Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5c7f6f04-bfce-4f41-a157-64e6e6ebef4e.roa
File:                     5c7f6f04-bfce-4f41-a157-64e6e6ebef4e.roa (raw, json)
Hash identifier:          8J/zHuxkUGpfX555hvn1auN9uZReg7PUuTbs+p0a4a0=
Subject key identifier:   F8:8F:07:40:FD:39:90:54:58:CE:38:1F:2C:0F:61:C6:11:2F:63:AA
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       1E3D62B95265BCE276DCB4035070216D584BC4
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5c7f6f04-bfce-4f41-a157-64e6e6ebef4e.roa
Signing time:             Sat 28 Feb 2026 02:51:12 +0000
ROA not before:           Sat 28 Feb 2026 02:51:12 +0000
ROA not after:            Fri 29 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        15.220.144.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:3d:62:b9:52:65:bc:e2:76:dc:b4:03:50:70:21:6d:58:4b:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Feb 28 02:51:12 2026 GMT
            Not After : May 29 23:59:59 2026 GMT
        Subject: serialNumber=6b69d3c909e31b3da50cc76bfd210256b161597bcc5e666dd3abaa2c5bba34a0, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6b:89:8f:80:87:76:a8:f5:9c:6b:4d:77:5b:
                    af:15:67:4f:0b:05:c4:bc:fc:83:d0:7c:67:2e:4b:
                    a5:be:2b:2f:ba:a2:4b:81:ac:98:31:3b:2f:b2:68:
                    75:ba:71:f3:55:bc:7a:06:bc:02:9e:0a:ff:cd:a6:
                    ae:09:1a:40:4f:e9:d0:ad:74:d0:bc:d3:11:f0:45:
                    01:d4:a3:12:af:6d:fb:ee:dd:d6:66:87:1d:ad:00:
                    44:00:18:07:8a:52:76:e8:ca:9b:bf:e0:37:8e:2c:
                    3a:4a:80:04:c7:93:5a:d7:91:4b:65:81:f3:b6:5c:
                    8d:d8:ff:6c:f1:3b:2d:29:6a:8b:e2:53:f3:88:9b:
                    53:97:db:0b:30:f8:6a:06:2f:ea:c6:40:3b:90:6d:
                    98:17:67:23:17:53:02:ed:60:e7:a6:a7:f9:97:78:
                    4f:55:bb:4a:14:8b:03:26:cd:95:f7:52:a1:78:59:
                    78:07:d8:40:6d:6e:fd:f8:92:4f:4e:19:d7:b9:ce:
                    96:81:78:03:1f:85:28:5c:88:be:69:6e:5c:c5:00:
                    e1:ea:67:6f:07:e2:80:59:df:8b:48:fc:24:5c:36:
                    e7:0f:cc:65:be:af:b0:cd:8d:45:4a:76:6d:3c:26:
                    cb:2a:f8:5c:c6:6f:53:d0:90:a0:63:88:aa:70:c5:
                    d5:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:8F:07:40:FD:39:90:54:58:CE:38:1F:2C:0F:61:C6:11:2F:63:AA
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5c7f6f04-bfce-4f41-a157-64e6e6ebef4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.220.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4e:22:5a:4e:9e:e8:56:1d:0c:cf:6b:c7:30:0d:8b:50:30:0e:
         06:ac:eb:08:d3:22:81:18:de:1c:be:d6:3d:90:a8:40:ad:23:
         b1:e4:cf:7e:30:13:7b:14:9c:6c:69:a5:14:83:3e:7b:db:ba:
         0d:6b:c1:8a:12:0e:b8:d7:d4:18:d6:1a:87:99:98:a1:6a:ce:
         fe:7c:68:34:a8:11:56:f0:9c:9f:f7:aa:5e:6b:8e:3e:a6:50:
         f2:fe:6e:5e:66:da:70:a1:75:a0:a8:76:09:1e:1d:0a:e4:e9:
         63:2d:cf:bf:fc:2d:92:6d:3c:54:1c:ce:ee:15:1f:31:04:34:
         56:bb:5d:bc:b2:e4:13:18:86:17:59:f5:34:7b:b9:7a:fa:68:
         bc:9a:a4:6c:4f:cf:8e:65:d9:42:eb:e5:d1:8a:49:51:87:25:
         f1:b4:34:11:1a:48:88:49:a2:cd:59:7e:8b:c5:e6:dc:7b:c6:
         cc:d1:c2:53:0d:50:7c:5f:ae:ae:01:38:e1:00:cc:44:eb:d6:
         73:15:31:e3:6e:e0:4e:42:f6:6f:77:da:3f:c1:20:bd:64:e9:
         0f:c7:5c:45:32:2e:c6:c5:10:ee:cd:6a:78:fc:c6:ea:69:35:
         95:a0:0e:5c:96:2e:79:c6:8c:fc:6d:e0:5b:d7:97:fd:97:04:
         78:00:23:27
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgITHj1iuVJlvOJ23LQDUHAhbVhLxDANBgkqhkiG9w0BAQsF
ADA9MTswOQYDVQQDEzJkZjZmM2IzYTM0YjYzODZkMWEzMmQ4ZjRmYTMxNzhlZjMx
ODg3ZDhiNDI4ZGZhYTQ3NjAeFw0yNjAyMjgwMjUxMTJaFw0yNjA1MjkyMzU5NTla
MHoxSTBHBgNVBAUTQDZiNjlkM2M5MDllMzFiM2RhNTBjYzc2YmZkMjEwMjU2YjE2
MTU5N2JjYzVlNjY2ZGQzYWJhYTJjNWJiYTM0YTAxLTArBgNVBAMTJDVmMjc2MDQ1
LTViOWYtNDVlZi05MjNkLWYzZmNlMjRhNjIyNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMBriY+Ah3ao9ZxrTXdbrxVnTwsFxLz8g9B8Zy5Lpb4rL7qi
S4GsmDE7L7Jodbpx81W8ega8Ap4K/82mrgkaQE/p0K100LzTEfBFAdSjEq9t++7d
1maHHa0ARAAYB4pSdujKm7/gN44sOkqABMeTWteRS2WB87Zcjdj/bPE7LSlqi+JT
84ibU5fbCzD4agYv6sZAO5BtmBdnIxdTAu1g56an+Zd4T1W7ShSLAybNlfdSoXhZ
eAfYQG1u/fiST04Z17nOloF4Ax+FKFyIvmluXMUA4epnbwfigFnfi0j8JFw25w/M
Zb6vsM2NRUp2bTwmyyr4XMZvU9CQoGOIqnDF1f8CAwEAAaOCArEwggKtMB0GA1Ud
DgQWBBT4jwdA/TmQVFjOOB8sD2HGES9jqjAfBgNVHSMEGDAWgBQlrdNCsB63pY6t
GZAmiLVLP4H0uDAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg
BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy
aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv
MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzg1MWNlZjE3LTEz
MmEtNDMzNy1iN2QxLWJmMTZhNTJmZmQwMy9kZjZmM2IzYTM0YjYzODZkMWEzMmQ4
ZjRmYTMxNzhlZjMxODg3ZDhiNDI4ZGZhYTQ3Ni5jZXIwgZ4GCCsGAQUFBwELBIGR
MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS9mNzAzNjk2ZS1lNDdiLTRjMjAtYmQ5My02Zjgw
OTA0ZTQyZDIvNWM3ZjZmMDQtYmZjZS00ZjQxLWExNTctNjRlNmU2ZWJlZjRlLnJv
YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0
LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMt
NmY4MDkwNGU0MmQyL3RqaHRHakxZOVBveGVPOHhpSDJMUW8zNnBIWS5jcmwwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAQ/ckDANBgkqhkiG9w0BAQsFAAOCAQEATiJaTp7oVh0Mz2vHMA2LUDAOBqzr
CNMigRjeHL7WPZCoQK0jseTPfjATexScbGmlFIM+e9u6DWvBihIOuNfUGNYah5mY
oWrO/nxoNKgRVvCcn/eqXmuOPqZQ8v5uXmbacKF1oKh2CR4dCuTpYy3Pv/wtkm08
VBzO7hUfMQQ0VrtdvLLkExiGF1n1NHu5evpovJqkbE/PjmXZQuvl0YpJUYcl8bQ0
ERpIiEmizVl+i8Xm3HvGzNHCUw1QfF+urgE44QDMROvWcxUx427gTkL2b3faP8Eg
vWTpD8dcRTIuxsUQ7s1qePzG6mk1laAOXJYuecaM/G3gW9eX/ZcEeAAjJw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:40:46 2026 by rpki-client