Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/7c53740e-7300-4028-b024-414ad3814267.roa
File:                     7c53740e-7300-4028-b024-414ad3814267.roa (raw, json)
Hash identifier:          j5T2kUA573MA58Jf+DmXCIiccOOb/F7q3PzirTkmVIk=
Subject key identifier:   28:FC:91:80:CB:06:83:18:89:0B:0D:22:11:5A:00:BB:76:80:4A:FE
Certificate issuer:       /CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
Certificate serial:       4D1FA9BC08E719467786101F1997ED7B76823A44
Authority key identifier: 91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/7c53740e-7300-4028-b024-414ad3814267.roa
Signing time:             Tue 19 May 2026 00:50:28 +0000
ROA not before:           Tue 19 May 2026 00:50:28 +0000
ROA not after:            Mon 17 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        50.112.4.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:1f:a9:bc:08:e7:19:46:77:86:10:1f:19:97:ed:7b:76:82:3a:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
        Validity
            Not Before: May 19 00:50:28 2026 GMT
            Not After : Aug 17 23:59:59 2026 GMT
        Subject: serialNumber=27794ed1a9904fa58fd98f19b86a6de6a0b4794d939a0717979c7b180e930657, CN=ddfbc97c-7bed-40df-95ca-e664b29d7b27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:b7:15:2f:38:83:54:75:5f:e2:14:ea:a9:be:
                    9d:e3:c4:96:3b:24:cf:8a:30:5e:6a:9f:d0:8f:87:
                    88:85:b3:66:b0:39:c1:2d:3f:6b:7b:28:b8:71:3b:
                    22:da:dd:1f:b5:b8:c1:c3:62:fe:81:1b:6f:33:d6:
                    df:d6:16:56:a1:71:8b:bf:68:11:dc:30:80:90:e1:
                    cc:cc:eb:96:e5:56:0a:60:44:f7:b1:b9:31:d6:d1:
                    f2:5d:35:28:8c:29:0b:88:f6:e8:ed:3a:83:9d:cd:
                    9e:48:74:63:95:9e:20:4e:81:e3:38:f2:89:c6:91:
                    c6:70:a2:a8:1b:15:42:8a:ea:4d:23:81:e5:22:ca:
                    67:18:ac:4b:8c:74:2c:5f:b5:bb:f0:93:16:c5:03:
                    a7:54:e0:04:b0:69:4b:7c:4a:61:e3:ea:b3:2f:74:
                    cf:ee:03:60:a2:ec:86:0f:c2:80:f8:0e:96:c0:ea:
                    98:41:fb:7e:49:e0:a0:27:b7:78:9a:a9:9e:e5:21:
                    53:3a:64:9d:15:54:2d:4c:0a:4a:2e:17:b7:34:11:
                    9a:aa:96:c9:a0:36:2f:40:8c:be:52:69:44:4f:55:
                    30:2c:27:cd:2b:fb:12:80:4f:d0:34:9e:86:cb:5c:
                    db:a5:50:01:e9:b0:49:f4:02:4b:81:8f:a0:32:32:
                    d7:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:FC:91:80:CB:06:83:18:89:0B:0D:22:11:5A:00:BB:76:80:4A:FE
            X509v3 Authority Key Identifier:
                keyid:91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/7c53740e-7300-4028-b024-414ad3814267.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.112.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:a5:9f:24:6c:37:a5:39:31:5a:64:35:be:92:43:a8:63:67:
         5e:c3:aa:ec:e4:4a:3e:35:70:76:fd:85:57:d0:ea:f0:72:e6:
         a0:5e:3e:18:d9:ab:46:4d:6e:af:2c:30:6c:89:a5:12:09:12:
         cf:d4:cc:79:09:41:62:57:36:9d:ab:d1:97:8e:41:22:9c:49:
         ba:ad:1f:68:ec:17:23:d8:ee:02:09:18:4b:81:b5:52:c3:c3:
         3d:ea:cd:c8:ca:a5:b7:fc:04:1f:04:23:f4:34:eb:65:0b:b4:
         26:34:eb:f5:e3:24:e7:a2:e5:c2:9a:a4:63:2f:e0:2d:11:d3:
         e6:89:10:60:36:78:41:fd:bb:5f:fc:ea:26:88:e4:16:aa:7d:
         1a:03:b4:c5:18:80:5c:71:40:68:6b:2a:a3:cc:6b:54:b7:20:
         b2:48:aa:1f:5b:e9:4e:25:3f:80:df:dd:7c:bd:f0:1d:c9:02:
         53:cb:0f:5f:a0:a8:48:77:7d:65:56:47:1f:8a:5c:3f:14:e2:
         29:16:ad:51:54:e5:45:4e:d4:2a:bf:c2:98:ad:40:5a:5f:18:
         40:a7:d3:c8:90:04:20:1e:b2:8a:a6:8b:7d:9e:98:e5:62:a5:
         d6:bf:a4:2f:62:fa:b0:fc:a0:47:79:8f:9c:a4:11:54:41:76:
         e5:67:17:9c
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUTR+pvAjnGUZ3hhAfGZfte3aCOkQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYTE1ZDhhYTEwZDYyZGJkZDM0ODMyNjg3NmJhNTY3NTNj
Yjk5YjQ2NGNjNDU1MzI0YjMwHhcNMjYwNTE5MDA1MDI4WhcNMjYwODE3MjM1OTU5
WjB6MUkwRwYDVQQFE0AyNzc5NGVkMWE5OTA0ZmE1OGZkOThmMTliODZhNmRlNmEw
YjQ3OTRkOTM5YTA3MTc5NzljN2IxODBlOTMwNjU3MS0wKwYDVQQDEyRkZGZiYzk3
Yy03YmVkLTQwZGYtOTVjYS1lNjY0YjI5ZDdiMjcwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDqtxUvOINUdV/iFOqpvp3jxJY7JM+KMF5qn9CPh4iFs2aw
OcEtP2t7KLhxOyLa3R+1uMHDYv6BG28z1t/WFlahcYu/aBHcMICQ4czM65blVgpg
RPexuTHW0fJdNSiMKQuI9ujtOoOdzZ5IdGOVniBOgeM48onGkcZwoqgbFUKK6k0j
geUiymcYrEuMdCxftbvwkxbFA6dU4ASwaUt8SmHj6rMvdM/uA2Ci7IYPwoD4DpbA
6phB+35J4KAnt3iaqZ7lIVM6ZJ0VVC1MCkouF7c0EZqqlsmgNi9AjL5SaURPVTAs
J80r+xKAT9A0nobLXNulUAHpsEn0AkuBj6AyMtfHAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUKPyRgMsGgxiJCw0iEVoAu3aASv4wHwYDVR0jBBgwFoAUkS3GDddkKYK8
rn+B/jxMEnKAIh8wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83MTg4YWMyNC0w
OWNjLTRmMjAtOWRiZC1jZDkwMDVkMjc5N2UvYTE1ZDhhYTEwZDYyZGJkZDM0ODMy
Njg3NmJhNTY3NTNjYjk5YjQ2NGNjNDU1MzI0YjMuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNjAyYTI2ZTUtNGE5ZS00ZTVlLTg5ZjAtZWY4
OTE0OTBkOWM5LzdjNTM3NDBlLTczMDAtNDAyOC1iMDI0LTQxNGFkMzgxNDI2Ny5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzYwMmEyNmU1LTRhOWUtNGU1ZS04OWYw
LWVmODkxNDkwZDljOS9ZdHZkTklNbWgydWxaMVBMbWJSa3pFVlRKTE0uY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIycAQwDQYJKoZIhvcNAQELBQADggEBAAylnyRsN6U5MVpkNb6SQ6hjZ17D
quzkSj41cHb9hVfQ6vBy5qBePhjZq0ZNbq8sMGyJpRIJEs/UzHkJQWJXNp2r0ZeO
QSKcSbqtH2jsFyPY7gIJGEuBtVLDwz3qzcjKpbf8BB8EI/Q062ULtCY06/XjJOei
5cKapGMv4C0R0+aJEGA2eEH9u1/86iaI5BaqfRoDtMUYgFxxQGhrKqPMa1S3ILJI
qh9b6U4lP4Df3Xy98B3JAlPLD1+gqEh3fWVWRx+KXD8U4ikWrVFU5UVO1Cq/wpit
QFpfGECn08iQBCAesoqmi32emOVipda/pC9i+rD8oEd5j5ykEVRBduVnF5w=
-----END CERTIFICATE-----
Generated at Sun Jun 14 03:39:22 2026 by rpki-client