Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e83faab9-529f-4e76-914c-5c04e08cce70.roa
File:                     e83faab9-529f-4e76-914c-5c04e08cce70.roa (raw, json)
Hash identifier:          j/BhepxK1FjJjT0olfjjj2WK4XraDPwviOU9Hap0EBQ=
Subject key identifier:   C7:D1:28:EB:33:44:D0:D8:29:99:8D:22:60:04:D4:FB:05:95:A5:B6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6BE3CE7593CD4754C74116570AA4CDD258E28101
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e83faab9-529f-4e76-914c-5c04e08cce70.roa
Signing time:             Fri 17 Jul 2026 00:10:49 +0000
ROA not before:           Fri 17 Jul 2026 00:10:49 +0000
ROA not after:            Thu 15 Oct 2026 23:59:59 +0000
asID:                     8987
IP address blocks:        108.175.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:e3:ce:75:93:cd:47:54:c7:41:16:57:0a:a4:cd:d2:58:e2:81:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 17 00:10:49 2026 GMT
            Not After : Oct 15 23:59:59 2026 GMT
        Subject: serialNumber=25c41c5c216e491a0f236051e49e0a30d828c99c6e1eb75dfd6e044621cf2fe6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:dc:fd:d2:0d:3e:73:38:65:20:15:19:3c:69:
                    fc:ce:8d:9b:45:91:29:3f:ab:f9:cc:0c:ec:86:6a:
                    db:ff:9a:a0:91:19:54:ad:a2:cf:5f:e4:94:de:96:
                    1c:f3:4b:30:90:a2:60:d8:79:95:c4:5a:1c:4e:ff:
                    d4:23:f3:66:fa:cc:bf:15:83:d8:22:c8:b9:52:df:
                    3c:3e:ce:b9:9d:eb:3f:14:71:9e:f7:7d:00:86:20:
                    e8:22:31:a2:97:a2:c7:97:96:ac:4e:8e:73:ca:59:
                    80:0e:4d:2d:52:67:cf:5b:52:0b:1f:cd:4e:58:2b:
                    5a:dc:d6:18:70:32:45:8c:46:da:51:2d:c7:11:bb:
                    00:1f:b5:58:e5:82:b8:b8:8d:8e:e2:40:e7:4a:25:
                    40:0c:4c:d8:84:29:e6:74:dd:ef:14:18:93:93:42:
                    c8:be:69:05:e2:01:46:77:65:05:ca:67:14:91:d3:
                    d4:8a:87:33:af:f8:56:3f:f2:12:01:3c:d6:d8:c6:
                    fe:7e:d9:18:9d:ef:93:96:43:b5:5b:92:7b:d8:38:
                    01:2f:9a:4b:3b:bf:8c:ff:c6:6b:63:07:87:3c:6e:
                    71:7e:47:8b:c0:67:91:57:fc:0d:c6:7b:c4:1b:af:
                    f3:d3:08:80:5f:56:0a:0c:a5:2b:3c:6b:50:cc:5a:
                    ca:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:D1:28:EB:33:44:D0:D8:29:99:8D:22:60:04:D4:FB:05:95:A5:B6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e83faab9-529f-4e76-914c-5c04e08cce70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.175.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:c4:a9:ac:21:08:45:90:cf:b5:3a:07:0f:4f:4e:6e:83:75:
         aa:4b:82:7d:24:f5:70:26:0e:6c:38:7f:ee:8d:00:55:ec:1a:
         21:d2:58:5f:f0:66:e8:66:96:68:7b:22:0f:73:2f:06:d9:7b:
         5d:50:81:af:88:0a:bd:58:a4:45:7f:be:bd:4a:a4:6c:7e:37:
         20:be:b2:42:fe:4a:25:a3:fd:7e:84:59:40:23:9a:36:5d:16:
         5e:5c:69:73:c2:dd:32:0c:94:17:75:86:72:a1:de:20:1b:2a:
         7a:90:1f:2c:41:ce:87:65:ae:d5:a4:4c:18:51:57:7b:b0:eb:
         d9:42:14:ef:97:ce:44:6c:21:c7:53:23:d5:12:e7:4b:18:c3:
         3f:54:84:d2:3f:6f:38:d1:ac:44:85:a7:68:b6:79:5e:28:23:
         48:2f:54:22:14:51:ea:e2:df:28:7a:46:9d:95:5d:8a:84:2b:
         6c:96:22:b9:59:5b:1f:7a:c8:5f:af:60:d2:f4:b0:69:d7:a4:
         c2:3b:b1:7c:51:76:e8:7d:e2:68:8f:e2:c6:0b:cf:2a:b3:c4:
         1a:77:4a:14:b1:69:e8:f4:9c:0e:24:8c:94:93:5a:26:e3:f5:
         87:fd:b0:c5:04:67:d3:1f:12:26:96:db:5a:d9:77:c3:41:06:
         87:fb:f0:9a
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUa+POdZPNR1THQRZXCqTN0ljigQEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzE3MDAxMDQ5WhcNMjYxMDE1MjM1OTU5
WjB6MUkwRwYDVQQFE0AyNWM0MWM1YzIxNmU0OTFhMGYyMzYwNTFlNDllMGEzMGQ4
MjhjOTljNmUxZWI3NWRmZDZlMDQ0NjIxY2YyZmU2MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDB3P3SDT5zOGUgFRk8afzOjZtFkSk/q/nMDOyGatv/mqCR
GVStos9f5JTelhzzSzCQomDYeZXEWhxO/9Qj82b6zL8Vg9giyLlS3zw+zrmd6z8U
cZ73fQCGIOgiMaKXoseXlqxOjnPKWYAOTS1SZ89bUgsfzU5YK1rc1hhwMkWMRtpR
LccRuwAftVjlgri4jY7iQOdKJUAMTNiEKeZ03e8UGJOTQsi+aQXiAUZ3ZQXKZxSR
09SKhzOv+FY/8hIBPNbYxv5+2Rid75OWQ7VbknvYOAEvmks7v4z/xmtjB4c8bnF+
R4vAZ5FX/A3Ge8Qbr/PTCIBfVgoMpSs8a1DMWsrZAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUx9Eo6zNE0NgpmY0iYATU+wWVpbYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2U4M2ZhYWI5LTUyOWYtNGU3Ni05MTRjLTVjMDRlMDhjY2U3MC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAJsrzwwDQYJKoZIhvcNAQELBQADggEBAJzEqawhCEWQz7U6Bw9PTm6DdapL
gn0k9XAmDmw4f+6NAFXsGiHSWF/wZuhmlmh7Ig9zLwbZe11Qga+ICr1YpEV/vr1K
pGx+NyC+skL+SiWj/X6EWUAjmjZdFl5caXPC3TIMlBd1hnKh3iAbKnqQHyxBzodl
rtWkTBhRV3uw69lCFO+XzkRsIcdTI9US50sYwz9UhNI/bzjRrESFp2i2eV4oI0gv
VCIUUeri3yh6Rp2VXYqEK2yWIrlZWx96yF+vYNL0sGnXpMI7sXxRduh94miP4sYL
zyqzxBp3ShSxaej0nA4kjJSTWibj9Yf9sMUEZ9MfEiaW21rZd8NBBof78Jo=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:17:08 2026 by rpki-client