Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/234213fd-431c-4840-aea2-4e57588af112.roa
File:                     234213fd-431c-4840-aea2-4e57588af112.roa (raw, json)
Hash identifier:          UyKTfp5SBqnwImwrODT+8wIal+DvoveTpBibgkGGfSg=
Subject key identifier:   CD:73:C5:6A:09:45:72:F7:1D:6C:26:F8:F5:F5:D1:C8:D7:DD:5F:14
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       30F2199181A1E263E822026BAFF7BBA37D4F0E8F
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/234213fd-431c-4840-aea2-4e57588af112.roa
Signing time:             Sat 28 Feb 2026 01:10:57 +0000
ROA not before:           Sat 28 Feb 2026 01:10:57 +0000
ROA not after:            Fri 29 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        3.175.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:f2:19:91:81:a1:e2:63:e8:22:02:6b:af:f7:bb:a3:7d:4f:0e:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Feb 28 01:10:57 2026 GMT
            Not After : May 29 23:59:59 2026 GMT
        Subject: serialNumber=2898bab6721603f616a64885aaa242b69bd50b9ef706756e933960593b2c793d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a5:a6:42:ec:c6:39:a1:f1:44:e1:c9:20:0b:
                    8a:77:e6:4e:fa:2f:bc:4f:46:85:10:d4:0c:62:0c:
                    a9:40:42:0d:9c:8b:bc:b5:ed:2f:ff:3f:53:67:90:
                    3b:68:34:2e:4d:88:46:87:69:25:0a:3f:c9:68:c1:
                    e3:c3:a7:a6:59:24:b5:7d:6a:df:06:38:4f:a2:35:
                    3e:fe:00:3e:69:53:ca:1a:06:06:24:9d:ab:68:db:
                    a7:c1:a3:2d:51:fd:57:5e:92:78:c8:e9:f5:11:01:
                    12:f4:d0:82:cd:b3:a7:69:04:fe:0b:01:8a:68:d6:
                    44:68:94:57:27:ef:22:42:fe:04:54:7d:89:3a:ec:
                    64:d0:e6:51:bf:3a:76:99:cd:03:88:0a:06:47:21:
                    83:1d:1b:d1:f0:76:37:3a:91:1d:cf:42:27:63:94:
                    d3:f5:7f:5e:05:51:51:7f:7f:a3:e8:7d:60:e8:45:
                    22:13:9a:d6:6b:29:7e:74:ca:24:1c:b9:51:1e:5a:
                    c7:7d:b9:82:b6:5c:9d:e4:d9:cc:5f:b7:8b:7e:cb:
                    a0:e9:97:21:7d:96:6b:c5:17:68:be:b3:26:67:66:
                    61:f3:48:27:b6:fe:8b:67:e5:ca:66:fc:c3:ed:c9:
                    0a:16:96:18:3c:39:c1:05:51:f9:98:bd:2d:0c:fe:
                    3f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:73:C5:6A:09:45:72:F7:1D:6C:26:F8:F5:F5:D1:C8:D7:DD:5F:14
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/234213fd-431c-4840-aea2-4e57588af112.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.175.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         43:d2:e3:49:92:20:6c:1f:d9:f2:54:8f:9d:a6:b5:87:ff:b1:
         a8:6b:59:98:53:3a:d9:5c:13:fc:5b:5b:4f:b5:32:71:d5:e8:
         7d:76:87:b7:0c:80:c5:82:30:10:44:7c:7a:2a:01:72:48:24:
         c6:b8:dc:c6:6d:fa:a2:be:16:a9:bc:42:24:74:6d:23:fd:df:
         39:63:ea:8e:7f:7f:39:92:f1:b2:3a:94:fa:a0:29:0b:d6:95:
         44:bf:ee:f7:ce:c5:b8:bc:b0:30:43:1e:ac:51:42:49:fb:15:
         27:af:0d:cf:ab:3e:9f:75:9a:db:ac:cf:f7:80:82:0d:12:61:
         09:9e:07:8d:32:04:c6:ee:76:bd:69:f6:7e:87:b1:8f:4b:16:
         7e:46:de:84:2b:7b:91:d4:f6:69:07:f6:bd:ba:b2:e0:52:23:
         72:7a:f8:ce:10:94:0b:bf:42:0a:0c:4c:c5:64:81:2b:24:24:
         2c:ca:e0:c3:dd:69:e7:3a:43:07:d7:ef:62:91:50:2d:e6:a1:
         95:6e:da:8b:0a:89:ec:6c:c7:48:08:8b:90:2e:8b:41:3d:25:
         31:e8:9c:2d:05:43:c0:01:b7:ee:35:a8:39:61:6a:fd:64:04:
         3d:20:a7:89:4e:51:15:f7:4e:80:a0:74:3f:ba:76:c6:eb:0c:
         cf:2f:4d:a3
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUMPIZkYGh4mPoIgJrr/e7o31PDo8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjI4MDExMDU3WhcNMjYwNTI5MjM1OTU5
WjB6MUkwRwYDVQQFE0AyODk4YmFiNjcyMTYwM2Y2MTZhNjQ4ODVhYWEyNDJiNjli
ZDUwYjllZjcwNjc1NmU5MzM5NjA1OTNiMmM3OTNkMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDJpaZC7MY5ofFE4ckgC4p35k76L7xPRoUQ1AxiDKlAQg2c
i7y17S//P1NnkDtoNC5NiEaHaSUKP8lowePDp6ZZJLV9at8GOE+iNT7+AD5pU8oa
BgYknato26fBoy1R/VdeknjI6fURARL00ILNs6dpBP4LAYpo1kRolFcn7yJC/gRU
fYk67GTQ5lG/OnaZzQOICgZHIYMdG9Hwdjc6kR3PQidjlNP1f14FUVF/f6PofWDo
RSITmtZrKX50yiQcuVEeWsd9uYK2XJ3k2cxft4t+y6DplyF9lmvFF2i+syZnZmHz
SCe2/otn5cpm/MPtyQoWlhg8OcEFUfmYvS0M/j+VAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUzXPFaglFcvcdbCb49fXRyNfdXxQwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzIzNDIxM2ZkLTQzMWMtNDg0MC1hZWEyLTRlNTc1ODhhZjExMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAQDr0AwDQYJKoZIhvcNAQELBQADggEBAEPS40mSIGwf2fJUj52mtYf/sahr
WZhTOtlcE/xbW0+1MnHV6H12h7cMgMWCMBBEfHoqAXJIJMa43MZt+qK+Fqm8QiR0
bSP93zlj6o5/fzmS8bI6lPqgKQvWlUS/7vfOxbi8sDBDHqxRQkn7FSevDc+rPp91
mtusz/eAgg0SYQmeB40yBMbudr1p9n6HsY9LFn5G3oQre5HU9mkH9r26suBSI3J6
+M4QlAu/QgoMTMVkgSskJCzK4MPdaec6QwfX72KRUC3moZVu2osKiexsx0gIi5Au
i0E9JTHonC0FQ8ABt+41qDlhav1kBD0gp4lOURX3ToCgdD+6dsbrDM8vTaM=
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:35:45 2026 by rpki-client