Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/2f1243e4-dd56-43c1-90e0-aec73f1a9489.roa
File:                     2f1243e4-dd56-43c1-90e0-aec73f1a9489.roa (raw, json)
Hash identifier:          tD3w8O9/RklvsHVMRFFH3+oSLeUMMBH+m9TDerDdRDM=
Subject key identifier:   26:DD:C8:E2:BD:09:54:40:D9:B4:74:E5:C1:B8:E0:0C:7F:AE:B5:0C
Certificate issuer:       /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial:       3ECF0DA04538194E4304EE4147F90EAC3E16342B
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/2f1243e4-dd56-43c1-90e0-aec73f1a9489.roa
Signing time:             Thu 08 Oct 2026 00:05:05 +0000
ROA not before:           Thu 08 Oct 2026 00:05:05 +0000
ROA not after:            Wed 06 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        206.55.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:cf:0d:a0:45:38:19:4e:43:04:ee:41:47:f9:0e:ac:3e:16:34:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
        Validity
            Not Before: Oct  8 00:05:05 2026 GMT
            Not After : Jan  6 23:59:59 2027 GMT
        Subject: serialNumber=46f8b63b9c560bfaa09cee0ae8b3879b340aef0d24d647513d3f5edf82dbadbf, CN=42519eb9-9579-4979-bdaf-164abd0e290e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:27:13:8f:37:10:44:32:4c:48:29:9d:85:5e:
                    4b:1f:a7:47:bc:61:44:ab:3c:fa:81:02:99:3f:cc:
                    fc:2b:9d:c6:00:2b:f3:68:b1:be:a1:72:0c:4c:8e:
                    c0:8b:91:df:1c:b0:1c:8c:e3:e6:04:c0:83:6d:bb:
                    00:9e:e3:df:b2:4f:cb:c7:60:ca:b0:f1:5a:60:2b:
                    27:c2:d0:61:ba:99:b0:0a:06:da:90:a4:6f:c5:57:
                    2e:15:f7:5c:3e:a6:c9:01:d9:a6:04:49:40:52:f1:
                    04:67:e8:68:85:9c:06:0e:54:63:f5:86:5a:29:bc:
                    12:78:88:c0:e8:e7:42:4c:62:65:cd:6f:a2:17:54:
                    6f:fd:f8:20:83:4b:bf:c8:2f:3d:c6:bd:6d:a2:26:
                    5d:f2:c5:10:bb:8c:a7:39:4d:bd:97:3c:da:3f:3f:
                    e4:71:3d:0c:12:5d:72:b3:10:5b:17:ab:2f:56:6d:
                    ea:8e:55:f7:d0:40:6d:41:9c:4e:40:a4:78:c1:6f:
                    34:87:5e:7a:b7:b4:41:5f:17:13:89:d4:d0:9a:00:
                    e5:f6:7d:cb:67:52:d7:1b:cd:7f:08:a1:58:ae:97:
                    5b:65:fe:17:7b:e6:0a:4b:d6:03:33:76:d4:62:05:
                    ec:70:70:e7:2c:59:e0:2c:da:82:e6:cd:ab:4f:6c:
                    42:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:DD:C8:E2:BD:09:54:40:D9:B4:74:E5:C1:B8:E0:0C:7F:AE:B5:0C
            X509v3 Authority Key Identifier:
                keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/2f1243e4-dd56-43c1-90e0-aec73f1a9489.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.55.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         11:7f:86:84:20:84:c9:a7:c9:e0:5c:9f:f8:07:b2:62:ae:9b:
         8b:ae:11:38:c1:6c:23:68:e8:74:00:9f:b3:79:e2:6c:6e:aa:
         6a:7a:0a:16:08:c6:ed:65:59:9a:ed:12:02:b6:26:5c:b6:eb:
         55:1b:6f:58:bf:c0:52:13:13:4a:86:ef:b9:06:79:66:25:a9:
         69:ca:57:87:89:26:e8:61:9f:58:1c:97:f5:80:9d:bc:1a:fe:
         9c:91:01:7f:ee:6a:00:65:ba:c4:6e:73:61:1b:c5:68:31:77:
         6a:f3:b5:b5:bc:2a:32:0e:15:ae:ff:2e:34:12:85:9a:b0:5c:
         ae:ea:39:68:8a:41:04:c2:4e:1c:8a:cd:dc:33:28:df:22:34:
         bf:62:cb:22:a2:5e:a9:54:15:7b:5a:34:a2:d4:56:e0:6d:c0:
         a9:11:96:8d:7e:cf:16:38:8a:8c:8c:10:c9:5f:49:e1:c3:e8:
         40:af:06:1c:42:56:0a:bc:9c:b8:c3:0f:bc:60:29:95:ed:dd:
         32:e2:84:6f:1e:5f:f0:66:a0:0c:d6:67:f2:a5:d4:5a:27:2b:
         95:21:8a:74:af:a7:3a:80:17:74:c5:46:3b:5a:2b:2a:e1:f9:
         98:99:90:96:a8:06:af:2a:1b:2b:2a:c3:53:f5:44:8f:2c:29:
         3f:35:22:73
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUPs8NoEU4GU5DBO5BR/kOrD4WNCswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm
MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYxMDA4MDAwNTA1WhcNMjcwMTA2MjM1OTU5
WjB6MUkwRwYDVQQFE0A0NmY4YjYzYjljNTYwYmZhYTA5Y2VlMGFlOGIzODc5YjM0
MGFlZjBkMjRkNjQ3NTEzZDNmNWVkZjgyZGJhZGJmMS0wKwYDVQQDEyQ0MjUxOWVi
OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCzJxOPNxBEMkxIKZ2FXksfp0e8YUSrPPqBApk/zPwrncYA
K/Nosb6hcgxMjsCLkd8csByM4+YEwINtuwCe49+yT8vHYMqw8VpgKyfC0GG6mbAK
BtqQpG/FVy4V91w+pskB2aYESUBS8QRn6GiFnAYOVGP1hlopvBJ4iMDo50JMYmXN
b6IXVG/9+CCDS7/ILz3GvW2iJl3yxRC7jKc5Tb2XPNo/P+RxPQwSXXKzEFsXqy9W
beqOVffQQG1BnE5ApHjBbzSHXnq3tEFfFxOJ1NCaAOX2fctnUtcbzX8IoViul1tl
/hd75gpL1gMzdtRiBexwcOcsWeAs2oLmzatPbELnAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUJt3I4r0JVEDZtHTlwbjgDH+utQwwHwYDVR0jBBgwFoAUvJOucQ+vFCI2
CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04
NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2
ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1
NTUxNGQ5YzdkLzJmMTI0M2U0LWRkNTYtNDNjMS05MGUwLWFlYzczZjFhOTQ4OS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx
LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAXON4AwDQYJKoZIhvcNAQELBQADggEBABF/hoQghMmnyeBcn/gHsmKum4uu
ETjBbCNo6HQAn7N54mxuqmp6ChYIxu1lWZrtEgK2Jly261Ubb1i/wFITE0qG77kG
eWYlqWnKV4eJJuhhn1gcl/WAnbwa/pyRAX/uagBlusRuc2EbxWgxd2rztbW8KjIO
Fa7/LjQShZqwXK7qOWiKQQTCThyKzdwzKN8iNL9iyyKiXqlUFXtaNKLUVuBtwKkR
lo1+zxY4ioyMEMlfSeHD6ECvBhxCVgq8nLjDD7xgKZXt3TLihG8eX/BmoAzWZ/Kl
1FonK5UhinSvpzqAF3TFRjtaKyrh+ZiZkJaoBq8qGysqw1P1RI8sKT81InM=
-----END CERTIFICATE-----
Generated at Sun Nov 8 15:11:47 2026 by rpki-client