Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b076e11c-5f2a-4cd7-b4e8-793e7c3ab274.roa
File:                     b076e11c-5f2a-4cd7-b4e8-793e7c3ab274.roa (raw, json)
Hash identifier:          i+p7+WMnU4KhfnuOwUBtEzeAWmCURWUHrfZLsbGT1P4=
Subject key identifier:   EC:73:6A:9E:F1:AA:9C:ED:04:2B:34:77:A4:96:5C:2C:3E:1F:53:2B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       103AD426552DF0B9D414D9A9C704F3B957979A3F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b076e11c-5f2a-4cd7-b4e8-793e7c3ab274.roa
Signing time:             Sat 07 Feb 2026 00:00:44 +0000
ROA not before:           Sat 07 Feb 2026 00:00:44 +0000
ROA not after:            Fri 08 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        157.152.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:3a:d4:26:55:2d:f0:b9:d4:14:d9:a9:c7:04:f3:b9:57:97:9a:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb  7 00:00:44 2026 GMT
            Not After : May  8 23:59:59 2026 GMT
        Subject: serialNumber=42da008e0e73575ca5bc40ca869af33ae5a8f4eb30d25dfdb53c215868c08ef5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:34:13:17:19:71:30:84:ea:d9:e8:2b:44:c8:
                    7c:a5:c7:13:6b:53:ad:75:2a:d3:04:7e:ad:4a:ef:
                    73:42:78:c2:40:1a:04:41:46:5f:35:64:70:3a:29:
                    e2:3b:9d:d0:72:f5:e7:d4:db:f6:79:0a:20:ae:74:
                    95:7d:a4:16:8e:49:3f:2d:b7:a5:0a:f4:1d:d1:18:
                    ee:50:90:79:70:fa:98:da:47:e6:cd:0e:02:04:27:
                    5a:21:8f:44:5e:15:f6:6c:82:eb:2c:72:bc:1b:35:
                    73:88:4d:2e:5d:11:b7:cf:5c:48:df:4d:af:fb:8a:
                    14:bd:1c:aa:a9:47:a5:63:25:ce:d2:c6:a6:ae:18:
                    a2:3d:5c:5d:07:f6:9c:7e:dc:6c:36:11:9a:e4:a1:
                    1d:b2:7a:dd:b8:e4:7c:65:42:da:7a:0d:e7:c9:f7:
                    ae:b6:37:54:89:73:aa:69:00:e7:97:22:1e:4f:b2:
                    ca:7b:d5:29:0f:38:35:95:8c:33:60:ee:af:42:74:
                    cd:06:a4:88:3e:76:df:dd:29:8d:a5:fa:82:2d:97:
                    ca:e7:4c:79:e4:c7:4c:19:06:d9:be:45:63:56:4b:
                    c8:57:9c:25:fc:a0:89:78:f2:18:86:af:da:5a:53:
                    31:cc:61:7a:1d:01:d5:7e:4b:2b:6f:ac:af:d4:0b:
                    d4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:73:6A:9E:F1:AA:9C:ED:04:2B:34:77:A4:96:5C:2C:3E:1F:53:2B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b076e11c-5f2a-4cd7-b4e8-793e7c3ab274.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.152.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         98:d6:ef:2a:5c:63:0c:89:93:86:4a:36:85:84:df:7c:05:5d:
         8e:15:14:9c:f3:17:e6:fd:7d:a6:01:6a:96:a5:86:13:85:19:
         d8:24:c5:cd:30:a4:69:00:88:7f:47:f3:8c:c5:23:2c:7c:b6:
         f1:2b:1d:ba:93:d8:78:5a:da:c3:58:8c:01:f5:1a:c2:87:15:
         fd:3e:72:2c:ef:8f:b1:12:8d:40:45:09:4a:93:b6:e7:b5:87:
         d7:4e:dc:af:e1:b0:f1:53:b6:94:85:dc:e5:79:78:9c:96:de:
         99:ed:13:b5:20:6c:eb:e2:ee:b3:11:31:f0:71:13:fb:d9:a5:
         95:f3:91:12:00:8f:92:8b:5f:fe:99:59:0d:09:fb:06:67:04:
         ff:42:f0:c2:1c:41:42:ea:f8:8a:8c:cd:e7:f0:04:85:a9:4e:
         bc:b1:53:88:ba:93:7d:61:95:36:bf:9f:20:77:66:ed:55:05:
         a0:63:34:c5:6d:48:4e:79:74:9a:54:b0:af:5c:30:b7:6b:76:
         38:be:6d:90:2e:6e:9f:71:71:73:90:5b:d3:08:3b:de:c6:ac:
         5f:75:2d:50:37:5d:83:76:03:ea:68:49:7d:79:0b:99:84:65:
         88:95:67:3a:92:b2:f4:53:df:9d:e0:6a:0f:1e:1d:00:0d:f7:
         f1:cf:a0:b3
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUEDrUJlUt8LnUFNmpxwTzuVeXmj8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjA3MDAwMDQ0WhcNMjYwNTA4MjM1OTU5
WjB6MUkwRwYDVQQFE0A0MmRhMDA4ZTBlNzM1NzVjYTViYzQwY2E4NjlhZjMzYWU1
YThmNGViMzBkMjVkZmRiNTNjMjE1ODY4YzA4ZWY1MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDHNBMXGXEwhOrZ6CtEyHylxxNrU611KtMEfq1K73NCeMJA
GgRBRl81ZHA6KeI7ndBy9efU2/Z5CiCudJV9pBaOST8tt6UK9B3RGO5QkHlw+pja
R+bNDgIEJ1ohj0ReFfZsgusscrwbNXOITS5dEbfPXEjfTa/7ihS9HKqpR6VjJc7S
xqauGKI9XF0H9px+3Gw2EZrkoR2yet245HxlQtp6DefJ9662N1SJc6ppAOeXIh5P
ssp71SkPODWVjDNg7q9CdM0GpIg+dt/dKY2l+oItl8rnTHnkx0wZBtm+RWNWS8hX
nCX8oIl48hiGr9paUzHMYXodAdV+SytvrK/UC9RpAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQU7HNqnvGqnO0EKzR3pJZcLD4fUyswHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2IwNzZlMTFjLTVmMmEtNGNkNy1iNGU4LTc5M2U3YzNhYjI3NC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwCdmDANBgkqhkiG9w0BAQsFAAOCAQEAmNbvKlxjDImThko2hYTffAVdjhUU
nPMX5v19pgFqlqWGE4UZ2CTFzTCkaQCIf0fzjMUjLHy28SsdupPYeFraw1iMAfUa
wocV/T5yLO+PsRKNQEUJSpO257WH107cr+Gw8VO2lIXc5Xl4nJbeme0TtSBs6+Lu
sxEx8HET+9mllfOREgCPkotf/plZDQn7BmcE/0LwwhxBQur4iozN5/AEhalOvLFT
iLqTfWGVNr+fIHdm7VUFoGM0xW1ITnl0mlSwr1wwt2t2OL5tkC5un3Fxc5Bb0wg7
3sasX3UtUDddg3YD6mhJfXkLmYRliJVnOpKy9FPfneBqDx4dAA338c+gsw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:12:41 2026 by rpki-client