Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/abe641dd-a10f-4e91-8408-cbc741adace1.roa
File:                     abe641dd-a10f-4e91-8408-cbc741adace1.roa (raw, json)
Hash identifier:          Np7rGyHNOks2SxQRzQvl1uHIdTZqgTI1t8ItlIlUb5w=
Subject key identifier:   2B:A2:6C:B6:29:24:E0:44:63:E4:CF:65:FA:B9:D4:63:97:22:A9:76
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       738921EAEF3E89AC3557AA84571BE4A40233118A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/abe641dd-a10f-4e91-8408-cbc741adace1.roa
Signing time:             Wed 18 Feb 2026 00:30:15 +0000
ROA not before:           Wed 18 Feb 2026 00:30:15 +0000
ROA not after:            Tue 19 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        46.235.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:89:21:ea:ef:3e:89:ac:35:57:aa:84:57:1b:e4:a4:02:33:11:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 18 00:30:15 2026 GMT
            Not After : May 19 23:59:59 2026 GMT
        Subject: serialNumber=cf163d7cd06c51784c35704d027ee6920d3a17163d991357181d0338bb444807, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e2:0a:7f:b7:1d:11:86:f5:c2:57:ff:8b:3d:
                    9c:e8:f6:6f:7d:94:32:73:1f:dd:f0:ac:74:6f:c9:
                    86:b5:1c:4f:0d:f7:a5:33:f4:7f:3e:9e:15:03:c9:
                    e4:4c:ef:d9:2b:ab:a4:8f:f2:52:61:9e:5e:0b:c9:
                    b3:e1:44:a2:16:52:45:87:2a:64:4c:90:4c:df:f5:
                    80:af:50:3f:ef:da:58:9b:00:63:c6:22:ee:a1:e0:
                    1d:d2:c2:f4:09:77:af:64:42:ff:60:2a:01:34:a8:
                    2e:aa:76:57:32:6c:9e:66:af:18:71:79:5f:51:3e:
                    af:81:9f:37:b7:d6:5f:84:a1:86:21:17:04:55:94:
                    62:e6:e4:a2:66:bf:b7:5a:b2:1d:28:d2:19:aa:48:
                    fb:25:ab:aa:5d:1c:3f:ba:b0:c0:80:55:2b:9c:16:
                    16:94:a3:20:16:ec:f6:9d:b3:f4:3e:54:98:b5:4a:
                    01:d0:9b:68:bb:68:44:ca:bb:46:17:68:3f:37:21:
                    16:9c:47:13:51:4a:e6:e2:28:2a:67:e5:01:f5:c4:
                    ba:62:46:eb:a3:46:78:94:c5:0d:55:33:c7:0a:52:
                    90:96:48:4c:60:87:fb:12:0a:0d:39:e6:0a:15:cd:
                    99:66:fa:c4:90:b9:57:92:39:63:44:af:8e:18:7c:
                    04:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:A2:6C:B6:29:24:E0:44:63:E4:CF:65:FA:B9:D4:63:97:22:A9:76
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/abe641dd-a10f-4e91-8408-cbc741adace1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.235.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:0a:0a:34:92:6a:b0:99:07:80:03:05:f7:01:97:67:a3:0c:
         c2:c6:b7:d8:cb:ee:e3:84:8a:1f:6c:54:84:d8:b7:82:6f:c3:
         83:7c:40:ab:86:83:2f:e6:86:2f:0c:c1:53:3e:7e:44:85:70:
         58:32:21:a7:10:80:32:c1:0f:d9:06:d0:7b:09:3d:bc:07:09:
         99:83:87:a8:cc:2b:7e:24:22:91:c0:0b:e7:c6:78:b3:02:79:
         5f:51:45:0f:26:b4:84:3b:5d:01:c9:ec:a9:bf:15:4f:6c:3a:
         70:f0:99:c5:1d:07:60:67:fd:e7:4c:26:08:f1:41:72:ee:8f:
         b5:b5:10:84:b5:49:42:88:74:93:24:f6:ff:37:1a:79:9e:2a:
         48:f8:c2:43:f9:2d:5c:7d:4c:a5:66:2b:48:86:d8:db:e3:59:
         78:ca:b1:47:19:69:85:b2:01:38:21:b9:b5:d3:8b:02:dc:8c:
         7e:ea:99:3a:57:b3:45:61:1f:d9:15:ac:3c:ae:40:e2:23:f7:
         74:10:84:c0:a6:bd:44:02:c5:9a:bb:da:44:5f:2f:80:77:ca:
         97:b6:9f:05:f7:93:72:6d:12:25:3c:90:4f:dd:12:73:c7:6c:
         8a:61:f6:ae:4a:fd:13:a7:c5:5b:e9:60:8c:ae:58:61:bc:8d:
         ff:01:73:41
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUc4kh6u8+iaw1V6qEVxvkpAIzEYowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjE4MDAzMDE1WhcNMjYwNTE5MjM1OTU5
WjB6MUkwRwYDVQQFE0BjZjE2M2Q3Y2QwNmM1MTc4NGMzNTcwNGQwMjdlZTY5MjBk
M2ExNzE2M2Q5OTEzNTcxODFkMDMzOGJiNDQ0ODA3MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC04gp/tx0RhvXCV/+LPZzo9m99lDJzH93wrHRvyYa1HE8N
96Uz9H8+nhUDyeRM79krq6SP8lJhnl4LybPhRKIWUkWHKmRMkEzf9YCvUD/v2lib
AGPGIu6h4B3SwvQJd69kQv9gKgE0qC6qdlcybJ5mrxhxeV9RPq+Bnze31l+EoYYh
FwRVlGLm5KJmv7dash0o0hmqSPslq6pdHD+6sMCAVSucFhaUoyAW7Pads/Q+VJi1
SgHQm2i7aETKu0YXaD83IRacRxNRSubiKCpn5QH1xLpiRuujRniUxQ1VM8cKUpCW
SExgh/sSCg055goVzZlm+sSQuVeSOWNEr44YfATpAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUK6Jstikk4ERj5M9l+rnUY5ciqXYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2FiZTY0MWRkLWExMGYtNGU5MS04NDA4LWNiYzc0MWFkYWNlMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAu6wYwDQYJKoZIhvcNAQELBQADggEBABgKCjSSarCZB4ADBfcBl2ejDMLG
t9jL7uOEih9sVITYt4Jvw4N8QKuGgy/mhi8MwVM+fkSFcFgyIacQgDLBD9kG0HsJ
PbwHCZmDh6jMK34kIpHAC+fGeLMCeV9RRQ8mtIQ7XQHJ7Km/FU9sOnDwmcUdB2Bn
/edMJgjxQXLuj7W1EIS1SUKIdJMk9v83GnmeKkj4wkP5LVx9TKVmK0iG2NvjWXjK
sUcZaYWyATghubXTiwLcjH7qmTpXs0VhH9kVrDyuQOIj93QQhMCmvUQCxZq72kRf
L4B3ype2nwX3k3JtEiU8kE/dEnPHbIph9q5K/ROnxVvpYIyuWGG8jf8Bc0E=
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:35:39 2026 by rpki-client