Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e264c0d5-ed96-4242-9a92-59dcefc01b66.roa
File:                     e264c0d5-ed96-4242-9a92-59dcefc01b66.roa (raw, json)
Hash identifier:          ZlSywt06an9cdFP16Q+pTawaUEzynsGQWXurJ0HTi3w=
Subject key identifier:   F9:76:F4:B4:28:11:0A:D4:DD:DB:2F:E8:EE:00:2D:A9:46:DA:A7:E3
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       26A27F12951E509988A20018939D5DF4141905B6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e264c0d5-ed96-4242-9a92-59dcefc01b66.roa
Signing time:             Wed 11 Feb 2026 01:11:06 +0000
ROA not before:           Wed 11 Feb 2026 01:11:06 +0000
ROA not after:            Tue 12 May 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        107.152.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:a2:7f:12:95:1e:50:99:88:a2:00:18:93:9d:5d:f4:14:19:05:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 11 01:11:06 2026 GMT
            Not After : May 12 23:59:59 2026 GMT
        Subject: serialNumber=4e7e97ae08b80c4768f1a505409163b65498f3076c7a3ebc211394b0e84385c0, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ac:8c:3b:1b:2d:ec:28:53:b8:3f:39:d0:23:
                    d7:1b:9b:ad:ed:4a:99:75:bd:22:a9:f7:72:dd:01:
                    ae:c4:ce:54:f4:7a:ca:3e:4a:57:b6:08:a8:ee:7f:
                    23:ce:13:2c:10:f2:87:54:ed:6f:3a:70:89:28:fa:
                    0b:ef:dc:f8:4e:52:dc:9c:df:6a:64:42:eb:5c:17:
                    81:b6:e4:5c:64:be:ab:8b:44:c9:3c:2e:89:20:c4:
                    2d:ce:e3:cd:72:65:2b:1f:68:32:bc:c4:7e:df:5a:
                    b8:b5:84:99:56:f9:33:ab:34:a1:67:12:bf:39:14:
                    f6:c8:99:f4:c7:c0:b4:04:05:50:4d:59:49:4a:59:
                    16:14:07:07:fc:21:33:5b:fc:ae:e6:83:1f:65:20:
                    c0:d7:42:96:31:7d:0a:b4:09:33:08:ab:cd:77:5e:
                    03:a9:5f:1d:e6:0a:fd:81:ef:f2:9a:92:b9:e6:d9:
                    6a:1e:1c:f5:46:15:47:f4:80:7c:13:15:8d:9d:2d:
                    ba:f9:d7:7b:b2:f2:d2:62:1e:d4:5a:f9:66:f0:19:
                    c6:fe:ef:12:80:24:94:dd:97:11:c0:13:b3:bd:e3:
                    63:ef:99:47:cf:26:c0:50:c2:f8:28:91:b1:16:b0:
                    e2:39:c5:5d:17:44:19:51:53:c7:51:0c:95:f9:be:
                    f3:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:76:F4:B4:28:11:0A:D4:DD:DB:2F:E8:EE:00:2D:A9:46:DA:A7:E3
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e264c0d5-ed96-4242-9a92-59dcefc01b66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.152.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:7a:85:94:ec:5b:c4:e2:41:c3:3d:21:b0:a2:ed:e5:4b:ac:
         95:61:6a:e1:3f:1a:2c:8e:9c:7f:27:8e:29:c1:3c:56:95:41:
         9a:2d:4a:f5:d6:9c:25:d8:b3:58:6f:da:af:25:96:06:8c:47:
         5c:96:78:89:6e:f0:0b:5d:0f:a4:b6:ad:6e:27:59:fb:f9:11:
         a5:f7:ac:29:c1:96:27:d2:98:22:92:b8:7a:6d:da:c5:df:3f:
         d0:85:c0:42:18:0d:b6:e4:0a:52:b7:bf:25:43:b2:5d:9e:78:
         3e:2a:63:8d:d2:c3:a0:10:5c:f2:9e:36:db:ef:26:b3:25:2f:
         1b:28:af:a5:5a:71:b5:38:25:04:27:78:ad:7a:63:b9:72:06:
         4c:a7:2b:b2:b8:26:60:20:0f:07:81:ba:6f:42:37:18:e5:c6:
         24:2c:dd:7f:39:0c:44:57:13:9c:ac:93:bb:31:94:c3:ef:c5:
         1c:52:38:7a:7e:78:48:27:1a:d6:06:32:6b:88:85:e7:3d:00:
         9c:16:a5:7a:6e:90:86:96:ed:fd:52:93:85:bd:74:fb:68:db:
         e8:9a:a3:04:26:fb:0c:03:11:b2:e7:a3:a2:cf:4e:3c:2d:e6:
         72:07:bc:7b:fb:f5:b6:6e:e6:a5:be:0b:2e:f8:37:1e:3d:44:
         59:8e:01:ba
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUJqJ/EpUeUJmIogAYk51d9BQZBbYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjExMDExMTA2WhcNMjYwNTEyMjM1OTU5
WjB6MUkwRwYDVQQFE0A0ZTdlOTdhZTA4YjgwYzQ3NjhmMWE1MDU0MDkxNjNiNjU0
OThmMzA3NmM3YTNlYmMyMTEzOTRiMGU4NDM4NWMwMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCtrIw7Gy3sKFO4PznQI9cbm63tSpl1vSKp93LdAa7EzlT0
eso+Sle2CKjufyPOEywQ8odU7W86cIko+gvv3PhOUtyc32pkQutcF4G25FxkvquL
RMk8LokgxC3O481yZSsfaDK8xH7fWri1hJlW+TOrNKFnEr85FPbImfTHwLQEBVBN
WUlKWRYUBwf8ITNb/K7mgx9lIMDXQpYxfQq0CTMIq813XgOpXx3mCv2B7/Kakrnm
2WoeHPVGFUf0gHwTFY2dLbr513uy8tJiHtRa+WbwGcb+7xKAJJTdlxHAE7O942Pv
mUfPJsBQwvgokbEWsOI5xV0XRBlRU8dRDJX5vvM9AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU+Xb0tCgRCtTd2y/o7gAtqUbap+MwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2UyNjRjMGQ1LWVkOTYtNDI0Mi05YTkyLTU5ZGNlZmMwMWI2Ni5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABrmIgwDQYJKoZIhvcNAQELBQADggEBAJV6hZTsW8TiQcM9IbCi7eVLrJVh
auE/GiyOnH8njinBPFaVQZotSvXWnCXYs1hv2q8llgaMR1yWeIlu8AtdD6S2rW4n
Wfv5EaX3rCnBlifSmCKSuHpt2sXfP9CFwEIYDbbkClK3vyVDsl2eeD4qY43Sw6AQ
XPKeNtvvJrMlLxsor6VacbU4JQQneK16Y7lyBkynK7K4JmAgDweBum9CNxjlxiQs
3X85DERXE5ysk7sxlMPvxRxSOHp+eEgnGtYGMmuIhec9AJwWpXpukIaW7f1Sk4W9
dPto2+iaowQm+wwDEbLno6LPTjwt5nIHvHv79bZu5qW+Cy74Nx49RFmOAbo=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:20:20 2026 by rpki-client