:13:42:d0:5a:c8:91:5b:a5:c2:
         21:08:44:7e:7f:9b:89:bb:63:d7:ce:94:9c:87:d0:61:78:a9:
         ea:d0:e7:7f:b6:29:c8:48:9e:3e:09:35:15:c7:53:d5:d4:ca:
         69:57:28:80:0f:af:89:b6:85:f3:4a:a0:22:37:69:9c:55:9c:
         b0:47:45:94:87:82:04:45:48:57:25:20:1c:23:d3:c3:ab:bb:
         70:ac:ef:f0
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIURs+H8B8lWWvV7YllYy/2VFgVsAMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjEwMDAxMDU3WhcNMjYwNTExMjM1OTU5
WjB6MUkwRwYDVQQFE0BhZjYxODhjNzBjNDc5Yzk1Y2U2Y2QyZTQ3M2FiZTIyNjEx
ZGVkYWFkOWY2Zjc0NjQ0OWVkNGY5YmVmMzI2ZjUyMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCU2IzOV0CBMSgv+v7kQespxMv0WD43kxj89ifEAMDWDeU/
gRAFMF+H9u7+F0WoS4VXugXyQHJa24c7corSZIoGOCnUcwcQaJWhrsV7TJjJHVJu
eZCT2V+4LVuFDLIVukmGd9Tf69AO7gJUPG4m4tTg5WERoBrFqZXkaxGBD0RibWjU
wvjJ0P+wSYWAVzfHir9uOUMMr+27FIDDTG3DGPrd/d4tvj9ikspbKOyZQc8HVPhV
WZ20U5KoZ1PgWtswwIkcsFneDj0fCkSfPifivwjUoIrxfJx5/kxpKvefOmz7DeGx
xtxiQjJ9A2nvYB82t9OSNyX5SXh3dVf+d6R9A7SvAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUBoZBrrXCd82G8Kh1uh1zkkTrEqAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2EyMmM0NzBkLTgwNzQtNDE0YS1hYzE0LWNkYWZiNzM3OWFlZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBACi+uwwDQYJKoZIhvcNAQELBQADggEBANh8tZDkHPog1XSZrnqdo5TQrdHb
/V/CjGSBwASKUTqjeW4klRmUqgiEJ8fSjsZu9fttNTVjJZxvmf6+9kVvWpIHnoE7
zw8ieR2SzB2g5bG4BxWfME0C3Fpu0olc6r3wOKC5SsCflDmf6w/8lOIWKScz/BY9
/PfLqjqE/sHIpH3HX+ZpjYTS80FKGD/ORzkr9qKlBYIFp5+fRLvAx5qfbARNuLNa
eX/g1Y5ALxNC0FrIkVulwiEIRH5/m4m7Y9fOlJyH0GF4qerQ53+2KchInj4JNRXH
U9XUymlXKIAPr4m2hfNKoCI3aZxVnLBHRZSHggRFSFclIBwj08Oru3Cs7/A=
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:55:42 2026 by rpki-client