Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/01d16c1b-49c2-40fe-bdae-b8e6e2bf8000.roa
File:                     01d16c1b-49c2-40fe-bdae-b8e6e2bf8000.roa (raw, json)
Hash identifier:          U1NdLSZFGy0IPdg2WxoAgEcdG1k896MOh3wZbc2XvAc=
Subject key identifier:   97:EA:D3:C0:F4:6C:32:3C:87:EB:0B:8B:C8:66:3C:41:8D:25:DA:87
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       3738DF9786DEBD943CD6B93AEEF04E0B68A38AA6
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/01d16c1b-49c2-40fe-bdae-b8e6e2bf8000.roa
Signing time:             Mon 27 Jul 2026 02:40:10 +0000
ROA not before:           Mon 27 Jul 2026 02:40:10 +0000
ROA not after:            Sun 25 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        15.220.200.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:38:df:97:86:de:bd:94:3c:d6:b9:3a:ee:f0:4e:0b:68:a3:8a:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jul 27 02:40:10 2026 GMT
            Not After : Oct 25 23:59:59 2026 GMT
        Subject: serialNumber=b64e00b9b969ee6ee52e990e8918b09d40383b80f5f280fd6f66943e04147a43, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:85:28:df:a7:74:e0:05:d1:44:16:e4:65:2c:
                    be:eb:87:52:83:36:0d:66:2b:ff:51:22:97:1d:bf:
                    fc:22:a6:33:51:e5:a1:4e:19:77:63:bf:4a:96:86:
                    21:50:82:bb:62:61:f2:94:94:65:89:8c:38:85:c9:
                    e8:9c:23:0a:3b:64:c1:c3:eb:27:b3:5b:b8:6b:7b:
                    ec:c0:97:76:76:18:1c:e7:47:49:29:f4:ab:27:ac:
                    d4:95:e9:48:6f:7f:40:bf:b2:f2:3e:3b:8d:54:c4:
                    7c:4d:ac:dc:5a:1c:ca:04:b2:a6:bc:46:2d:30:17:
                    fa:64:b2:76:86:41:4d:b1:74:d7:66:e4:3f:01:e7:
                    f3:4d:99:fb:da:11:60:e5:80:a3:e2:42:6e:4f:f5:
                    64:3a:3c:11:ad:80:fb:b2:35:2b:63:d9:2f:dc:d0:
                    50:6d:7a:71:2b:55:b6:67:76:1a:80:90:6a:59:8b:
                    ee:b5:ed:14:27:2e:bd:6f:a2:53:e9:55:66:a9:5f:
                    39:cc:76:d2:25:d9:e6:b6:00:21:bb:54:14:27:d5:
                    1f:5d:65:2d:d8:2a:6a:5e:50:2c:ed:87:c4:5c:5b:
                    97:17:b5:10:dd:0d:23:23:d7:4f:ec:a9:88:48:1b:
                    b5:14:2b:40:48:ba:aa:ab:46:a0:3e:58:53:e4:38:
                    d0:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:EA:D3:C0:F4:6C:32:3C:87:EB:0B:8B:C8:66:3C:41:8D:25:DA:87
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/01d16c1b-49c2-40fe-bdae-b8e6e2bf8000.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.220.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         32:b0:7a:c0:7c:ca:9c:26:8f:69:2e:47:fe:66:27:75:9c:fd:
         27:7a:b6:3d:1c:65:b2:bf:f6:34:68:1b:a5:65:24:5f:0a:3b:
         ad:89:7b:2d:91:6f:b5:af:d2:8e:0f:9d:e4:81:6e:b3:4f:f3:
         1e:6c:ae:60:d8:81:9c:b6:93:41:d5:d8:28:7e:68:13:ba:b0:
         11:12:94:ff:27:4a:43:a4:37:18:c5:db:1a:29:5e:8a:e5:58:
         68:c8:f7:d0:c7:1b:2b:96:50:9e:4d:3e:a4:fc:65:da:1b:98:
         eb:36:63:90:8c:6a:4a:b5:76:2e:5a:bc:75:b9:fe:63:66:b2:
         5d:32:d4:e8:2f:55:3d:6f:25:51:23:b6:33:98:d7:2e:35:2c:
         f7:78:06:c1:0c:fe:a5:d4:65:fd:10:a5:cd:1b:66:7d:d1:39:
         79:aa:4a:a6:43:50:0b:fd:d0:01:89:03:14:40:ff:dc:53:8e:
         9f:ba:9d:ab:7a:73:cf:3a:61:bd:fd:3f:e3:d6:49:cf:93:27:
         64:41:37:e5:a2:83:b4:f3:0f:55:2f:ee:0d:54:fb:cb:6c:71:
         f0:0c:2c:93:bf:50:56:ae:82:f6:3f:85:28:c3:7a:4d:7e:09:
         a0:b5:2e:fc:78:0f:4e:c5:f6:86:91:c0:30:ca:8b:83:eb:30:
         80:c4:a5:13
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUNzjfl4bevZQ81rk67vBOC2ijiqYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNzI3MDI0MDEwWhcNMjYxMDI1MjM1OTU5
WjB6MUkwRwYDVQQFE0BiNjRlMDBiOWI5NjllZTZlZTUyZTk5MGU4OTE4YjA5ZDQw
MzgzYjgwZjVmMjgwZmQ2ZjY2OTQzZTA0MTQ3YTQzMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC7hSjfp3TgBdFEFuRlLL7rh1KDNg1mK/9RIpcdv/wipjNR
5aFOGXdjv0qWhiFQgrtiYfKUlGWJjDiFyeicIwo7ZMHD6yezW7hre+zAl3Z2GBzn
R0kp9KsnrNSV6Uhvf0C/svI+O41UxHxNrNxaHMoEsqa8Ri0wF/pksnaGQU2xdNdm
5D8B5/NNmfvaEWDlgKPiQm5P9WQ6PBGtgPuyNStj2S/c0FBtenErVbZndhqAkGpZ
i+617RQnLr1volPpVWapXznMdtIl2ea2ACG7VBQn1R9dZS3YKmpeUCzth8RcW5cX
tRDdDSMj10/sqYhIG7UUK0BIuqqrRqA+WFPkONDxAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUl+rTwPRsMjyH6wuLyGY8QY0l2ocwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzAxZDE2YzFiLTQ5YzItNDBmZS1iZGFlLWI4ZTZlMmJmODAwMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAEP3MgwDQYJKoZIhvcNAQELBQADggEBADKwesB8ypwmj2kuR/5mJ3Wc/Sd6
tj0cZbK/9jRoG6VlJF8KO62Jey2Rb7Wv0o4PneSBbrNP8x5srmDYgZy2k0HV2Ch+
aBO6sBESlP8nSkOkNxjF2xopXorlWGjI99DHGyuWUJ5NPqT8ZdobmOs2Y5CMakq1
di5avHW5/mNmsl0y1OgvVT1vJVEjtjOY1y41LPd4BsEM/qXUZf0Qpc0bZn3ROXmq
SqZDUAv90AGJAxRA/9xTjp+6nat6c886Yb39P+PWSc+TJ2RBN+Wig7TzD1Uv7g1U
+8tscfAMLJO/UFaugvY/hSjDek1+CaC1Lvx4D07F9oaRwDDKi4PrMIDEpRM=
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:19:32 2026 by rpki-client