Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/911d3ba1-2914-4c1d-bbe7-2ba764a8bf28.roa
File:                     911d3ba1-2914-4c1d-bbe7-2ba764a8bf28.roa (raw, json)
Hash identifier:          jdDaD17iR9xisbCzCnOPbZdHgmKNy7ZurfHgUKlBV8A=
Subject key identifier:   37:C9:D1:7C:B6:A9:09:AE:3D:A8:A7:F1:0E:C0:9C:4F:26:60:2A:FE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       26E3399127A5BFB59231F0CE004B30E8294D4C89
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/911d3ba1-2914-4c1d-bbe7-2ba764a8bf28.roa
Signing time:             Sun 21 Jun 2026 00:00:08 +0000
ROA not before:           Sun 21 Jun 2026 00:00:08 +0000
ROA not after:            Sat 19 Sep 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        16.15.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:e3:39:91:27:a5:bf:b5:92:31:f0:ce:00:4b:30:e8:29:4d:4c:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 21 00:00:08 2026 GMT
            Not After : Sep 19 23:59:59 2026 GMT
        Subject: serialNumber=5940f7fe22bea85199f97df7c26b0887340a8b77556214fa6452ab4fe4670c3b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9a:ad:98:7b:51:09:cd:aa:ac:a1:ff:9e:76:
                    de:b6:6c:17:43:00:38:38:ad:68:a9:45:aa:65:ea:
                    a6:a4:cd:ae:08:b7:d2:30:b1:7e:f8:42:e4:c9:2e:
                    fc:d6:e7:83:5a:8e:b7:9c:29:70:b6:c4:3a:8f:e2:
                    5b:43:9e:68:8c:8d:a5:04:40:72:8c:09:46:02:3b:
                    50:c3:b1:1f:d5:b2:65:6f:c8:0b:85:3e:42:3b:43:
                    6c:cd:60:22:18:44:85:4b:f0:eb:e4:a4:6c:5c:32:
                    96:54:60:0e:da:1f:b1:16:cd:fc:93:f1:8d:9d:c7:
                    f7:b2:07:bb:5c:cc:43:07:58:9f:ad:c6:10:46:11:
                    30:00:a6:42:cc:20:fe:cf:3d:3e:2d:84:ef:32:91:
                    3c:97:7e:e7:31:17:3f:33:a1:61:68:0c:f0:10:58:
                    f9:70:07:0c:4c:c8:2f:53:be:a1:8c:57:e8:6f:46:
                    ac:6f:ef:28:99:3c:26:88:12:b5:5a:58:e8:68:e7:
                    14:f7:ff:4a:80:a0:55:0d:b1:95:82:04:31:6f:09:
                    a4:1a:67:9d:90:2f:29:56:a7:5e:7f:d1:96:9d:e1:
                    a4:05:c0:90:e3:5e:fb:ab:6e:b8:4c:26:00:fa:c9:
                    08:f1:1a:3d:86:ac:1b:ac:6a:db:17:77:53:e8:a2:
                    b1:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:C9:D1:7C:B6:A9:09:AE:3D:A8:A7:F1:0E:C0:9C:4F:26:60:2A:FE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/911d3ba1-2914-4c1d-bbe7-2ba764a8bf28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.15.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b1:85:bd:59:cd:be:5b:30:95:43:9e:fa:2b:70:4b:34:66:3b:
         e7:a0:ba:56:eb:cc:a7:3c:12:d8:e3:50:31:ad:2a:05:14:94:
         f8:ea:fd:5c:06:c8:19:7f:87:e3:1f:b0:e8:80:be:62:4c:73:
         32:1e:2b:27:bb:8b:8c:b0:e8:7c:d5:42:11:ac:36:b0:37:ac:
         b4:09:c6:95:ed:4f:cf:fa:34:1a:e0:be:f3:a7:11:26:fe:e6:
         b1:1f:ce:64:95:52:03:3d:5c:d8:39:7c:42:e4:3c:df:28:21:
         ae:41:62:5c:96:f9:56:1a:af:c8:54:c3:21:02:b5:f4:c2:58:
         8e:14:1e:b3:14:dd:e5:3b:66:28:72:47:0e:89:98:f5:7a:17:
         73:e0:ba:91:d9:17:b2:c6:ff:eb:69:2d:b4:87:5a:4a:61:bb:
         15:e9:3c:3c:23:d4:ad:78:d6:f2:8f:16:73:d8:32:c2:4b:9e:
         74:c3:cd:4b:ef:c8:d8:df:76:32:30:46:af:f1:f1:e3:69:7d:
         b5:d7:bf:27:11:92:cf:75:40:22:7a:cf:7d:77:c0:30:9d:4e:
         e3:8b:0c:10:fe:f7:c0:b7:9f:93:9b:ed:87:4d:bd:ef:53:54:
         91:68:d5:30:44:79:82:ff:0b:cc:b9:8f:39:9a:d6:07:5e:42:
         5a:e0:46:c5
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUJuM5kSelv7WSMfDOAEsw6ClNTIkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNjIxMDAwMDA4WhcNMjYwOTE5MjM1OTU5
WjB6MUkwRwYDVQQFE0A1OTQwZjdmZTIyYmVhODUxOTlmOTdkZjdjMjZiMDg4NzM0
MGE4Yjc3NTU2MjE0ZmE2NDUyYWI0ZmU0NjcwYzNiMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC6mq2Ye1EJzaqsof+edt62bBdDADg4rWipRapl6qakza4I
t9IwsX74QuTJLvzW54NajrecKXC2xDqP4ltDnmiMjaUEQHKMCUYCO1DDsR/VsmVv
yAuFPkI7Q2zNYCIYRIVL8OvkpGxcMpZUYA7aH7EWzfyT8Y2dx/eyB7tczEMHWJ+t
xhBGETAApkLMIP7PPT4thO8ykTyXfucxFz8zoWFoDPAQWPlwBwxMyC9TvqGMV+hv
Rqxv7yiZPCaIErVaWOho5xT3/0qAoFUNsZWCBDFvCaQaZ52QLylWp15/0Zad4aQF
wJDjXvurbrhMJgD6yQjxGj2GrBusatsXd1PoorHFAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUN8nRfLapCa49qKfxDsCcTyZgKv4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzkxMWQzYmExLTI5MTQtNGMxZC1iYmU3LTJiYTc2NGE4YmYyOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIQDywwDQYJKoZIhvcNAQELBQADggEBALGFvVnNvlswlUOe+itwSzRmO+eg
ulbrzKc8EtjjUDGtKgUUlPjq/VwGyBl/h+MfsOiAvmJMczIeKye7i4yw6HzVQhGs
NrA3rLQJxpXtT8/6NBrgvvOnESb+5rEfzmSVUgM9XNg5fELkPN8oIa5BYlyW+VYa
r8hUwyECtfTCWI4UHrMU3eU7ZihyRw6JmPV6F3PgupHZF7LG/+tpLbSHWkphuxXp
PDwj1K141vKPFnPYMsJLnnTDzUvvyNjfdjIwRq/x8eNpfbXXvycRks91QCJ6z313
wDCdTuOLDBD+98C3n5Ob7YdNve9TVJFo1TBEeYL/C8y5jzma1gdeQlrgRsU=
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:31:54 2026 by rpki-client