Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8e867f3-9430-4ec2-8be1-c7406b137e2a.roa
File:                     b8e867f3-9430-4ec2-8be1-c7406b137e2a.roa (raw, json)
Hash identifier:          Xzvskzt9DHj9QD6sPfrzqSbzKtvPvaQ/ffUb47zbyfU=
Subject key identifier:   A4:2F:D5:BB:32:86:5F:39:86:0F:1F:D6:E7:66:95:A2:20:A5:86:8B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6A7DAFC01AAE63FD5925D749410A2C15E38A1B3E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8e867f3-9430-4ec2-8be1-c7406b137e2a.roa
Signing time:             Sat 18 Jul 2026 00:41:31 +0000
ROA not before:           Sat 18 Jul 2026 00:41:31 +0000
ROA not after:            Fri 16 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        56.82.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:7d:af:c0:1a:ae:63:fd:59:25:d7:49:41:0a:2c:15:e3:8a:1b:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 18 00:41:31 2026 GMT
            Not After : Oct 16 23:59:59 2026 GMT
        Subject: serialNumber=05b92dd6599e33027faf1383f6f1f61cbc746c73c37f318eeda0e4b6c11e755a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:82:80:38:49:38:cd:d1:83:dc:b0:3b:79:47:
                    37:d4:18:3f:dc:7b:6c:48:b4:be:b3:5d:c4:78:96:
                    2f:d0:94:2e:be:f3:c3:08:42:eb:a1:16:80:d6:72:
                    39:58:83:59:62:46:74:62:1c:e6:49:45:22:1a:98:
                    5a:b7:1c:3a:74:4f:40:cf:60:e1:dd:df:86:45:fe:
                    10:f5:b6:bd:5c:ff:36:de:c8:a3:32:82:d5:b3:36:
                    77:08:6b:31:c2:7d:e3:16:23:65:40:e1:b2:f4:1d:
                    01:45:6a:c2:cd:d1:ae:28:b3:f6:d7:01:bf:53:1e:
                    ac:e1:75:ff:2c:3a:94:31:ff:2c:44:b4:a5:c6:51:
                    4b:87:6f:6a:30:be:57:2c:8b:36:f8:60:fa:48:98:
                    a8:59:bc:6b:24:71:2f:d6:e2:f5:51:87:61:0f:f7:
                    59:cc:07:8e:1d:36:f3:b7:55:9a:ce:4a:77:d6:64:
                    fb:f8:94:b8:62:4b:7b:e2:d1:34:02:d9:12:1e:67:
                    e3:1a:7c:27:98:6c:a2:0f:ff:73:b4:e7:43:02:8f:
                    e0:38:64:15:d1:76:f3:e5:fa:3f:f5:77:79:36:7f:
                    77:68:8b:a7:8a:ab:99:18:37:b1:2e:cc:46:ff:f5:
                    84:15:7c:10:48:83:b2:9c:50:ac:be:c8:e3:1e:e4:
                    79:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:2F:D5:BB:32:86:5F:39:86:0F:1F:D6:E7:66:95:A2:20:A5:86:8B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8e867f3-9430-4ec2-8be1-c7406b137e2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.82.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         0b:02:95:bd:96:ec:55:ca:90:1a:52:f7:0e:a2:a8:5a:1b:27:
         7f:60:d5:e4:88:fa:36:7f:36:4c:74:ab:ed:10:c4:6a:fb:2c:
         67:56:e1:5d:33:6b:41:d0:62:26:57:ee:9f:3a:e6:12:c2:a8:
         eb:7e:c4:84:7b:c2:fa:a4:c4:0b:57:e5:d5:a7:05:46:35:f1:
         7a:72:d5:e7:57:b9:f5:5c:93:d0:85:15:e3:59:a7:2f:ca:0d:
         65:77:3c:03:c7:9c:89:f8:84:f8:a8:c8:db:3d:ba:1d:d9:f7:
         ae:93:21:e0:8c:88:e7:06:3c:27:d7:64:da:2b:6e:11:ea:ef:
         08:da:00:3b:44:6d:46:be:0f:7e:61:1a:4c:b2:b9:ca:ee:a6:
         84:22:bd:30:c9:46:34:f1:8e:b4:41:40:14:0f:27:78:ab:c5:
         83:16:5d:6c:fa:11:e0:e1:df:a3:22:9c:ad:63:4e:14:6a:5b:
         59:4a:97:cf:3e:ba:9d:ea:ec:93:48:4e:b6:b1:8d:38:1a:3a:
         4c:ed:07:63:4e:ad:a8:24:31:8d:6d:d3:2c:4e:43:ec:90:7d:
         b1:e0:09:ec:7c:76:27:be:9f:03:6b:cc:2c:cd:ee:83:da:48:
         5e:52:dd:8f:65:f3:37:f3:30:82:81:f9:d2:9b:78:d6:74:88:
         1b:dd:0b:10
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUan2vwBquY/1ZJddJQQosFeOKGz4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzE4MDA0MTMxWhcNMjYxMDE2MjM1OTU5
WjB6MUkwRwYDVQQFE0AwNWI5MmRkNjU5OWUzMzAyN2ZhZjEzODNmNmYxZjYxY2Jj
NzQ2YzczYzM3ZjMxOGVlZGEwZTRiNmMxMWU3NTVhMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCvgoA4STjN0YPcsDt5RzfUGD/ce2xItL6zXcR4li/QlC6+
88MIQuuhFoDWcjlYg1liRnRiHOZJRSIamFq3HDp0T0DPYOHd34ZF/hD1tr1c/zbe
yKMygtWzNncIazHCfeMWI2VA4bL0HQFFasLN0a4os/bXAb9THqzhdf8sOpQx/yxE
tKXGUUuHb2owvlcsizb4YPpImKhZvGskcS/W4vVRh2EP91nMB44dNvO3VZrOSnfW
ZPv4lLhiS3vi0TQC2RIeZ+MafCeYbKIP/3O050MCj+A4ZBXRdvPl+j/1d3k2f3do
i6eKq5kYN7EuzEb/9YQVfBBIg7KcUKy+yOMe5HkDAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUpC/VuzKGXzmGDx/W52aVoiClhoswHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2I4ZTg2N2YzLTk0MzAtNGVjMi04YmUxLWM3NDA2YjEzN2UyYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA4UjANBgkqhkiG9w0BAQsFAAOCAQEACwKVvZbsVcqQGlL3DqKoWhsnf2DV
5Ij6Nn82THSr7RDEavssZ1bhXTNrQdBiJlfunzrmEsKo637EhHvC+qTEC1fl1acF
RjXxenLV51e59VyT0IUV41mnL8oNZXc8A8ecifiE+KjI2z26Hdn3rpMh4IyI5wY8
J9dk2ituEervCNoAO0RtRr4PfmEaTLK5yu6mhCK9MMlGNPGOtEFAFA8neKvFgxZd
bPoR4OHfoyKcrWNOFGpbWUqXzz66nersk0hOtrGNOBo6TO0HY06tqCQxjW3TLE5D
7JB9seAJ7Hx2J76fA2vMLM3ug9pIXlLdj2XzN/MwgoH50pt41nSIG90LEA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:49:02 2026 by rpki-client