Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03c5f8dc-cd1f-4a60-a94f-cbb895913462.roa
File:                     03c5f8dc-cd1f-4a60-a94f-cbb895913462.roa (raw, json)
Hash identifier:          FIPDaJySZwbg1TTRyqrnu4FMPWr5+Us1HMuuWSPI8OQ=
Subject key identifier:   6E:73:B5:52:1A:6E:3E:E3:46:97:59:C0:08:26:84:95:A7:BA:4D:BB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       758B06858AB9DB9D2CA9218CA7CF4F674E219446
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03c5f8dc-cd1f-4a60-a94f-cbb895913462.roa
Signing time:             Sat 18 Jul 2026 00:51:44 +0000
ROA not before:           Sat 18 Jul 2026 00:51:44 +0000
ROA not after:            Fri 16 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        16.208.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:8b:06:85:8a:b9:db:9d:2c:a9:21:8c:a7:cf:4f:67:4e:21:94:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 18 00:51:44 2026 GMT
            Not After : Oct 16 23:59:59 2026 GMT
        Subject: serialNumber=f2a8b0313f8ccde7c79f2ce42a6769d1c0449c45c615c46eec6293ded33100b7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b7:b2:e4:c4:3c:f2:14:ee:cd:16:22:d6:cf:
                    54:84:ff:25:c7:9d:20:bb:58:89:8b:6e:8c:83:4d:
                    b7:37:30:aa:8b:8f:f1:ba:66:3b:d7:51:1e:f7:cb:
                    f2:99:34:e4:4e:a5:d0:46:e4:b7:ab:69:56:49:d8:
                    b4:70:7d:5e:23:cb:15:49:76:dc:53:b0:7c:9d:31:
                    88:3a:b0:a5:31:a1:70:38:f9:8f:70:c5:90:94:5b:
                    a5:63:61:d6:8a:a7:34:5b:2a:9e:17:e0:a0:a9:9f:
                    fb:21:24:d5:6c:43:2b:66:45:60:d2:de:a6:5f:6a:
                    28:dd:ef:7d:04:96:6c:03:71:d4:9c:99:4f:08:f1:
                    fa:f5:b2:cc:af:99:98:3a:5e:df:d2:3e:4e:3a:16:
                    e7:22:70:24:3f:0b:91:51:2e:78:07:aa:93:bb:7f:
                    f6:76:57:c9:02:e5:0d:3c:06:7c:ba:15:fb:fb:03:
                    88:5b:90:58:ec:05:1f:df:a3:20:10:4a:35:ec:5f:
                    7f:2a:7e:f8:43:6a:dc:c0:31:98:16:43:fa:10:f3:
                    b7:36:90:43:4e:e9:d8:26:74:17:93:92:1c:55:67:
                    43:28:00:e0:25:7f:52:42:e2:3e:a3:1c:38:25:d3:
                    01:e2:43:9d:15:11:9a:e0:30:14:99:86:a2:24:a7:
                    ce:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:73:B5:52:1A:6E:3E:E3:46:97:59:C0:08:26:84:95:A7:BA:4D:BB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03c5f8dc-cd1f-4a60-a94f-cbb895913462.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.208.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         19:f9:2b:d5:cd:b0:d1:ee:a6:19:42:1e:88:59:3f:8c:a2:16:
         02:fd:dd:13:4a:12:16:86:42:f1:c7:6e:1d:8b:cc:2f:87:63:
         17:bb:6c:41:23:a7:19:bd:f6:d1:9f:fe:2c:81:f9:0d:64:56:
         05:a6:a0:6b:99:8b:66:26:cf:40:a0:4b:e2:e6:d7:5d:5c:6a:
         f3:da:4f:57:b6:ea:4f:55:53:11:2d:0e:0e:1e:14:e9:fa:bf:
         a2:5f:eb:2d:9d:ad:82:a0:cb:1f:2b:1e:f6:26:40:b3:9f:11:
         07:c4:f2:c7:b1:7b:c7:58:aa:33:9c:07:58:ab:cd:cc:12:66:
         a9:e9:75:e1:50:4f:32:ef:65:63:d8:fe:9d:03:f1:e3:76:fd:
         dc:27:84:bc:65:6c:5a:17:5e:67:6a:9d:ba:a7:7f:50:a2:d8:
         02:2e:24:30:a9:4f:14:7a:9c:57:90:2d:c7:2f:df:82:34:b3:
         bd:5c:59:a0:3d:5a:c4:a2:aa:40:4d:b3:ba:9b:83:90:b9:7e:
         7c:ce:ef:85:09:50:e5:d5:8a:f5:5a:aa:11:a4:de:71:9a:31:
         4c:f3:8e:59:42:31:e2:bb:c4:f6:f8:40:fd:7c:55:8f:59:37:
         31:b0:f5:3a:e0:46:5b:73:64:70:25:2a:b4:87:ba:60:c2:a4:
         e7:82:2d:fb
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUdYsGhYq5250sqSGMp89PZ04hlEYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzE4MDA1MTQ0WhcNMjYxMDE2MjM1OTU5
WjB6MUkwRwYDVQQFE0BmMmE4YjAzMTNmOGNjZGU3Yzc5ZjJjZTQyYTY3NjlkMWMw
NDQ5YzQ1YzYxNWM0NmVlYzYyOTNkZWQzMzEwMGI3MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC2t7LkxDzyFO7NFiLWz1SE/yXHnSC7WImLboyDTbc3MKqL
j/G6ZjvXUR73y/KZNOROpdBG5LeraVZJ2LRwfV4jyxVJdtxTsHydMYg6sKUxoXA4
+Y9wxZCUW6VjYdaKpzRbKp4X4KCpn/shJNVsQytmRWDS3qZfaijd730ElmwDcdSc
mU8I8fr1ssyvmZg6Xt/SPk46FucicCQ/C5FRLngHqpO7f/Z2V8kC5Q08Bny6Ffv7
A4hbkFjsBR/foyAQSjXsX38qfvhDatzAMZgWQ/oQ87c2kENO6dgmdBeTkhxVZ0Mo
AOAlf1JC4j6jHDgl0wHiQ50VEZrgMBSZhqIkp86tAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUbnO1UhpuPuNGl1nACCaElae6TbswHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzAzYzVmOGRjLWNkMWYtNGE2MC1hOTRmLWNiYjg5NTkxMzQ2Mi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAQ0DANBgkqhkiG9w0BAQsFAAOCAQEAGfkr1c2w0e6mGUIeiFk/jKIWAv3d
E0oSFoZC8cduHYvML4djF7tsQSOnGb320Z/+LIH5DWRWBaaga5mLZibPQKBL4ubX
XVxq89pPV7bqT1VTES0ODh4U6fq/ol/rLZ2tgqDLHyse9iZAs58RB8Tyx7F7x1iq
M5wHWKvNzBJmqel14VBPMu9lY9j+nQPx43b93CeEvGVsWhdeZ2qduqd/UKLYAi4k
MKlPFHqcV5Atxy/fgjSzvVxZoD1axKKqQE2zupuDkLl+fM7vhQlQ5dWK9VqqEaTe
cZoxTPOOWUIx4rvE9vhA/XxVj1k3MbD1OuBGW3NkcCUqtIe6YMKk54It+w==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:31:57 2026 by rpki-client