Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a63343bf-20b0-46ed-8758-a3e8f35745cc.roa
File:                     a63343bf-20b0-46ed-8758-a3e8f35745cc.roa (raw, json)
Hash identifier:          vG91Bm1yQsVbSKymO6Ngv53QDlKrRYUGPmCJxqqPXUQ=
Subject key identifier:   BC:71:0C:B8:D2:AC:C7:8F:E7:CB:9C:94:02:8C:6B:CE:72:93:D2:A2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3AEF9203CB97BDD8DD0D4601912246960C6CAB1A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a63343bf-20b0-46ed-8758-a3e8f35745cc.roa
Signing time:             Fri 24 Jul 2026 00:20:41 +0000
ROA not before:           Fri 24 Jul 2026 00:20:41 +0000
ROA not after:            Thu 22 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        184.73.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:ef:92:03:cb:97:bd:d8:dd:0d:46:01:91:22:46:96:0c:6c:ab:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 24 00:20:41 2026 GMT
            Not After : Oct 22 23:59:59 2026 GMT
        Subject: serialNumber=2b4dd340e534736bb16b06575744ac4348a2a9d598852c67e84f19bca14a17b1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:10:73:ae:18:58:77:3b:53:f7:91:7d:31:7b:
                    5b:56:1e:34:e5:5b:f6:37:a5:85:19:34:51:c5:0b:
                    c6:66:ef:d3:1c:84:3c:a0:dd:b8:4c:03:21:94:b0:
                    09:d3:91:e7:4c:8d:12:25:ba:15:25:08:7a:3f:ee:
                    56:86:98:80:dc:d8:24:0d:c7:27:c8:92:c9:9e:f1:
                    20:a6:1a:d6:52:4e:a2:57:d9:e0:ae:13:e0:31:cf:
                    6e:59:e9:63:5a:2b:76:e3:98:ff:88:22:0d:b5:93:
                    d3:16:45:dd:3c:73:70:2a:34:15:4c:a6:fa:a5:e4:
                    0b:18:8b:0e:d6:cd:b4:ca:a5:3e:df:fa:7b:85:a1:
                    4d:f9:e1:ae:25:e5:b8:da:40:ef:eb:e1:9d:b6:8c:
                    9c:4b:7b:5b:b1:66:26:4c:54:a0:96:8e:a4:6e:a2:
                    d5:7d:f6:76:50:f4:54:6e:ab:9f:1d:14:6c:46:f4:
                    c4:dc:07:48:8d:50:04:ed:b8:5a:04:de:c0:cd:f7:
                    21:9b:da:e2:a2:16:0f:0d:f2:cb:32:dc:72:c6:ca:
                    a4:ac:68:06:ba:6b:0a:19:f8:14:e9:12:de:9d:9c:
                    07:34:1e:16:24:6a:6e:08:49:b3:94:d8:f7:ae:32:
                    d7:99:a0:45:0f:d8:27:68:68:f6:37:0b:60:b1:b0:
                    f3:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:71:0C:B8:D2:AC:C7:8F:E7:CB:9C:94:02:8C:6B:CE:72:93:D2:A2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a63343bf-20b0-46ed-8758-a3e8f35745cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.73.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         02:fd:fe:63:35:51:9f:7c:4b:ef:86:8b:97:13:cc:3a:fc:52:
         61:18:9e:56:57:15:58:a9:8d:c7:51:05:fd:96:cd:e7:bd:a8:
         ee:8a:91:83:54:38:fc:62:d3:4c:d0:f1:e6:52:eb:a2:8e:82:
         69:81:96:b6:d3:7b:54:71:51:3d:a3:96:2c:9c:7b:b7:ef:8d:
         9d:fe:cd:c1:bf:42:14:a0:c2:db:b0:a0:dd:d4:71:00:14:92:
         60:6f:de:7c:0c:a4:21:35:93:a0:b4:5e:2b:5e:8e:9a:d2:1f:
         bc:8c:bd:21:cc:b1:cb:e3:31:bc:f2:14:dd:37:70:7c:e3:87:
         d4:78:c2:f4:97:fd:e7:ae:5b:9f:36:ee:87:5e:32:9f:a6:1e:
         d3:8f:51:5e:67:88:cb:a1:9d:b4:30:0e:7e:47:ec:f2:27:26:
         68:32:9c:ef:23:05:1e:bf:05:17:21:5d:71:27:67:32:5b:e5:
         67:e4:d8:69:59:dc:44:7f:9c:11:89:fc:1e:d3:99:44:f0:a1:
         41:85:18:5b:21:26:3e:ee:ac:eb:19:f7:d3:3c:c4:04:1f:3e:
         fe:06:1a:2d:f8:da:68:98:8c:dd:d9:4c:1a:27:a4:27:bf:dc:
         e3:c7:55:e5:26:0b:c1:f6:08:fb:4f:31:93:95:60:82:ce:e1:
         68:53:b5:56
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUOu+SA8uXvdjdDUYBkSJGlgxsqxowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzI0MDAyMDQxWhcNMjYxMDIyMjM1OTU5
WjB6MUkwRwYDVQQFE0AyYjRkZDM0MGU1MzQ3MzZiYjE2YjA2NTc1NzQ0YWM0MzQ4
YTJhOWQ1OTg4NTJjNjdlODRmMTliY2ExNGExN2IxMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCKEHOuGFh3O1P3kX0xe1tWHjTlW/Y3pYUZNFHFC8Zm79Mc
hDyg3bhMAyGUsAnTkedMjRIluhUlCHo/7laGmIDc2CQNxyfIksme8SCmGtZSTqJX
2eCuE+Axz25Z6WNaK3bjmP+IIg21k9MWRd08c3AqNBVMpvql5AsYiw7WzbTKpT7f
+nuFoU354a4l5bjaQO/r4Z22jJxLe1uxZiZMVKCWjqRuotV99nZQ9FRuq58dFGxG
9MTcB0iNUATtuFoE3sDN9yGb2uKiFg8N8ssy3HLGyqSsaAa6awoZ+BTpEt6dnAc0
HhYkam4ISbOU2PeuMteZoEUP2CdoaPY3C2CxsPM9AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUvHEMuNKsx4/ny5yUAoxrznKT0qIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2E2MzM0M2JmLTIwYjAtNDZlZC04NzU4LWEzZThmMzU3NDVjYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAW4SaAwDQYJKoZIhvcNAQELBQADggEBAAL9/mM1UZ98S++Gi5cTzDr8UmEY
nlZXFVipjcdRBf2Wzee9qO6KkYNUOPxi00zQ8eZS66KOgmmBlrbTe1RxUT2jliyc
e7fvjZ3+zcG/QhSgwtuwoN3UcQAUkmBv3nwMpCE1k6C0XitejprSH7yMvSHMscvj
MbzyFN03cHzjh9R4wvSX/eeuW5827odeMp+mHtOPUV5niMuhnbQwDn5H7PInJmgy
nO8jBR6/BRchXXEnZzJb5Wfk2GlZ3ER/nBGJ/B7TmUTwoUGFGFshJj7urOsZ99M8
xAQfPv4GGi342miYjN3ZTBonpCe/3OPHVeUmC8H2CPtPMZOVYILO4WhTtVY=
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:13:38 2026 by rpki-client