Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d3ac9ca8-0963-4f1d-bfa5-5b4e3bc63606.roa
File:                     d3ac9ca8-0963-4f1d-bfa5-5b4e3bc63606.roa (raw, json)
Hash identifier:          PDveCm2+YkiLYzIdohs2Oy2zMgQgCXAvbTNoKR2apqw=
Subject key identifier:   41:5F:3B:F2:44:B8:BF:3F:5F:DB:48:8E:36:53:06:FC:68:48:42:98
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1F0CA684A1A34B151B228E13BA432DED341115FF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d3ac9ca8-0963-4f1d-bfa5-5b4e3bc63606.roa
Signing time:             Mon 04 May 2026 01:20:49 +0000
ROA not before:           Mon 04 May 2026 01:20:49 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        99.82.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:0c:a6:84:a1:a3:4b:15:1b:22:8e:13:ba:43:2d:ed:34:11:15:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  4 01:20:49 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=342c6f230ea1a085d4a0d7bc4633109dc7f11a67af770df212b77de300a41ddb, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a2:af:38:f0:a1:6a:dc:b2:94:4f:cb:57:10:
                    ff:31:c4:a3:7d:e4:0a:0a:28:1a:2f:1b:80:d5:14:
                    83:27:39:ff:af:f6:93:19:62:d4:21:9e:f1:54:44:
                    5c:5f:f1:27:ef:e0:cc:35:b3:f8:a7:2f:f6:94:65:
                    d5:13:5c:20:7a:47:46:d1:35:4c:19:36:69:35:b5:
                    0f:cd:0b:f0:33:7a:91:cc:ae:ab:ad:c4:db:6d:ae:
                    40:8a:f1:58:b5:84:c5:1f:9b:2d:2c:03:71:bf:fe:
                    f0:62:d5:e9:f6:71:c0:d6:f9:ac:d2:ac:78:35:bc:
                    e1:07:d4:c2:9d:b7:99:09:0d:ec:1a:41:0c:2c:c2:
                    0d:6b:c5:53:5c:a6:ab:5c:ea:6a:cf:8b:97:fe:5a:
                    99:a9:1b:2b:4b:96:b9:c5:19:75:5f:d7:a9:17:93:
                    80:83:33:01:f9:a5:b9:9c:b3:6c:f5:ca:92:b4:cc:
                    50:13:ff:a4:8e:77:ea:08:b6:d2:3c:0c:1b:df:3b:
                    14:24:82:a4:69:99:11:87:4d:7f:f9:3a:aa:4f:4e:
                    69:dd:5f:81:e4:eb:66:65:a7:ad:30:c9:4c:12:40:
                    7a:9a:3d:b2:65:3a:fd:f1:9b:d8:00:ef:11:d4:8a:
                    44:d6:68:93:bc:d3:f0:00:d3:d3:e9:20:d7:71:c3:
                    49:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:5F:3B:F2:44:B8:BF:3F:5F:DB:48:8E:36:53:06:FC:68:48:42:98
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d3ac9ca8-0963-4f1d-bfa5-5b4e3bc63606.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.82.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d8:e5:0c:c5:32:9f:c9:e1:07:3f:0d:4b:da:3c:ba:1f:a4:1d:
         71:30:cc:c2:77:8e:9c:b9:12:97:d8:a3:2c:36:f9:0d:8a:f1:
         fe:09:42:d2:51:68:7b:90:b2:e0:8d:1c:2c:22:f1:8e:0f:8c:
         49:3d:6a:ec:d2:38:54:bd:30:0f:e6:0e:b0:0f:de:81:95:3e:
         cc:34:d8:15:ba:02:bc:b6:1d:8e:bb:ae:03:76:4e:6a:5e:51:
         71:ee:40:87:83:24:5c:04:7c:65:35:f3:d0:9b:b4:89:9a:74:
         a2:e3:09:73:e6:c2:c1:b5:e6:7b:1b:ff:ac:01:53:f6:f3:7b:
         b0:7f:24:2b:4d:ea:3f:5f:53:a1:aa:a2:75:a7:ef:29:42:7d:
         4c:e0:c7:f1:a2:d9:d5:8f:47:6f:71:a8:60:be:64:d1:1d:37:
         92:e3:6e:ad:d6:ed:68:35:10:e7:3c:fc:c9:ac:06:ae:42:f6:
         ab:f7:d8:44:52:63:62:83:2f:47:cb:f1:e1:50:7f:74:78:3b:
         2a:b3:87:51:92:fe:92:52:06:16:6d:4e:04:6c:aa:cd:10:6f:
         0c:4b:96:60:08:06:52:1d:32:d8:4b:5b:30:09:8c:30:9d:d9:
         d3:fe:c2:98:fa:3f:92:de:5e:53:ce:ef:a0:d9:16:8f:b5:3a:
         6d:66:8c:00
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUHwymhKGjSxUbIo4TukMt7TQRFf8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA0MDEyMDQ5WhcNMjYwODAyMjM1OTU5
WjB6MUkwRwYDVQQFE0AzNDJjNmYyMzBlYTFhMDg1ZDRhMGQ3YmM0NjMzMTA5ZGM3
ZjExYTY3YWY3NzBkZjIxMmI3N2RlMzAwYTQxZGRiMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDGoq848KFq3LKUT8tXEP8xxKN95AoKKBovG4DVFIMnOf+v
9pMZYtQhnvFURFxf8Sfv4Mw1s/inL/aUZdUTXCB6R0bRNUwZNmk1tQ/NC/AzepHM
rqutxNttrkCK8Vi1hMUfmy0sA3G//vBi1en2ccDW+azSrHg1vOEH1MKdt5kJDewa
QQwswg1rxVNcpqtc6mrPi5f+WpmpGytLlrnFGXVf16kXk4CDMwH5pbmcs2z1ypK0
zFAT/6SOd+oIttI8DBvfOxQkgqRpmRGHTX/5OqpPTmndX4Hk62Zlp60wyUwSQHqa
PbJlOv3xm9gA7xHUikTWaJO80/AA09PpINdxw0l3AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUQV878kS4vz9f20iONlMG/GhIQpgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2QzYWM5Y2E4LTA5NjMtNGYxZC1iZmE1LTViNGUzYmM2MzYwNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABjUp4wDQYJKoZIhvcNAQELBQADggEBANjlDMUyn8nhBz8NS9o8uh+kHXEw
zMJ3jpy5EpfYoyw2+Q2K8f4JQtJRaHuQsuCNHCwi8Y4PjEk9auzSOFS9MA/mDrAP
3oGVPsw02BW6Ary2HY67rgN2TmpeUXHuQIeDJFwEfGU189CbtImadKLjCXPmwsG1
5nsb/6wBU/bze7B/JCtN6j9fU6GqonWn7ylCfUzgx/Gi2dWPR29xqGC+ZNEdN5Lj
bq3W7Wg1EOc8/MmsBq5C9qv32ERSY2KDL0fL8eFQf3R4Oyqzh1GS/pJSBhZtTgRs
qs0QbwxLlmAIBlIdMthLWzAJjDCd2dP+wpj6P5LeXlPO76DZFo+1Om1mjAA=
-----END CERTIFICATE-----
Generated at Wed May 13 09:00:39 2026 by rpki-client