Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d5d31b7-d7b5-496b-b89b-56f76cf1b6e7.roa
File:                     4d5d31b7-d7b5-496b-b89b-56f76cf1b6e7.roa (raw, json)
Hash identifier:          ug/TnYQtcir9yFXGZoWSgB5awe9gMJ8Af5QDB+7mTzc=
Subject key identifier:   9C:AB:58:C3:84:8E:E2:FF:BB:18:07:AB:61:CB:5A:E9:6C:61:FF:81
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       31AF0101B49EFB29C478FBEA06B6F3FD71F449BA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d5d31b7-d7b5-496b-b89b-56f76cf1b6e7.roa
Signing time:             Wed 15 Jul 2026 00:00:12 +0000
ROA not before:           Wed 15 Jul 2026 00:00:12 +0000
ROA not after:            Tue 13 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        182.26.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:af:01:01:b4:9e:fb:29:c4:78:fb:ea:06:b6:f3:fd:71:f4:49:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 15 00:00:12 2026 GMT
            Not After : Oct 13 23:59:59 2026 GMT
        Subject: serialNumber=001f99b01ccb6f6b21ec49e48b29ed4f93dab2f0414ebcb0a684238c33840bae, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:2a:38:6d:d7:f9:15:38:76:1b:ba:e3:5b:5e:
                    7f:0b:1f:7a:d7:a3:08:bb:51:fa:78:4c:77:f1:0b:
                    cb:24:bf:44:7f:89:7e:21:75:1c:31:73:1a:93:1b:
                    8e:80:78:2c:e0:d7:dd:66:46:70:57:3c:33:c8:84:
                    5b:9a:be:9f:ff:ef:b6:bb:5d:18:ad:97:89:92:cc:
                    76:cc:5e:01:8f:ed:f8:bf:4f:16:6a:3b:cd:d9:d2:
                    40:11:bb:b0:64:3a:e8:f2:62:6e:16:bb:31:c6:ac:
                    d9:18:1a:99:f2:43:5e:29:39:81:37:85:35:c0:80:
                    6c:15:3f:7b:41:28:cb:b4:76:ee:17:1c:a3:93:a7:
                    ee:cc:e1:89:b9:b3:56:92:fc:f0:bb:48:2c:6a:39:
                    cd:3e:56:df:f6:fa:46:e4:7d:0f:90:32:24:ad:46:
                    31:28:eb:f8:ae:05:58:6d:9c:f1:6f:3c:4f:76:e3:
                    4e:8d:62:e3:b7:c0:33:87:39:96:6e:89:b2:53:d2:
                    75:8b:11:c6:65:db:f7:50:e4:9f:1d:90:1c:be:39:
                    8c:3e:14:76:2d:96:12:5d:6a:ac:ca:fe:b6:a5:cf:
                    35:e8:b5:c3:05:f4:19:bd:90:aa:0d:d8:16:bc:3e:
                    a1:5b:66:8e:28:1a:da:3e:e0:2c:0c:cf:60:89:75:
                    3b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:AB:58:C3:84:8E:E2:FF:BB:18:07:AB:61:CB:5A:E9:6C:61:FF:81
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d5d31b7-d7b5-496b-b89b-56f76cf1b6e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.26.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         d6:1e:a2:ca:72:27:f9:b1:fe:d2:f2:20:e8:06:c3:a8:5e:62:
         da:4e:f9:04:b6:fa:2b:03:2b:24:9f:64:6b:69:2f:92:b0:2d:
         1f:55:d7:13:a6:98:37:5e:dd:70:c7:2d:44:16:42:ad:af:56:
         ff:42:5d:54:25:4a:3b:44:ee:38:8e:b9:71:b1:02:aa:e1:25:
         08:6a:d0:38:62:d5:c1:28:a1:fe:9f:99:47:2b:a0:ac:db:2d:
         4b:be:6d:a1:9c:7a:5e:de:c6:8c:a8:df:e2:a1:fe:9a:e0:9d:
         14:64:96:15:33:90:71:af:12:ad:a1:4e:af:69:af:02:eb:0e:
         68:06:28:fc:31:17:6b:d8:84:35:68:4e:6f:c0:64:fd:cf:8a:
         d4:6e:f8:92:0a:8d:21:db:6f:c4:df:ec:1f:98:c0:a2:cc:97:
         08:be:0f:c8:95:45:ef:6f:eb:8b:3e:a7:1b:55:c5:fd:a5:e5:
         96:55:2d:ff:35:8c:04:3c:d3:62:7d:8e:e4:c9:ac:8c:ab:de:
         3d:59:dd:d8:1c:62:79:6f:11:d6:bf:ce:d6:0e:a2:99:d9:dc:
         a6:9c:62:99:70:f1:b8:9c:f7:99:5f:65:22:f4:ee:7e:cd:66:
         6a:7b:5c:d1:46:12:0b:75:be:bb:7c:e1:47:9e:73:c3:a1:04:
         5e:6c:6b:5e
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUMa8BAbSe+ynEePvqBrbz/XH0SbowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzE1MDAwMDEyWhcNMjYxMDEzMjM1OTU5
WjB6MUkwRwYDVQQFE0AwMDFmOTliMDFjY2I2ZjZiMjFlYzQ5ZTQ4YjI5ZWQ0Zjkz
ZGFiMmYwNDE0ZWJjYjBhNjg0MjM4YzMzODQwYmFlMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCPKjht1/kVOHYbuuNbXn8LH3rXowi7Ufp4THfxC8skv0R/
iX4hdRwxcxqTG46AeCzg191mRnBXPDPIhFuavp//77a7XRitl4mSzHbMXgGP7fi/
TxZqO83Z0kARu7BkOujyYm4WuzHGrNkYGpnyQ14pOYE3hTXAgGwVP3tBKMu0du4X
HKOTp+7M4Ym5s1aS/PC7SCxqOc0+Vt/2+kbkfQ+QMiStRjEo6/iuBVhtnPFvPE92
406NYuO3wDOHOZZuibJT0nWLEcZl2/dQ5J8dkBy+OYw+FHYtlhJdaqzK/ralzzXo
tcMF9Bm9kKoN2Ba8PqFbZo4oGto+4CwMz2CJdTvnAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUnKtYw4SO4v+7GAerYcta6Wxh/4EwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzRkNWQzMWI3LWQ3YjUtNDk2Yi1iODliLTU2Zjc2Y2YxYjZlNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwG2GjANBgkqhkiG9w0BAQsFAAOCAQEA1h6iynIn+bH+0vIg6AbDqF5i2k75
BLb6KwMrJJ9ka2kvkrAtH1XXE6aYN17dcMctRBZCra9W/0JdVCVKO0TuOI65cbEC
quElCGrQOGLVwSih/p+ZRyugrNstS75toZx6Xt7GjKjf4qH+muCdFGSWFTOQca8S
raFOr2mvAusOaAYo/DEXa9iENWhOb8Bk/c+K1G74kgqNIdtvxN/sH5jAosyXCL4P
yJVF72/riz6nG1XF/aXlllUt/zWMBDzTYn2O5MmsjKvePVnd2BxieW8R1r/O1g6i
mdncppximXDxuJz3mV9lIvTufs1mantc0UYSC3W+u3zhR55zw6EEXmxrXg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:49:52 2026 by rpki-client