Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/56a4c90e-d5c2-475d-a4e9-7ae6f470dc75.roa
File:                     56a4c90e-d5c2-475d-a4e9-7ae6f470dc75.roa (raw, json)
Hash identifier:          lDVqbih13Dh8bapIZC5AZH7ynHVW4YeQA1vPUNEqvHc=
Subject key identifier:   BE:AD:01:65:A8:21:76:76:82:CE:55:99:11:01:A0:08:67:70:BA:B8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6FB98527FFFFFB16652A7DD9E60340CF1F49DAA9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/56a4c90e-d5c2-475d-a4e9-7ae6f470dc75.roa
Signing time:             Sat 18 Jul 2026 00:30:14 +0000
ROA not before:           Sat 18 Jul 2026 00:30:14 +0000
ROA not after:            Fri 16 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        216.40.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:b9:85:27:ff:ff:fb:16:65:2a:7d:d9:e6:03:40:cf:1f:49:da:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 18 00:30:14 2026 GMT
            Not After : Oct 16 23:59:59 2026 GMT
        Subject: serialNumber=1f15472d39bf4fa5c1da42f0c902331029b82a5852d2a93680dc9861e3e50049, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2d:a4:a6:22:aa:7a:c9:6a:ee:a7:65:d4:5a:
                    95:ed:64:6e:20:d1:65:0c:89:27:aa:36:8d:1f:ec:
                    b4:ff:4d:a8:d7:6f:3f:80:94:bc:c5:c2:c8:a3:ee:
                    58:e6:14:63:27:44:31:71:20:4d:4a:ab:b4:3f:11:
                    76:10:a7:18:6d:d3:b6:36:fa:c2:36:7a:49:83:cf:
                    39:b3:ec:1a:29:38:1e:e6:31:c4:ef:0c:e3:44:24:
                    66:0d:7c:e7:bf:4f:90:a4:56:2b:8c:82:2b:cb:c4:
                    98:f0:3c:ff:8f:25:f6:cf:86:30:cd:93:5e:f3:64:
                    71:bc:b6:f1:34:e5:1b:5d:7c:56:30:03:cb:e2:93:
                    72:f8:a8:e9:b5:5f:5a:fd:71:0e:a1:74:ec:b4:bb:
                    5c:16:c8:c4:3f:b2:b4:0c:d8:32:ca:ef:34:b1:bd:
                    e6:53:25:be:4d:82:34:d9:5e:04:a9:71:0d:69:b6:
                    0c:83:44:3b:3f:1b:2f:39:c9:2f:b5:a9:29:7e:a2:
                    48:16:f1:cd:40:a6:6b:0c:4b:8d:48:aa:74:c3:e7:
                    42:61:31:8e:0b:ff:3d:c8:97:e6:81:e1:ea:8c:e2:
                    3d:73:a2:49:df:8a:db:26:df:11:05:9a:e5:c1:6f:
                    ea:69:79:71:12:55:b3:9f:bf:7f:13:c4:58:69:a6:
                    ef:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:AD:01:65:A8:21:76:76:82:CE:55:99:11:01:A0:08:67:70:BA:B8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/56a4c90e-d5c2-475d-a4e9-7ae6f470dc75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.40.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         9e:35:e5:3b:f4:d5:f3:c2:bd:07:da:7b:5d:9c:16:68:bb:93:
         04:a0:c1:d1:08:0c:01:48:a8:63:a0:49:7f:12:38:32:82:49:
         a2:ac:d1:d0:5c:94:c1:e9:ba:f1:9e:3d:41:90:a5:c1:06:e8:
         b6:4a:7b:65:ef:ff:21:82:1c:86:ab:8e:97:f6:5e:02:58:b4:
         99:86:65:5a:a9:1f:a3:ad:22:37:11:b0:86:11:4a:72:86:ba:
         21:7d:05:ad:f7:22:18:aa:42:a3:1b:c5:a5:c4:7a:e2:10:b7:
         0f:e3:fb:c3:ac:60:7a:de:4a:6b:66:f3:d8:d6:14:3d:ff:44:
         a9:73:2d:dc:01:2a:19:31:28:19:28:0a:d4:5f:82:37:48:1d:
         f2:d3:51:ff:a4:4e:74:48:fa:1b:54:78:57:22:28:82:59:dd:
         03:cc:25:07:8f:c4:1c:21:d6:e7:36:52:72:97:a0:f0:59:eb:
         d4:5f:49:c0:92:84:b6:65:16:75:c8:cc:72:2e:f6:e4:20:cb:
         63:30:d4:52:88:34:23:88:b2:2d:f2:92:d2:17:33:d0:5f:25:
         ee:2a:0f:5b:db:0d:21:f5:c0:60:12:4d:de:51:5e:b9:06:a5:
         2a:87:27:fd:6b:1d:87:63:c9:45:a2:e9:1a:a5:a7:14:d4:ca:
         9b:e6:92:67
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUb7mFJ///+xZlKn3Z5gNAzx9J2qkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzE4MDAzMDE0WhcNMjYxMDE2MjM1OTU5
WjB6MUkwRwYDVQQFE0AxZjE1NDcyZDM5YmY0ZmE1YzFkYTQyZjBjOTAyMzMxMDI5
YjgyYTU4NTJkMmE5MzY4MGRjOTg2MWUzZTUwMDQ5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDWLaSmIqp6yWrup2XUWpXtZG4g0WUMiSeqNo0f7LT/TajX
bz+AlLzFwsij7ljmFGMnRDFxIE1Kq7Q/EXYQpxht07Y2+sI2ekmDzzmz7BopOB7m
McTvDONEJGYNfOe/T5CkViuMgivLxJjwPP+PJfbPhjDNk17zZHG8tvE05RtdfFYw
A8vik3L4qOm1X1r9cQ6hdOy0u1wWyMQ/srQM2DLK7zSxveZTJb5NgjTZXgSpcQ1p
tgyDRDs/Gy85yS+1qSl+okgW8c1ApmsMS41IqnTD50JhMY4L/z3Il+aB4eqM4j1z
oknfitsm3xEFmuXBb+ppeXESVbOfv38TxFhppu/9AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUvq0BZaghdnaCzlWZEQGgCGdwurgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzU2YTRjOTBlLWQ1YzItNDc1ZC1hNGU5LTdhZTZmNDcwZGM3NS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAbYKIAwDQYJKoZIhvcNAQELBQADggEBAJ415Tv01fPCvQfae12cFmi7kwSg
wdEIDAFIqGOgSX8SODKCSaKs0dBclMHpuvGePUGQpcEG6LZKe2Xv/yGCHIarjpf2
XgJYtJmGZVqpH6OtIjcRsIYRSnKGuiF9Ba33IhiqQqMbxaXEeuIQtw/j+8OsYHre
Smtm89jWFD3/RKlzLdwBKhkxKBkoCtRfgjdIHfLTUf+kTnRI+htUeFciKIJZ3QPM
JQePxBwh1uc2UnKXoPBZ69RfScCShLZlFnXIzHIu9uQgy2Mw1FKINCOIsi3yktIX
M9BfJe4qD1vbDSH1wGASTd5RXrkGpSqHJ/1rHYdjyUWi6RqlpxTUypvmkmc=
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:35:44 2026 by rpki-client