Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be767812-8da8-41e7-ad35-d8e01ee7a6c8.roa
File:                     be767812-8da8-41e7-ad35-d8e01ee7a6c8.roa (raw, json)
Hash identifier:          2Pl1WDbRCn1ZxqSVLF43lfrT3dortH79nL5rV+/rtH4=
Subject key identifier:   41:34:6B:6B:6F:AF:E7:A5:21:9B:65:D0:19:C5:20:63:7B:AD:80:FB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       466A0FBDB7BDBD3BE97CD38EB6892342A5A7D573
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be767812-8da8-41e7-ad35-d8e01ee7a6c8.roa
Signing time:             Fri 17 Jul 2026 00:30:42 +0000
ROA not before:           Fri 17 Jul 2026 00:30:42 +0000
ROA not after:            Thu 15 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        15.233.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:6a:0f:bd:b7:bd:bd:3b:e9:7c:d3:8e:b6:89:23:42:a5:a7:d5:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 17 00:30:42 2026 GMT
            Not After : Oct 15 23:59:59 2026 GMT
        Subject: serialNumber=5c568a07d6efd7081846fdd0fbb73caa015126f26a3aff377ba79fd1c2cb0de8, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:0c:1c:b7:35:f1:2f:bb:53:ee:08:9d:4c:15:
                    c7:ab:c8:c7:e0:06:a8:b4:84:50:4c:26:3d:ed:46:
                    b0:9c:23:61:41:56:c6:ac:95:f4:e8:39:7a:02:e2:
                    6c:82:ff:25:cd:07:90:bf:2e:b9:78:9a:95:f8:1a:
                    96:f4:11:fa:41:e1:77:3f:44:c4:a6:9e:09:61:8c:
                    ec:d7:86:4c:20:8d:e0:7b:ec:d0:ba:f3:ce:62:d7:
                    76:e1:dd:8e:ee:9d:a2:57:ec:bf:66:0c:f1:72:0f:
                    05:e8:4d:11:45:96:8b:d5:82:a8:1d:87:be:0c:a4:
                    7a:bc:50:db:1d:b4:91:af:ce:d2:3d:50:29:74:6a:
                    7b:ff:18:a7:8c:7f:9f:59:47:69:52:20:02:42:4c:
                    a4:3e:d1:fc:43:85:e6:07:94:86:00:e6:78:54:52:
                    e0:77:d1:88:73:17:2f:e1:73:9a:88:fd:f3:32:d7:
                    57:e4:fb:52:2c:af:4a:a1:48:11:a4:0f:fb:a6:6c:
                    20:8c:4c:ba:14:93:2b:77:42:72:7a:19:c6:dc:09:
                    0c:6f:be:0f:55:34:c0:b7:9c:38:06:30:a9:06:16:
                    28:92:93:66:90:a7:9c:85:a7:37:61:33:0f:0e:17:
                    1b:de:ae:7f:2b:c6:81:b6:f5:f5:04:b2:e4:ad:e0:
                    c3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:34:6B:6B:6F:AF:E7:A5:21:9B:65:D0:19:C5:20:63:7B:AD:80:FB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be767812-8da8-41e7-ad35-d8e01ee7a6c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.233.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         78:62:ec:fb:56:ba:34:43:51:f6:88:dd:11:07:8d:ee:57:7e:
         aa:b2:47:e3:3d:24:9f:2a:78:fb:9a:98:d8:cf:21:60:c8:8e:
         3c:41:77:4a:4e:50:91:80:e5:eb:c8:ea:49:2c:ea:dd:36:4a:
         d0:fa:b8:52:72:fa:2f:79:b9:bc:a0:9e:52:4d:98:ca:f1:00:
         22:1e:8a:26:5c:ea:7e:47:f3:e0:b5:34:56:3e:e0:a4:cf:91:
         e1:54:41:e7:66:65:ca:d1:52:38:d6:da:9c:82:af:c6:37:b7:
         3e:b1:97:40:10:14:a9:45:93:0e:92:36:5c:d1:ad:d8:b6:6a:
         0e:b6:ca:9c:a0:f9:d8:03:c2:05:6d:6e:a8:41:8e:0e:04:af:
         9c:1f:16:07:59:3d:0c:0d:91:65:79:38:a1:d4:d7:6e:47:3d:
         d8:ff:4d:3e:3b:43:27:c8:8c:18:ef:09:29:bf:ad:0c:ad:0b:
         07:2f:29:d6:2d:aa:92:92:d0:da:af:a8:f8:48:aa:b5:6e:d2:
         26:a9:b3:10:c3:32:b2:3e:ab:68:9c:56:82:d8:a9:99:13:93:
         f2:c7:79:0f:0b:ce:2b:0c:ee:01:bd:56:95:84:6c:c2:ca:03:
         17:77:91:aa:06:9f:a5:c8:1b:04:d2:be:97:10:ca:72:0f:55:
         5e:7a:22:ce
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIURmoPvbe9vTvpfNOOtokjQqWn1XMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzE3MDAzMDQyWhcNMjYxMDE1MjM1OTU5
WjB6MUkwRwYDVQQFE0A1YzU2OGEwN2Q2ZWZkNzA4MTg0NmZkZDBmYmI3M2NhYTAx
NTEyNmYyNmEzYWZmMzc3YmE3OWZkMWMyY2IwZGU4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDrDBy3NfEvu1PuCJ1MFceryMfgBqi0hFBMJj3tRrCcI2FB
VsaslfToOXoC4myC/yXNB5C/Lrl4mpX4Gpb0EfpB4Xc/RMSmnglhjOzXhkwgjeB7
7NC6885i13bh3Y7unaJX7L9mDPFyDwXoTRFFlovVgqgdh74MpHq8UNsdtJGvztI9
UCl0anv/GKeMf59ZR2lSIAJCTKQ+0fxDheYHlIYA5nhUUuB30YhzFy/hc5qI/fMy
11fk+1Isr0qhSBGkD/umbCCMTLoUkyt3QnJ6GcbcCQxvvg9VNMC3nDgGMKkGFiiS
k2aQp5yFpzdhMw8OFxvern8rxoG29fUEsuSt4MM5AgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUQTRra2+v56Uhm2XQGcUgY3utgPswHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2JlNzY3ODEyLThkYTgtNDFlNy1hZDM1LWQ4ZTAxZWU3YTZjOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAP6TANBgkqhkiG9w0BAQsFAAOCAQEAeGLs+1a6NENR9ojdEQeN7ld+qrJH
4z0knyp4+5qY2M8hYMiOPEF3Sk5QkYDl68jqSSzq3TZK0Pq4UnL6L3m5vKCeUk2Y
yvEAIh6KJlzqfkfz4LU0Vj7gpM+R4VRB52ZlytFSONbanIKvxje3PrGXQBAUqUWT
DpI2XNGt2LZqDrbKnKD52APCBW1uqEGODgSvnB8WB1k9DA2RZXk4odTXbkc92P9N
PjtDJ8iMGO8JKb+tDK0LBy8p1i2qkpLQ2q+o+EiqtW7SJqmzEMMysj6raJxWgtip
mROT8sd5DwvOKwzuAb1WlYRswsoDF3eRqgafpcgbBNK+lxDKcg9VXnoizg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:48:06 2026 by rpki-client