Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eff765d7-d4f4-4aa2-9195-8f02ee06cc48.roa
File:                     eff765d7-d4f4-4aa2-9195-8f02ee06cc48.roa (raw, json)
Hash identifier:          si30dlvYwkR7WG5n8b1i4UuwHWIad4KtQKBDFt/W0TA=
Subject key identifier:   63:D3:5D:46:F9:0E:67:58:C7:83:68:63:93:9C:6D:5F:DA:19:55:32
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       264A434C2D47BAD67B8EDBAEE9E4EA7013D967D0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eff765d7-d4f4-4aa2-9195-8f02ee06cc48.roa
Signing time:             Wed 18 Feb 2026 21:36:50 +0000
ROA not before:           Wed 18 Feb 2026 21:36:50 +0000
ROA not after:            Tue 19 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        32.200.0.0/13 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:4a:43:4c:2d:47:ba:d6:7b:8e:db:ae:e9:e4:ea:70:13:d9:67:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 18 21:36:50 2026 GMT
            Not After : May 19 23:59:59 2026 GMT
        Subject: serialNumber=274eb4a88ec4ef5b7e999ff193e2a7efdb5117fc1fcab53630d8faed60f6e4b2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:66:fb:0a:10:d7:e4:75:5b:2d:bc:6e:10:bd:
                    ee:63:2a:5b:3c:a6:cb:46:00:d4:56:7a:2f:aa:0b:
                    06:92:fe:e4:cf:fb:87:42:bb:38:00:9f:cc:55:ba:
                    6a:d7:09:d6:1d:90:ee:0e:bb:aa:a2:ce:c3:9f:fe:
                    cd:73:a5:94:34:79:3f:97:be:ad:ec:8b:8e:7e:76:
                    b7:5e:bc:66:38:c0:ff:15:43:ae:2f:3b:97:ab:92:
                    1b:ea:29:c7:77:55:85:d6:88:06:bb:4d:32:19:a8:
                    d3:ba:a2:71:fc:82:a2:1c:05:bb:d8:58:74:29:f3:
                    c6:55:54:de:53:b3:b0:b5:38:6c:77:7e:91:89:46:
                    9d:a4:f3:97:8a:bd:4c:62:64:b1:99:af:a2:0d:a6:
                    ed:e5:fc:51:dc:67:23:9f:72:52:c9:92:12:44:91:
                    a1:9a:f5:a7:fb:bc:73:05:01:71:49:ac:4c:d4:11:
                    dd:f5:26:88:7e:54:d7:6c:5e:08:d9:0a:a3:1c:a8:
                    f9:a7:18:a6:90:b9:82:f4:94:e9:0c:a8:0d:1e:56:
                    92:43:1e:6b:41:cf:ed:a4:bc:e2:35:b8:cf:38:17:
                    6f:f0:ea:cf:58:10:04:bd:6b:8d:13:a5:6a:6c:b6:
                    52:51:48:da:27:7e:ec:47:7a:63:70:f1:bb:7c:81:
                    69:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:D3:5D:46:F9:0E:67:58:C7:83:68:63:93:9C:6D:5F:DA:19:55:32
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eff765d7-d4f4-4aa2-9195-8f02ee06cc48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  32.200.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         43:5d:eb:74:fb:49:67:c6:44:f4:ad:24:34:3b:c8:0e:62:a5:
         c2:bc:7e:29:69:91:44:40:7b:a4:7c:4a:1e:a0:12:db:4b:63:
         d7:98:f1:46:b7:41:60:5a:14:e6:f0:05:b6:04:56:e9:01:b0:
         ed:41:3c:38:bb:a6:fb:e1:ca:71:b4:3d:64:a8:a4:9a:f8:5f:
         1e:12:84:f0:33:34:46:1e:95:db:0c:2d:2c:05:02:8d:48:c5:
         c4:e2:91:ef:fe:d6:ad:4e:47:ed:5a:07:3a:20:ce:39:04:7d:
         d9:d7:71:06:18:73:b5:17:e8:0a:b0:40:b6:5b:96:3c:4a:df:
         c0:bb:af:93:3d:7f:45:ff:4e:8a:27:3f:99:09:71:64:26:fc:
         3d:fc:10:c5:8c:a2:4a:3e:05:a3:a6:fe:37:0e:36:b5:91:6e:
         8f:7a:91:61:48:f1:54:01:0a:58:da:67:b3:6a:01:8d:00:9d:
         ab:ca:3c:6b:d3:3f:b1:39:5a:1b:80:f9:2a:a3:a0:29:8b:19:
         e7:84:d0:c7:44:4c:e8:38:d1:65:50:64:5a:60:48:fb:4f:ae:
         fa:e5:9b:71:f6:ae:c9:50:eb:6d:a6:13:2a:59:a2:56:65:99:
         01:f8:93:06:7f:79:ff:57:a8:42:20:7e:73:f4:d1:93:1e:5b:
         51:34:49:45
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUJkpDTC1HutZ7jtuu6eTqcBPZZ9AwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjE4MjEzNjUwWhcNMjYwNTE5MjM1OTU5
WjB6MUkwRwYDVQQFE0AyNzRlYjRhODhlYzRlZjViN2U5OTlmZjE5M2UyYTdlZmRi
NTExN2ZjMWZjYWI1MzYzMGQ4ZmFlZDYwZjZlNGIyMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCWZvsKENfkdVstvG4Qve5jKls8pstGANRWei+qCwaS/uTP
+4dCuzgAn8xVumrXCdYdkO4Ou6qizsOf/s1zpZQ0eT+Xvq3si45+drdevGY4wP8V
Q64vO5erkhvqKcd3VYXWiAa7TTIZqNO6onH8gqIcBbvYWHQp88ZVVN5Ts7C1OGx3
fpGJRp2k85eKvUxiZLGZr6INpu3l/FHcZyOfclLJkhJEkaGa9af7vHMFAXFJrEzU
Ed31Joh+VNdsXgjZCqMcqPmnGKaQuYL0lOkMqA0eVpJDHmtBz+2kvOI1uM84F2/w
6s9YEAS9a40TpWpstlJRSNonfuxHemNw8bt8gWkXAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUY9NdRvkOZ1jHg2hjk5xtX9oZVTIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2VmZjc2NWQ3LWQ0ZjQtNGFhMi05MTk1LThmMDJlZTA2Y2M0OC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwMgyDANBgkqhkiG9w0BAQsFAAOCAQEAQ13rdPtJZ8ZE9K0kNDvIDmKlwrx+
KWmRREB7pHxKHqAS20tj15jxRrdBYFoU5vAFtgRW6QGw7UE8OLum++HKcbQ9ZKik
mvhfHhKE8DM0Rh6V2wwtLAUCjUjFxOKR7/7WrU5H7VoHOiDOOQR92ddxBhhztRfo
CrBAtluWPErfwLuvkz1/Rf9Oiic/mQlxZCb8PfwQxYyiSj4Fo6b+Nw42tZFuj3qR
YUjxVAEKWNpns2oBjQCdq8o8a9M/sTlaG4D5KqOgKYsZ54TQx0RM6DjRZVBkWmBI
+0+u+uWbcfauyVDrbaYTKlmiVmWZAfiTBn95/1eoQiB+c/TRkx5bUTRJRQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:57:26 2026 by rpki-client