Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c63e1f3c-46da-4d3b-9d1f-3bef8a6a10e0.roa
File:                     c63e1f3c-46da-4d3b-9d1f-3bef8a6a10e0.roa (raw, json)
Hash identifier:          AzEP2b94XHRjHE1vQi5eBbEl1eUVstOTFpWJeif3Lig=
Subject key identifier:   48:F8:3A:62:89:FC:15:2E:70:FB:BD:00:F8:2A:C8:9A:C5:DE:98:5D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1A131F07FBEDA5DD30B8CF560EDAF46DE84247AD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c63e1f3c-46da-4d3b-9d1f-3bef8a6a10e0.roa
Signing time:             Wed 25 Feb 2026 00:50:12 +0000
ROA not before:           Wed 25 Feb 2026 00:50:12 +0000
ROA not after:            Tue 26 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        119.13.242.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:13:1f:07:fb:ed:a5:dd:30:b8:cf:56:0e:da:f4:6d:e8:42:47:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 25 00:50:12 2026 GMT
            Not After : May 26 23:59:59 2026 GMT
        Subject: serialNumber=e9a78fb0629f23f5bf73efbd39818f37bd0c49b62b58a4242e5fd0151abfd7ac, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:91:24:7b:ed:50:28:97:c6:54:b6:ec:cc:c5:
                    1a:92:2f:0a:1b:c3:d6:0e:90:dc:ed:c2:bb:07:2a:
                    00:b5:5d:32:b3:fd:c5:aa:9b:90:b6:60:9d:30:6c:
                    3e:f3:fe:c1:c7:09:c0:2c:01:82:21:ac:a8:58:b1:
                    1d:a0:61:cc:15:ae:61:a9:fb:a9:7c:9b:93:a6:7d:
                    97:d5:e4:27:3e:23:34:8e:04:2e:90:0f:44:3f:f7:
                    eb:61:ea:06:4b:7b:8f:d8:99:55:62:e4:57:a8:05:
                    ab:5e:c9:26:05:af:64:25:7b:35:04:ec:2d:48:f1:
                    55:e5:ae:d8:98:4b:81:54:d8:b6:a2:28:7a:30:c8:
                    d7:6c:d8:0e:58:e6:47:b9:89:19:42:5b:77:61:6f:
                    46:0e:0a:18:c8:50:ce:3c:bd:67:8b:dd:f1:e3:c3:
                    2b:12:93:db:3d:e9:f6:40:06:00:aa:82:ae:43:f4:
                    ae:38:ff:d0:1c:f0:da:48:4b:5f:f6:6b:dc:f3:e3:
                    ce:6f:97:5e:a8:a1:cd:9e:25:b7:8c:49:73:c0:86:
                    5c:b6:b9:d6:ad:1c:62:52:fd:df:62:b3:7d:35:fd:
                    ac:8c:cf:be:75:38:57:e6:f2:ae:2c:3d:f1:c6:2d:
                    21:44:0d:3c:f0:f3:e7:1d:ee:01:c6:4b:ca:bc:21:
                    e6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:F8:3A:62:89:FC:15:2E:70:FB:BD:00:F8:2A:C8:9A:C5:DE:98:5D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c63e1f3c-46da-4d3b-9d1f-3bef8a6a10e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.13.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0c:b4:62:7d:99:7d:a1:d1:9a:81:6c:86:b5:15:38:29:7a:13:
         f3:fd:f1:5f:22:ab:52:86:fd:c3:98:2d:ea:fe:7e:3e:92:ea:
         51:09:9c:f4:1c:91:f9:4c:81:69:57:15:bd:de:4d:77:7e:fd:
         b9:ee:79:fb:30:0a:06:da:15:d1:d4:f4:4e:f9:07:97:3a:44:
         2e:d5:8e:af:96:01:05:5a:1c:8a:56:23:0f:00:fe:e8:fc:f5:
         df:b9:45:7b:d4:89:13:80:42:3a:e4:06:ee:a6:15:88:f3:78:
         18:9a:f0:9d:56:4e:79:62:49:7e:4a:99:20:0a:a9:59:e7:5b:
         e3:84:6a:d7:b0:8e:c8:83:bd:6e:fc:33:cc:16:81:84:1a:b5:
         0e:8e:c7:a4:32:a9:62:0e:bd:f6:b1:d2:53:01:15:68:a2:bc:
         a3:43:ea:a9:79:35:b2:92:ac:e2:cc:a1:bb:4b:34:b2:30:d3:
         eb:af:6e:d3:c0:64:a9:ca:16:fa:43:8a:93:04:bc:0a:00:91:
         f3:d7:83:03:6b:e9:b8:ae:1a:95:cc:13:3b:00:41:60:d6:81:
         09:04:3b:2d:f5:67:dd:1b:83:c1:88:b9:22:58:97:74:27:c3:
         0b:f4:e5:ec:6c:eb:1b:38:bf:7d:f6:dc:0d:e8:bd:04:b5:09:
         63:0d:1d:00
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUGhMfB/vtpd0wuM9WDtr0behCR60wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI1MDA1MDEyWhcNMjYwNTI2MjM1OTU5
WjB6MUkwRwYDVQQFE0BlOWE3OGZiMDYyOWYyM2Y1YmY3M2VmYmQzOTgxOGYzN2Jk
MGM0OWI2MmI1OGE0MjQyZTVmZDAxNTFhYmZkN2FjMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDWkSR77VAol8ZUtuzMxRqSLwobw9YOkNztwrsHKgC1XTKz
/cWqm5C2YJ0wbD7z/sHHCcAsAYIhrKhYsR2gYcwVrmGp+6l8m5OmfZfV5Cc+IzSO
BC6QD0Q/9+th6gZLe4/YmVVi5FeoBateySYFr2QlezUE7C1I8VXlrtiYS4FU2Lai
KHowyNds2A5Y5ke5iRlCW3dhb0YOChjIUM48vWeL3fHjwysSk9s96fZABgCqgq5D
9K44/9Ac8NpIS1/2a9zz485vl16ooc2eJbeMSXPAhly2udatHGJS/d9is301/ayM
z751OFfm8q4sPfHGLSFEDTzw8+cd7gHGS8q8IeaBAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUSPg6Yon8FS5w+70A+CrImsXemF0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2M2M2UxZjNjLTQ2ZGEtNGQzYi05ZDFmLTNiZWY4YTZhMTBlMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAF3DfIwDQYJKoZIhvcNAQELBQADggEBAAy0Yn2ZfaHRmoFshrUVOCl6E/P9
8V8iq1KG/cOYLer+fj6S6lEJnPQckflMgWlXFb3eTXd+/bnuefswCgbaFdHU9E75
B5c6RC7Vjq+WAQVaHIpWIw8A/uj89d+5RXvUiROAQjrkBu6mFYjzeBia8J1WTnli
SX5KmSAKqVnnW+OEatewjsiDvW78M8wWgYQatQ6Ox6QyqWIOvfax0lMBFWiivKND
6ql5NbKSrOLMobtLNLIw0+uvbtPAZKnKFvpDipMEvAoAkfPXgwNr6biuGpXMEzsA
QWDWgQkEOy31Z90bg8GIuSJYl3Qnwwv05exs6xs4v3323A3ovQS1CWMNHQA=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:08:40 2026 by rpki-client