Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/51f4cb75-bc47-405a-9a28-48a89ca2a0c4.roa
File:                     51f4cb75-bc47-405a-9a28-48a89ca2a0c4.roa (raw, json)
Hash identifier:          neF98j6VhVPsKeUMrEuQVB/lIhdPzTQKEXDJy9FkSsg=
Subject key identifier:   F0:5A:2A:9D:CE:B8:23:17:3E:29:FB:C4:25:BE:2D:96:39:B3:00:13
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       446A01E3ED1A75CEF8DFE1D4CA90C831ECC8E130
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/51f4cb75-bc47-405a-9a28-48a89ca2a0c4.roa
Signing time:             Mon 20 Jul 2026 00:51:19 +0000
ROA not before:           Mon 20 Jul 2026 00:51:19 +0000
ROA not after:            Sun 18 Oct 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        56.49.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:6a:01:e3:ed:1a:75:ce:f8:df:e1:d4:ca:90:c8:31:ec:c8:e1:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 20 00:51:19 2026 GMT
            Not After : Oct 18 23:59:59 2026 GMT
        Subject: serialNumber=559441b5b3c9b25b8a2efd10b0986d76465c0c232c76c8c135517a1ac37d4b00, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a0:84:fa:54:bd:6d:0e:25:2d:a4:b5:0b:95:
                    9e:28:a8:1d:b6:e0:58:44:4b:70:68:a1:d6:44:be:
                    48:c6:fe:95:4e:07:e2:07:ef:cd:d7:37:26:e4:65:
                    b5:77:c5:26:ab:c6:11:db:e9:52:ea:bf:95:4d:02:
                    ca:a4:78:3c:3a:5f:bc:13:fb:ce:49:00:7b:3a:ac:
                    96:ee:86:b0:74:43:7f:e3:7a:33:50:06:c9:c8:e7:
                    7f:1e:3e:c1:0f:67:17:07:39:c5:e6:1e:1d:89:50:
                    ef:98:d4:a7:c6:af:d2:30:12:04:90:4b:0c:9a:15:
                    b2:b8:dd:08:f0:4f:0c:70:4f:4e:cf:67:a5:f2:1b:
                    f3:28:e3:aa:be:7a:e6:0d:9e:6e:2a:7f:7d:c6:8e:
                    e8:0c:96:a5:b5:6d:dd:ea:70:22:a4:9c:ee:45:39:
                    8a:07:d4:25:b7:bd:2d:22:8b:60:57:b0:6c:ac:ce:
                    2b:88:58:a4:28:81:3b:e8:7d:46:32:61:f5:09:8c:
                    a3:54:a3:ad:18:3b:57:92:52:ed:76:56:77:38:ed:
                    cf:65:e3:a7:a8:a9:e9:4c:9d:c2:c8:40:11:03:6f:
                    ca:91:84:26:18:5a:3d:1e:f4:68:ef:5b:c1:9a:3b:
                    ab:a2:cd:cc:20:d3:5b:5f:03:34:4c:7b:22:3b:5d:
                    ff:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:5A:2A:9D:CE:B8:23:17:3E:29:FB:C4:25:BE:2D:96:39:B3:00:13
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/51f4cb75-bc47-405a-9a28-48a89ca2a0c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.49.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         d1:5a:b9:ee:2b:ae:cd:fa:41:cb:22:75:42:cd:cc:27:c5:7d:
         70:1c:0e:72:e4:d6:8b:8a:92:03:96:ae:d6:da:e7:00:2f:77:
         b7:16:ad:89:ce:5e:8b:f2:14:21:a5:cf:c7:cb:7a:2b:3c:19:
         dc:b2:ee:e3:a5:b9:65:8e:a4:03:ee:a9:86:f8:08:a1:ac:32:
         4b:74:6d:fc:43:47:93:89:c1:12:f8:a7:1b:da:19:0e:44:f3:
         86:ee:20:fb:11:b7:88:12:b5:21:03:ff:eb:f8:1f:8e:b1:2e:
         39:a0:91:33:c6:6c:82:4f:cd:85:2d:1f:57:9b:18:b8:dc:1d:
         a3:7b:c1:c6:02:25:36:eb:af:69:68:c4:3b:e8:de:ce:64:e6:
         d9:10:28:ca:e3:27:23:11:27:78:25:7e:b3:8e:d7:ea:e1:a1:
         8c:69:2d:8d:17:d9:f3:6c:83:b0:40:71:68:bd:37:7f:d8:70:
         0f:14:58:49:15:29:d6:7c:42:67:0a:b5:d1:eb:81:0e:f5:47:
         c4:eb:5e:9e:05:f7:3b:3e:1c:ac:bc:be:e6:5f:d3:8d:00:74:
         93:e0:4b:dd:cf:86:36:eb:c4:70:a9:5d:4b:16:8b:9b:16:57:
         35:aa:49:ce:b7:dd:e8:a2:1f:35:f4:dc:e8:d9:f1:11:d6:e7:
         94:ca:ba:ee
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIURGoB4+0adc743+HUypDIMezI4TAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzIwMDA1MTE5WhcNMjYxMDE4MjM1OTU5
WjB6MUkwRwYDVQQFE0A1NTk0NDFiNWIzYzliMjViOGEyZWZkMTBiMDk4NmQ3NjQ2
NWMwYzIzMmM3NmM4YzEzNTUxN2ExYWMzN2Q0YjAwMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDRoIT6VL1tDiUtpLULlZ4oqB224FhES3BoodZEvkjG/pVO
B+IH783XNybkZbV3xSarxhHb6VLqv5VNAsqkeDw6X7wT+85JAHs6rJbuhrB0Q3/j
ejNQBsnI538ePsEPZxcHOcXmHh2JUO+Y1KfGr9IwEgSQSwyaFbK43QjwTwxwT07P
Z6XyG/Mo46q+euYNnm4qf33GjugMlqW1bd3qcCKknO5FOYoH1CW3vS0ii2BXsGys
ziuIWKQogTvofUYyYfUJjKNUo60YO1eSUu12Vnc47c9l46eoqelMncLIQBEDb8qR
hCYYWj0e9GjvW8GaO6uizcwg01tfAzRMeyI7Xf8lAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQU8Foqnc64Ixc+KfvEJb4tljmzABMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzUxZjRjYjc1LWJjNDctNDA1YS05YTI4LTQ4YTg5Y2EyYTBjNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA4MTANBgkqhkiG9w0BAQsFAAOCAQEA0Vq57iuuzfpByyJ1Qs3MJ8V9cBwO
cuTWi4qSA5au1trnAC93txatic5ei/IUIaXPx8t6KzwZ3LLu46W5ZY6kA+6phvgI
oawyS3Rt/ENHk4nBEvinG9oZDkTzhu4g+xG3iBK1IQP/6/gfjrEuOaCRM8Zsgk/N
hS0fV5sYuNwdo3vBxgIlNuuvaWjEO+jezmTm2RAoyuMnIxEneCV+s47X6uGhjGkt
jRfZ82yDsEBxaL03f9hwDxRYSRUp1nxCZwq10euBDvVHxOtengX3Oz4crLy+5l/T
jQB0k+BL3c+GNuvEcKldSxaLmxZXNapJzrfd6KIfNfTc6NnxEdbnlMq67g==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:04:35 2026 by rpki-client