Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/142a47d1-ea7b-41a3-8dc1-1ae882f845c2.roa
File:                     142a47d1-ea7b-41a3-8dc1-1ae882f845c2.roa (raw, json)
Hash identifier:          bba9Pse+nQISnknxK3pt1GlgEeoK3uEZ6ujbcEaLPaY=
Subject key identifier:   D0:12:AB:56:76:39:00:60:28:EF:46:BB:3E:A7:83:33:DB:E2:70:DB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4A277F72B8617CB41848A0EA5D5EBBFFE7062878
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/142a47d1-ea7b-41a3-8dc1-1ae882f845c2.roa
Signing time:             Thu 23 Jul 2026 00:40:08 +0000
ROA not before:           Thu 23 Jul 2026 00:40:08 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        99.82.156.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:27:7f:72:b8:61:7c:b4:18:48:a0:ea:5d:5e:bb:ff:e7:06:28:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 23 00:40:08 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=207551e4b7a2c7566fcc7475ce8de985ae7b8d37694f14bfe905f1379772dc67, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:0f:b1:c8:97:90:1a:1a:23:22:78:4f:39:8d:
                    df:af:84:26:e1:72:20:8a:fb:bf:19:76:01:a8:d5:
                    06:d9:0b:73:b5:1a:c1:77:b5:f3:59:63:d2:cf:b8:
                    94:9a:3e:43:0c:af:8a:51:b0:9e:0c:ae:0f:7d:18:
                    29:c3:06:a0:aa:ad:2c:17:5c:8d:11:59:f7:7b:09:
                    5d:d9:59:15:c8:7b:99:63:ef:12:b2:2b:df:74:53:
                    7b:0a:9e:81:29:6e:f0:5e:7c:08:8b:77:ec:d7:9f:
                    50:ab:2e:85:3e:d1:a8:d1:b4:6a:e3:9a:23:c4:ca:
                    c8:69:e0:5e:fb:82:c0:c2:b7:94:33:52:5d:36:c7:
                    ce:ef:8f:22:f5:a6:28:ba:93:48:e4:3b:01:07:f6:
                    92:2a:f8:55:33:62:41:11:d3:88:28:44:d5:c4:20:
                    f6:62:0a:9e:fb:30:e0:db:5c:0b:44:be:3d:e4:f5:
                    fc:8f:2c:95:60:76:30:f0:03:49:d0:f6:8a:d0:f5:
                    8a:12:a1:eb:9a:c0:39:94:04:a2:17:10:3f:e2:14:
                    7b:04:c4:22:39:74:cb:73:50:96:0d:d5:10:dc:63:
                    50:2f:80:c9:3a:db:3a:6d:db:00:68:0f:4b:61:2a:
                    d9:8a:5f:da:2b:da:40:bf:02:ae:db:de:16:c6:04:
                    09:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:12:AB:56:76:39:00:60:28:EF:46:BB:3E:A7:83:33:DB:E2:70:DB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/142a47d1-ea7b-41a3-8dc1-1ae882f845c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.82.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ca:5d:66:21:22:f7:97:44:4d:3f:51:46:5c:a7:16:97:2e:54:
         15:6f:6f:64:8d:71:90:b9:45:aa:db:9a:2d:dc:c9:6d:7d:30:
         b9:67:74:c7:54:d3:1e:48:5e:42:53:8f:34:69:a0:a4:2c:97:
         b3:7d:6d:0a:79:b3:46:f9:8c:76:e6:7b:82:ae:c0:4d:70:70:
         a8:05:d6:73:8a:c3:ce:a3:fb:d1:b1:8c:b7:4b:af:47:5f:e3:
         4e:6d:d2:6e:78:ba:de:6f:66:b9:43:49:30:c8:0d:46:2f:31:
         9a:aa:77:a5:55:b9:65:32:4c:1d:a9:9b:0f:0f:12:e1:74:95:
         a5:06:8d:41:8b:56:f3:5c:b7:41:1e:6e:57:d7:34:9a:80:b5:
         06:b6:99:a8:0a:a2:a9:a4:7a:ea:be:31:14:e9:1c:95:cf:2d:
         8d:5a:d2:e4:93:2e:62:00:36:d0:20:13:bf:f4:c6:f5:b9:03:
         da:59:e1:cd:c2:00:fc:53:19:9e:ae:46:bc:e2:1e:e3:c9:5b:
         29:38:b2:82:78:d7:b9:5e:4f:da:fc:58:4c:fc:ce:35:08:a8:
         9b:76:2d:ed:39:83:c3:e8:fb:58:39:21:45:05:f0:90:dd:9b:
         58:17:4f:6f:70:17:91:2e:45:01:a5:15:b4:2c:ff:fb:8b:ff:
         ca:38:be:39
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUSid/crhhfLQYSKDqXV67/+cGKHgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzIzMDA0MDA4WhcNMjYxMDIxMjM1OTU5
WjB6MUkwRwYDVQQFE0AyMDc1NTFlNGI3YTJjNzU2NmZjYzc0NzVjZThkZTk4NWFl
N2I4ZDM3Njk0ZjE0YmZlOTA1ZjEzNzk3NzJkYzY3MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDPD7HIl5AaGiMieE85jd+vhCbhciCK+78ZdgGo1QbZC3O1
GsF3tfNZY9LPuJSaPkMMr4pRsJ4Mrg99GCnDBqCqrSwXXI0RWfd7CV3ZWRXIe5lj
7xKyK990U3sKnoEpbvBefAiLd+zXn1CrLoU+0ajRtGrjmiPEyshp4F77gsDCt5Qz
Ul02x87vjyL1pii6k0jkOwEH9pIq+FUzYkER04goRNXEIPZiCp77MODbXAtEvj3k
9fyPLJVgdjDwA0nQ9orQ9YoSoeuawDmUBKIXED/iFHsExCI5dMtzUJYN1RDcY1Av
gMk62zpt2wBoD0thKtmKX9or2kC/Aq7b3hbGBAllAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU0BKrVnY5AGAo70a7PqeDM9vicNswHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzE0MmE0N2QxLWVhN2ItNDFhMy04ZGMxLTFhZTg4MmY4NDVjMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAJjUpwwDQYJKoZIhvcNAQELBQADggEBAMpdZiEi95dETT9RRlynFpcuVBVv
b2SNcZC5Rarbmi3cyW19MLlndMdU0x5IXkJTjzRpoKQsl7N9bQp5s0b5jHbme4Ku
wE1wcKgF1nOKw86j+9GxjLdLr0df405t0m54ut5vZrlDSTDIDUYvMZqqd6VVuWUy
TB2pmw8PEuF0laUGjUGLVvNct0EeblfXNJqAtQa2magKoqmkeuq+MRTpHJXPLY1a
0uSTLmIANtAgE7/0xvW5A9pZ4c3CAPxTGZ6uRrziHuPJWyk4soJ417leT9r8WEz8
zjUIqJt2Le05g8Po+1g5IUUF8JDdm1gXT29wF5EuRQGlFbQs//uL/8o4vjk=
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:33:21 2026 by rpki-client