Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/783c511e-5fb0-4300-843c-c199f004156b.roa
File:                     783c511e-5fb0-4300-843c-c199f004156b.roa (raw, json)
Hash identifier:          KizlIDo8XgVfEflIe96LdM4vUxJr2cIQ0c94EZyUiEs=
Subject key identifier:   AC:12:01:A6:F3:37:84:B6:C8:6C:1C:27:93:69:5B:75:6B:F3:B9:E1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4A7D519447C21AD8B6375E0D9FF6C33A58932056
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/783c511e-5fb0-4300-843c-c199f004156b.roa
Signing time:             Fri 17 Jul 2026 00:00:07 +0000
ROA not before:           Fri 17 Jul 2026 00:00:07 +0000
ROA not after:            Thu 15 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        168.203.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:7d:51:94:47:c2:1a:d8:b6:37:5e:0d:9f:f6:c3:3a:58:93:20:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 17 00:00:07 2026 GMT
            Not After : Oct 15 23:59:59 2026 GMT
        Subject: serialNumber=ca13b493a9bd098ab3756c6a64beac7db666365bbf728de523138b1b4d1b5077, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:27:55:20:dc:e8:6b:31:36:d5:4d:a2:44:e8:
                    25:c5:a7:0f:d3:d0:63:bf:04:bc:82:27:bb:68:59:
                    49:2d:56:08:f9:2c:e8:0e:15:e5:3e:40:17:1c:86:
                    3f:d7:d6:43:04:5a:f1:cd:da:67:73:6b:99:46:1d:
                    73:e7:ca:46:0e:21:b4:2d:1b:74:05:58:03:c0:b7:
                    0f:60:19:f6:4c:a3:38:44:3e:62:75:09:8f:9d:2d:
                    a6:66:00:30:9c:db:55:b8:53:87:d3:af:40:35:7c:
                    a6:06:98:e4:e7:e5:93:75:5b:d9:be:9e:9f:34:d4:
                    e1:f2:7c:98:f4:2d:f7:99:f3:86:98:71:b6:c3:58:
                    d2:b6:c0:5e:78:d6:51:da:53:0b:d7:11:43:29:a5:
                    3f:39:f6:85:0f:b6:6e:ee:26:cc:55:5c:97:c0:bd:
                    25:7d:08:d5:16:61:1c:4a:17:1f:97:61:73:2d:12:
                    aa:ee:14:f9:56:6b:07:c2:94:7e:ba:04:02:00:26:
                    4d:94:0d:06:6b:21:74:73:9c:fe:45:2c:77:37:88:
                    fc:1b:6e:69:be:7b:a3:f8:49:04:c8:fb:52:8f:e4:
                    97:3f:bf:e9:f5:88:05:6c:99:e9:b4:ee:c4:1c:61:
                    ab:6a:a0:1e:d8:98:32:61:fc:23:42:3c:4b:fa:32:
                    2a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:12:01:A6:F3:37:84:B6:C8:6C:1C:27:93:69:5B:75:6B:F3:B9:E1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/783c511e-5fb0-4300-843c-c199f004156b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.203.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         24:58:61:16:ef:c5:20:1b:06:12:a8:6e:f1:d1:ee:6d:ad:df:
         4e:dd:b3:9d:1e:00:9e:69:e7:c1:b5:8f:d1:67:0c:6a:8a:3d:
         ee:8b:60:94:d3:32:68:2b:83:f1:97:69:25:3f:4e:e5:5c:d2:
         38:33:31:27:08:16:01:6d:44:e0:65:4c:af:64:e8:98:f9:6d:
         53:2a:de:53:5d:41:c9:36:41:5f:a5:2f:d4:43:38:94:1c:20:
         25:0b:8e:bd:bc:60:5f:e7:f4:84:56:97:67:47:b8:71:4c:82:
         b7:1c:50:31:b6:25:77:3a:0b:3e:8f:ad:8f:90:f4:7d:b3:42:
         01:04:fb:49:42:e3:7a:47:e5:82:fc:b8:e0:41:57:12:f4:87:
         ee:47:15:22:4c:c6:4e:ee:37:6a:db:90:36:d9:05:fb:c9:9f:
         fb:10:ec:f7:37:48:fc:61:e5:c0:a4:b6:53:6b:97:da:fd:78:
         6a:c6:ab:f4:01:cf:34:4c:7f:94:a9:64:ef:9c:18:76:3a:4d:
         4a:39:45:41:22:f3:ab:c0:6a:59:77:1f:64:ad:03:fb:df:83:
         29:0f:66:7b:aa:5a:a1:ad:bd:9d:65:93:f7:cf:1b:04:ad:69:
         e5:29:e0:7e:86:92:1e:87:c4:d0:af:59:03:5f:ba:85:75:85:
         32:f2:20:a2
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUSn1RlEfCGti2N14Nn/bDOliTIFYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzE3MDAwMDA3WhcNMjYxMDE1MjM1OTU5
WjB6MUkwRwYDVQQFE0BjYTEzYjQ5M2E5YmQwOThhYjM3NTZjNmE2NGJlYWM3ZGI2
NjYzNjViYmY3MjhkZTUyMzEzOGIxYjRkMWI1MDc3MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCbJ1Ug3OhrMTbVTaJE6CXFpw/T0GO/BLyCJ7toWUktVgj5
LOgOFeU+QBcchj/X1kMEWvHN2mdza5lGHXPnykYOIbQtG3QFWAPAtw9gGfZMozhE
PmJ1CY+dLaZmADCc21W4U4fTr0A1fKYGmOTn5ZN1W9m+np801OHyfJj0LfeZ84aY
cbbDWNK2wF541lHaUwvXEUMppT859oUPtm7uJsxVXJfAvSV9CNUWYRxKFx+XYXMt
EqruFPlWawfClH66BAIAJk2UDQZrIXRznP5FLHc3iPwbbmm+e6P4SQTI+1KP5Jc/
v+n1iAVsmem07sQcYatqoB7YmDJh/CNCPEv6MioVAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUrBIBpvM3hLbIbBwnk2lbdWvzueEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzc4M2M1MTFlLTVmYjAtNDMwMC04NDNjLWMxOTlmMDA0MTU2Yi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAeoy4AwDQYJKoZIhvcNAQELBQADggEBACRYYRbvxSAbBhKobvHR7m2t307d
s50eAJ5p58G1j9FnDGqKPe6LYJTTMmgrg/GXaSU/TuVc0jgzMScIFgFtROBlTK9k
6Jj5bVMq3lNdQck2QV+lL9RDOJQcICULjr28YF/n9IRWl2dHuHFMgrccUDG2JXc6
Cz6PrY+Q9H2zQgEE+0lC43pH5YL8uOBBVxL0h+5HFSJMxk7uN2rbkDbZBfvJn/sQ
7Pc3SPxh5cCktlNrl9r9eGrGq/QBzzRMf5SpZO+cGHY6TUo5RUEi86vAall3H2St
A/vfgykPZnuqWqGtvZ1lk/fPGwStaeUp4H6Gkh6HxNCvWQNfuoV1hTLyIKI=
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:39:25 2026 by rpki-client