Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da4f36e5-5307-4447-b46d-47df8180ef89.roa
File:                     da4f36e5-5307-4447-b46d-47df8180ef89.roa (raw, json)
Hash identifier:          JF+cm/iZ/ozSQ2j4/cKnhrBk4igi5jlY8BU5tT+voqc=
Subject key identifier:   B0:3E:B1:FF:72:F0:1A:74:C3:04:2B:1F:FE:B2:04:71:8A:7B:2D:75
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       025C934470DF37A324145BE9428C5FD596F6B482
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da4f36e5-5307-4447-b46d-47df8180ef89.roa
Signing time:             Wed 06 May 2026 00:31:21 +0000
ROA not before:           Wed 06 May 2026 00:31:21 +0000
ROA not after:            Tue 04 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        99.150.112.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:5c:93:44:70:df:37:a3:24:14:5b:e9:42:8c:5f:d5:96:f6:b4:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  6 00:31:21 2026 GMT
            Not After : Aug  4 23:59:59 2026 GMT
        Subject: serialNumber=f9e03eb1279f578f34abec2e535f7e38789b38fc93093c48c34a036d1c8b603d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d6:db:b8:af:08:eb:4c:5e:12:fc:a7:2b:f9:
                    a4:94:61:f4:62:75:ec:f9:80:af:d0:47:3b:21:2c:
                    a7:b1:e8:4b:3d:52:ca:cd:9b:87:ca:17:bb:42:6a:
                    be:b1:fb:e8:03:e8:cb:f0:dc:90:0b:2e:d4:b1:e7:
                    25:82:96:56:68:3e:01:b5:82:2e:1c:aa:6c:c0:e1:
                    ae:7e:76:17:6a:6d:54:4e:8c:c8:02:14:93:e4:a5:
                    9e:aa:e5:ab:07:32:31:bc:4f:10:ae:54:ba:e7:35:
                    aa:97:8a:4a:18:93:ae:44:15:0d:8d:ed:79:9e:ce:
                    07:f6:85:f6:1a:42:1d:c2:18:35:c1:0b:66:28:85:
                    f3:75:0f:53:c9:b5:b5:64:27:39:b1:98:d6:f2:52:
                    fa:d9:84:3d:ad:8a:39:4a:f1:5c:4d:c8:9c:10:cd:
                    c6:cb:af:47:fa:68:e7:ad:5b:f4:f1:7f:94:22:96:
                    fe:c8:d6:f9:ef:fd:0f:81:17:91:8e:ee:e7:9f:16:
                    2d:1a:1c:9a:55:22:8f:bc:00:4a:db:b5:db:8f:8b:
                    41:6a:ee:9a:51:2e:ce:d9:74:cc:70:72:be:23:fb:
                    3b:87:f6:de:74:3a:2b:87:10:08:e3:ac:25:5a:32:
                    ed:d8:5d:6e:80:5b:7e:3e:8d:0a:b0:05:2f:00:ea:
                    b1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:3E:B1:FF:72:F0:1A:74:C3:04:2B:1F:FE:B2:04:71:8A:7B:2D:75
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da4f36e5-5307-4447-b46d-47df8180ef89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.150.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         23:15:cb:60:64:c3:52:e8:e7:05:46:92:e5:56:90:6f:0c:8a:
         ba:4a:a7:a5:42:cd:2a:07:da:25:fc:e6:66:09:35:b7:23:71:
         ae:f4:2c:80:56:94:b6:60:c2:42:96:08:7b:76:32:a6:db:3c:
         96:a1:c6:2a:b4:1c:0c:81:34:15:96:90:06:72:82:e2:42:14:
         40:0c:78:06:f4:7b:34:82:67:ae:7b:be:11:4f:c1:e3:a1:da:
         9f:c2:2c:6c:c5:83:c8:fb:7a:21:65:53:84:42:3b:8c:ad:17:
         40:e5:6c:1b:f0:2c:34:76:32:50:23:d0:17:6c:6c:36:6f:ae:
         2c:7f:96:2c:96:ba:7b:74:f3:73:51:cf:0f:64:f2:c2:06:f5:
         35:9a:cb:52:99:42:bb:8b:1a:46:61:79:5d:14:5b:a4:f7:40:
         8e:45:79:2f:6c:0f:c5:3e:6b:3e:5e:ca:52:65:67:34:7c:22:
         af:19:f7:7b:27:57:35:3a:17:e7:9c:be:b2:17:46:6c:56:dc:
         12:a2:ca:62:7f:51:3e:23:d5:77:c0:b0:3a:e0:84:20:91:d7:
         7a:f9:f9:ff:ee:ce:73:bc:a8:c0:71:f8:5f:b8:75:07:2e:e6:
         e0:70:42:ad:f9:6e:85:dd:1c:a4:a9:ca:30:16:8d:91:cc:b1:
         8d:20:dc:c4
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUAlyTRHDfN6MkFFvpQoxf1Zb2tIIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA2MDAzMTIxWhcNMjYwODA0MjM1OTU5
WjB6MUkwRwYDVQQFE0BmOWUwM2ViMTI3OWY1NzhmMzRhYmVjMmU1MzVmN2UzODc4
OWIzOGZjOTMwOTNjNDhjMzRhMDM2ZDFjOGI2MDNkMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC91tu4rwjrTF4S/Kcr+aSUYfRidez5gK/QRzshLKex6Es9
UsrNm4fKF7tCar6x++gD6Mvw3JALLtSx5yWCllZoPgG1gi4cqmzA4a5+dhdqbVRO
jMgCFJPkpZ6q5asHMjG8TxCuVLrnNaqXikoYk65EFQ2N7Xmezgf2hfYaQh3CGDXB
C2YohfN1D1PJtbVkJzmxmNbyUvrZhD2tijlK8VxNyJwQzcbLr0f6aOetW/Txf5Qi
lv7I1vnv/Q+BF5GO7uefFi0aHJpVIo+8AErbtduPi0Fq7ppRLs7ZdMxwcr4j+zuH
9t50OiuHEAjjrCVaMu3YXW6AW34+jQqwBS8A6rETAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUsD6x/3LwGnTDBCsf/rIEcYp7LXUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2RhNGYzNmU1LTUzMDctNDQ0Ny1iNDZkLTQ3ZGY4MTgwZWY4OS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBANjlnAwDQYJKoZIhvcNAQELBQADggEBACMVy2Bkw1Lo5wVGkuVWkG8MirpK
p6VCzSoH2iX85mYJNbcjca70LIBWlLZgwkKWCHt2MqbbPJahxiq0HAyBNBWWkAZy
guJCFEAMeAb0ezSCZ657vhFPweOh2p/CLGzFg8j7eiFlU4RCO4ytF0DlbBvwLDR2
MlAj0BdsbDZvrix/liyWunt083NRzw9k8sIG9TWay1KZQruLGkZheV0UW6T3QI5F
eS9sD8U+az5eylJlZzR8Iq8Z93snVzU6F+ecvrIXRmxW3BKiymJ/UT4j1XfAsDrg
hCCR13r5+f/uznO8qMBx+F+4dQcu5uBwQq35boXdHKSpyjAWjZHMsY0g3MQ=
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:50:51 2026 by rpki-client