Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7b274ee9-3def-45fa-85b0-ef7c51561b05.roa
File:                     7b274ee9-3def-45fa-85b0-ef7c51561b05.roa (raw, json)
Hash identifier:          yKRC+Hl1nSv801uQcp5DnaqGytp9Ml+UjpvcJzrLYzg=
Subject key identifier:   67:FC:D9:1E:88:35:AB:6A:5B:99:0E:F6:5C:AB:48:17:AC:65:51:B1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       72478EE1B7597C1E06A740E027A59870FE243851
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7b274ee9-3def-45fa-85b0-ef7c51561b05.roa
Signing time:             Thu 23 Jul 2026 00:20:14 +0000
ROA not before:           Thu 23 Jul 2026 00:20:14 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        93.77.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:47:8e:e1:b7:59:7c:1e:06:a7:40:e0:27:a5:98:70:fe:24:38:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 23 00:20:14 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=24891cfa40b4f73ee6df1ab655f8d962f8aa7414c402eacbd7478ee6f080d5a6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f9:fa:6d:a0:2e:32:1d:bb:a5:67:9e:a0:f6:
                    8c:5f:9f:a7:4e:b8:a2:30:09:aa:e2:22:6f:fc:09:
                    5b:1d:72:9b:21:de:4a:c3:38:51:98:f3:08:3d:ab:
                    55:53:10:e3:84:b1:a2:9f:8d:d1:bb:97:89:ec:d0:
                    ad:88:62:f0:c0:90:36:cb:0e:f4:e3:34:c2:71:9b:
                    e8:d9:d1:17:3a:a9:e9:be:34:5a:0b:1e:6f:5d:37:
                    d2:6c:cb:91:91:37:29:d9:69:d6:de:83:27:af:b4:
                    95:63:52:b8:20:8d:cb:28:4f:db:8b:05:14:57:ea:
                    21:3d:85:78:b6:d4:73:b0:cf:c4:49:6b:0d:be:83:
                    f2:35:54:82:b0:63:f8:6a:68:65:69:81:8a:11:24:
                    7d:e5:e7:1a:73:87:29:55:7d:a4:dd:d4:73:4c:60:
                    48:e3:31:0e:cc:6f:e0:2a:7c:2d:99:8f:8f:50:9b:
                    9b:4b:2c:ad:83:6f:01:f0:66:ab:99:0a:0c:09:f9:
                    e7:91:59:4f:79:5a:68:df:9e:49:4b:29:3c:f1:46:
                    e9:39:b3:c4:03:df:54:b3:c2:df:50:24:d9:12:a4:
                    71:69:d1:fa:74:dc:83:65:79:8f:c4:b1:8f:26:c9:
                    70:d7:77:54:77:7e:05:8f:a7:d5:8d:c5:f3:82:1e:
                    4a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:FC:D9:1E:88:35:AB:6A:5B:99:0E:F6:5C:AB:48:17:AC:65:51:B1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7b274ee9-3def-45fa-85b0-ef7c51561b05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.77.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:fb:44:64:98:2e:20:5a:9d:26:0c:1d:af:35:4e:ab:17:b0:
         e5:fb:c3:e9:79:7d:8f:12:fc:c6:19:7a:8f:5d:f1:57:fa:79:
         df:96:ad:4e:dc:5e:23:51:e2:76:b7:f4:a0:73:bd:f2:63:ce:
         ae:cd:00:3a:da:d1:b9:6e:68:9c:77:59:97:7f:02:de:35:21:
         f9:14:c4:06:f2:ce:19:2d:ec:1c:67:20:0a:b0:bf:3a:25:b9:
         ab:c5:bb:6f:9c:88:30:7d:e2:d1:64:b9:24:1d:e2:a7:a6:31:
         c9:11:09:11:c5:13:80:d1:a6:65:7a:a9:9b:fb:1e:38:ad:3d:
         e4:47:f4:c1:79:f0:a3:f2:4d:ad:29:0d:11:08:df:89:44:20:
         6e:77:1b:87:e1:78:84:fe:ba:68:02:98:18:53:e1:22:09:42:
         8f:72:93:a6:d5:43:bc:4e:0a:be:ca:3a:4f:bf:e2:e4:30:f7:
         4c:b7:c4:dc:9a:be:9d:ea:c6:26:fa:f3:df:73:28:e8:a8:90:
         da:dd:a1:cb:2f:15:e7:a8:60:8e:ec:9a:8e:0f:7e:e7:59:8e:
         23:0e:85:40:b7:db:95:37:75:22:91:a8:c6:bd:07:ff:51:84:
         ec:97:03:a0:61:cd:1d:79:99:fc:81:6e:f7:6c:5a:f9:0e:74:
         84:ab:85:69
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUckeO4bdZfB4Gp0DgJ6WYcP4kOFEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzIzMDAyMDE0WhcNMjYxMDIxMjM1OTU5
WjB6MUkwRwYDVQQFE0AyNDg5MWNmYTQwYjRmNzNlZTZkZjFhYjY1NWY4ZDk2MmY4
YWE3NDE0YzQwMmVhY2JkNzQ3OGVlNmYwODBkNWE2MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDV+fptoC4yHbulZ56g9oxfn6dOuKIwCariIm/8CVsdcpsh
3krDOFGY8wg9q1VTEOOEsaKfjdG7l4ns0K2IYvDAkDbLDvTjNMJxm+jZ0Rc6qem+
NFoLHm9dN9Jsy5GRNynZadbegyevtJVjUrggjcsoT9uLBRRX6iE9hXi21HOwz8RJ
aw2+g/I1VIKwY/hqaGVpgYoRJH3l5xpzhylVfaTd1HNMYEjjMQ7Mb+AqfC2Zj49Q
m5tLLK2DbwHwZquZCgwJ+eeRWU95WmjfnklLKTzxRuk5s8QD31Szwt9QJNkSpHFp
0fp03INleY/EsY8myXDXd1R3fgWPp9WNxfOCHkoHAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUZ/zZHog1q2pbmQ72XKtIF6xlUbEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzdiMjc0ZWU5LTNkZWYtNDVmYS04NWIwLWVmN2M1MTU2MWIwNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABdTZ0wDQYJKoZIhvcNAQELBQADggEBALb7RGSYLiBanSYMHa81TqsXsOX7
w+l5fY8S/MYZeo9d8Vf6ed+WrU7cXiNR4na39KBzvfJjzq7NADra0bluaJx3WZd/
At41IfkUxAbyzhkt7BxnIAqwvzoluavFu2+ciDB94tFkuSQd4qemMckRCRHFE4DR
pmV6qZv7HjitPeRH9MF58KPyTa0pDREI34lEIG53G4fheIT+umgCmBhT4SIJQo9y
k6bVQ7xOCr7KOk+/4uQw90y3xNyavp3qxib6899zKOiokNrdocsvFeeoYI7smo4P
fudZjiMOhUC325U3dSKRqMa9B/9RhOyXA6BhzR15mfyBbvdsWvkOdISrhWk=
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:32:41 2026 by rpki-client