Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/3fd6117b-5f6b-43fe-bf0a-b66f8d35e456.roa
File:                     3fd6117b-5f6b-43fe-bf0a-b66f8d35e456.roa (raw, json)
Hash identifier:          JSHJC+SNwmXsjq+4fipa7ELIUmVvHyDo9w9If3+mmR4=
Subject key identifier:   8D:48:E7:81:C9:EA:4C:F0:7F:27:92:26:FF:3B:D0:F2:4D:C0:13:01
Certificate issuer:       /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04
Certificate serial:       302E8C1501D1EE1F90937061BD36AEEEF578B7A6
Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/3fd6117b-5f6b-43fe-bf0a-b66f8d35e456.roa
Signing time:             Mon 26 Oct 2026 00:50:07 +0000
ROA not before:           Mon 26 Oct 2026 00:50:07 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     8987
IP address blocks:        96.127.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:2e:8c:15:01:d1:ee:1f:90:93:70:61:bd:36:ae:ee:f5:78:b7:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04
        Validity
            Not Before: Oct 26 00:50:07 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=2551c987c396af3feb90b7d5da8c155bfa3180b57e0ee650eaedecee86ad4713, CN=0099a7ea-794a-4a28-b164-49547626eb11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b7:21:50:4e:a8:18:67:0c:3a:0e:fb:dd:d9:
                    74:4a:38:fd:fe:41:95:91:26:f9:2c:cd:59:e8:27:
                    42:6b:5c:d0:15:3e:e5:87:44:17:fc:74:ea:03:01:
                    24:fd:da:a3:60:ff:bc:77:71:46:13:85:15:1f:27:
                    9d:0f:b1:ae:a2:d1:ba:5f:b8:be:0d:ad:4e:5f:6b:
                    4d:d3:4c:5d:e5:15:b5:cc:cc:bc:7b:5d:27:07:44:
                    7c:d4:98:64:96:55:f8:80:f6:3b:28:b4:4e:82:b4:
                    fd:92:1e:8b:b1:d5:7b:58:bf:66:c4:d0:00:01:c2:
                    7f:70:8c:6d:c7:c5:45:86:e4:8c:2e:16:e1:1b:c5:
                    fd:5a:a4:d8:01:2d:0e:ba:1f:f8:2d:e3:46:16:54:
                    f9:f3:36:4e:19:8e:13:ed:98:dc:07:fe:10:e1:ec:
                    54:59:5b:bf:5a:ea:c2:c4:f9:e6:a5:06:82:ac:60:
                    02:4f:dd:c6:ae:f2:db:88:22:42:19:8d:63:4b:be:
                    a1:45:08:aa:bc:9e:d7:87:16:76:e5:eb:ae:53:0f:
                    05:0d:68:bd:54:da:7a:a3:4a:5e:ae:53:55:73:8f:
                    95:46:33:0b:f7:e2:d9:3c:66:d1:b4:8b:c1:62:f9:
                    89:d6:c5:7a:cc:a4:fa:90:3d:3c:40:18:33:2f:65:
                    a8:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:48:E7:81:C9:EA:4C:F0:7F:27:92:26:FF:3B:D0:F2:4D:C0:13:01
            X509v3 Authority Key Identifier:
                keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/3fd6117b-5f6b-43fe-bf0a-b66f8d35e456.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.127.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         39:ba:a3:6a:c6:19:2e:e0:7d:95:d4:17:d5:57:80:1a:b6:e7:
         62:6f:f9:00:eb:18:20:6f:0f:46:96:0b:39:ab:b1:4c:d3:1d:
         99:0a:b9:50:0c:e9:b6:b1:8d:44:3b:69:be:af:5f:4b:21:db:
         a7:4f:8f:0c:e3:4c:06:08:61:8b:cf:6e:b1:d5:f7:ed:70:2c:
         c4:b7:6a:bb:c0:0a:f2:71:95:71:53:27:04:20:37:74:0f:e0:
         71:74:63:05:91:7f:5a:30:26:14:84:42:29:27:94:11:04:25:
         71:5b:82:47:4d:0d:37:73:71:b2:be:36:72:49:4a:c9:e1:9d:
         12:78:a6:2e:03:89:76:60:53:df:5b:c7:ac:47:a2:77:b8:e0:
         e0:37:bd:59:b1:95:f4:ac:18:32:b2:56:d8:77:72:0a:8b:e9:
         24:7f:b7:3a:b9:af:6d:fc:05:90:c7:01:2d:99:75:4a:af:c7:
         e8:28:6e:69:29:aa:3f:ce:27:96:31:71:b6:33:3d:4b:6d:89:
         a2:43:80:f6:47:53:71:58:8e:55:01:fb:49:a6:91:41:ec:ed:
         79:33:63:86:d8:c8:78:a6:61:89:a7:c2:d1:5f:61:89:d4:74:
         cc:5f:88:59:b5:96:f3:a7:3f:20:0e:06:41:6b:13:a3:b5:bf:
         1e:c2:8b:99
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUMC6MFQHR7h+Qk3BhvTau7vV4t6YwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYzA1Njc2YzczM2ZkOGNjYWU1YmU2M2I5MmJkZGM5MGI3
YTViNzRlNjk0NDljMWViMDQwHhcNMjYxMDI2MDA1MDA3WhcNMjcwMTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0AyNTUxYzk4N2MzOTZhZjNmZWI5MGI3ZDVkYThjMTU1YmZh
MzE4MGI1N2UwZWU2NTBlYWVkZWNlZTg2YWQ0NzEzMS0wKwYDVQQDEyQwMDk5YTdl
YS03OTRhLTRhMjgtYjE2NC00OTU0NzYyNmViMTEwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC7tyFQTqgYZww6Dvvd2XRKOP3+QZWRJvkszVnoJ0JrXNAV
PuWHRBf8dOoDAST92qNg/7x3cUYThRUfJ50Psa6i0bpfuL4NrU5fa03TTF3lFbXM
zLx7XScHRHzUmGSWVfiA9jsotE6CtP2SHoux1XtYv2bE0AABwn9wjG3HxUWG5Iwu
FuEbxf1apNgBLQ66H/gt40YWVPnzNk4ZjhPtmNwH/hDh7FRZW79a6sLE+ealBoKs
YAJP3cau8tuIIkIZjWNLvqFFCKq8nteHFnbl665TDwUNaL1U2nqjSl6uU1Vzj5VG
Mwv34tk8ZtG0i8Fi+YnWxXrMpPqQPTxAGDMvZaj9AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUjUjngcnqTPB/J5Im/zvQ8k3AEwEwHwYDVR0jBBgwFoAUmcNUTAjJlFS4
eZUe/6R6j2PIp3cwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2I1NjQyOC05
YjUyLTQxNmYtYjI3OS1iYmFlMTQ0MjJkZTIvYzA1Njc2YzczM2ZkOGNjYWU1YmU2
M2I5MmJkZGM5MGI3YTViNzRlNjk0NDljMWViMDQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNDI1ODJjNjctZGQzZi00YmM1LWJhNjAtZTk3
ZTU1MmM2ZTM1LzNmZDYxMTdiLTVmNmItNDNmZS1iZjBhLWI2NmY4ZDM1ZTQ1Ni5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzQyNTgyYzY3LWRkM2YtNGJjNS1iYTYw
LWU5N2U1NTJjNmUzNS9fWXpLNWI1anVTdmR5UXQ2VzNUbWxFbkI2d1EuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAVgfyAwDQYJKoZIhvcNAQELBQADggEBADm6o2rGGS7gfZXUF9VXgBq252Jv
+QDrGCBvD0aWCzmrsUzTHZkKuVAM6baxjUQ7ab6vX0sh26dPjwzjTAYIYYvPbrHV
9+1wLMS3arvACvJxlXFTJwQgN3QP4HF0YwWRf1owJhSEQiknlBEEJXFbgkdNDTdz
cbK+NnJJSsnhnRJ4pi4DiXZgU99bx6xHone44OA3vVmxlfSsGDKyVth3cgqL6SR/
tzq5r238BZDHAS2ZdUqvx+gobmkpqj/OJ5YxcbYzPUttiaJDgPZHU3FYjlUB+0mm
kUHs7XkzY4bYyHimYYmnwtFfYYnUdMxfiFm1lvOnPyAOBkFrE6O1vx7Ci5k=
-----END CERTIFICATE-----
Generated at Thu Nov 5 11:27:57 2026 by rpki-client