Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6282f4a8-f1f7-49a0-852f-808c201c5429.roa
File:                     6282f4a8-f1f7-49a0-852f-808c201c5429.roa (raw, json)
Hash identifier:          F1or2jd+lc2fFnPBouUAOXWz0HxofKU9vrjHR8xndQU=
Subject key identifier:   63:AD:6B:6F:54:6A:33:F6:7C:D7:A5:F7:E8:F4:13:B7:04:AC:04:06
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       64A8F6463E6F7DCD507BC28685FA8CE2C68D90A8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6282f4a8-f1f7-49a0-852f-808c201c5429.roa
Signing time:             Thu 23 Jul 2026 00:40:05 +0000
ROA not before:           Thu 23 Jul 2026 00:40:05 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        37.203.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:a8:f6:46:3e:6f:7d:cd:50:7b:c2:86:85:fa:8c:e2:c6:8d:90:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 23 00:40:05 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=b9abdaca804fccd831c54777301652b07d8f8baa5103b267fa298e761ef148b3, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:07:d9:56:72:78:69:c1:17:51:80:4e:f3:6d:
                    07:08:a0:f2:e5:92:b2:d2:26:ac:ef:55:b5:80:d2:
                    40:65:8e:b4:eb:bc:33:49:61:46:ed:9d:76:d8:53:
                    c9:1d:1e:36:09:aa:f6:cf:3a:de:72:7d:04:24:e0:
                    a5:5f:5e:37:7d:30:ac:97:68:bc:79:0d:ca:3f:6c:
                    64:70:36:2c:69:73:9e:e7:68:4a:c5:13:bc:1f:23:
                    76:49:1c:d4:98:9f:37:4a:a2:0b:de:d0:16:c1:67:
                    2f:79:68:0a:bb:f9:c6:fc:e0:c1:6f:ac:e5:90:f8:
                    5f:de:86:66:15:54:a6:af:07:48:af:3d:1b:bd:10:
                    a4:4a:7c:4c:68:43:c9:7a:ba:33:d4:ec:c3:0d:c9:
                    ec:cb:5c:56:77:66:19:ac:04:46:cf:fc:45:1d:3f:
                    9b:e8:38:d9:10:8c:c7:5c:fc:58:8d:a4:73:ed:6a:
                    f9:1d:13:7d:6f:c2:d8:35:2f:07:b9:40:d2:a7:0d:
                    08:12:ee:e8:49:2e:65:2d:ae:ac:64:ba:c1:78:8a:
                    54:c2:d2:87:7c:4b:fd:f6:7d:0d:b5:e4:4d:b3:b8:
                    4f:18:f8:6e:a8:9d:cc:e9:1d:f1:4b:8a:39:cc:df:
                    15:51:9f:58:2e:e0:09:2b:b5:3d:1f:52:10:5c:62:
                    f9:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:AD:6B:6F:54:6A:33:F6:7C:D7:A5:F7:E8:F4:13:B7:04:AC:04:06
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6282f4a8-f1f7-49a0-852f-808c201c5429.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.203.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:48:c7:f4:89:5f:84:68:f9:8d:6d:e9:1d:ad:f7:ea:6c:24:
         52:d9:5a:76:88:00:30:32:5b:f8:75:be:01:42:40:0a:3a:6a:
         89:cb:fa:1f:bd:1a:f5:12:2c:6c:e6:de:47:14:1b:02:1d:8f:
         9b:f1:be:13:e5:a5:45:70:55:f8:42:f1:83:e5:aa:7d:cc:dc:
         2e:21:86:42:e0:2c:ea:c5:b5:b7:85:a8:6b:49:b0:c5:7d:c6:
         6e:62:28:ae:d1:67:54:3e:65:7f:93:56:2f:a6:ab:35:4f:bc:
         b9:bb:3a:84:fa:19:4d:da:7f:32:f3:88:d5:a5:9c:5b:b5:d9:
         07:86:bc:41:c6:21:9c:37:9b:bc:ef:17:ab:b6:f9:11:6d:0c:
         e4:62:ea:b5:3a:ca:59:a0:5b:c6:0c:43:00:3e:90:96:25:d5:
         a9:42:f0:d6:d1:ba:bc:e1:62:a8:5b:27:19:8b:9a:ee:3a:d8:
         00:1e:50:d6:1a:e9:97:15:c6:2a:89:24:88:80:c2:9a:52:19:
         c4:aa:7d:57:53:d2:a3:63:90:73:c3:01:74:e8:dc:37:36:ae:
         57:54:fb:fe:75:47:0e:68:15:d0:0c:2c:23:7d:f1:63:d0:79:
         0a:9b:40:e1:e5:b3:6e:eb:ab:28:0d:d2:8b:33:5c:df:f0:bd:
         af:06:84:c4
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUZKj2Rj5vfc1Qe8KGhfqM4saNkKgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzIzMDA0MDA1WhcNMjYxMDIxMjM1OTU5
WjB6MUkwRwYDVQQFE0BiOWFiZGFjYTgwNGZjY2Q4MzFjNTQ3NzczMDE2NTJiMDdk
OGY4YmFhNTEwM2IyNjdmYTI5OGU3NjFlZjE0OGIzMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCNB9lWcnhpwRdRgE7zbQcIoPLlkrLSJqzvVbWA0kBljrTr
vDNJYUbtnXbYU8kdHjYJqvbPOt5yfQQk4KVfXjd9MKyXaLx5Dco/bGRwNixpc57n
aErFE7wfI3ZJHNSYnzdKogve0BbBZy95aAq7+cb84MFvrOWQ+F/ehmYVVKavB0iv
PRu9EKRKfExoQ8l6ujPU7MMNyezLXFZ3ZhmsBEbP/EUdP5voONkQjMdc/FiNpHPt
avkdE31vwtg1Lwe5QNKnDQgS7uhJLmUtrqxkusF4ilTC0od8S/32fQ215E2zuE8Y
+G6onczpHfFLijnM3xVRn1gu4AkrtT0fUhBcYvkNAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUY61rb1RqM/Z816X36PQTtwSsBAYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzYyODJmNGE4LWYxZjctNDlhMC04NTJmLTgwOGMyMDFjNTQyOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAly7EwDQYJKoZIhvcNAQELBQADggEBAK9Ix/SJX4Ro+Y1t6R2t9+psJFLZ
WnaIADAyW/h1vgFCQAo6aonL+h+9GvUSLGzm3kcUGwIdj5vxvhPlpUVwVfhC8YPl
qn3M3C4hhkLgLOrFtbeFqGtJsMV9xm5iKK7RZ1Q+ZX+TVi+mqzVPvLm7OoT6GU3a
fzLziNWlnFu12QeGvEHGIZw3m7zvF6u2+RFtDORi6rU6ylmgW8YMQwA+kJYl1alC
8NbRurzhYqhbJxmLmu462AAeUNYa6ZcVxiqJJIiAwppSGcSqfVdT0qNjkHPDAXTo
3Dc2rldU+/51Rw5oFdAMLCN98WPQeQqbQOHls27rqygN0oszXN/wva8GhMQ=
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:06:21 2026 by rpki-client