Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2365433-7c93-4016-ad7e-0a4383160d29.roa
File:                     f2365433-7c93-4016-ad7e-0a4383160d29.roa (raw, json)
Hash identifier:          xzHxk7zG4KEAoSMl5pERxCUcCeahyVM6ojWIDC09vRg=
Subject key identifier:   58:9F:45:D5:97:BE:11:02:AD:F3:78:C6:61:41:C2:62:05:D1:68:D7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       484B7B122BDE200CC41A307C70585FBFD5718960
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2365433-7c93-4016-ad7e-0a4383160d29.roa
Signing time:             Mon 12 Oct 2026 00:20:09 +0000
ROA not before:           Mon 12 Oct 2026 00:20:09 +0000
ROA not after:            Sun 10 Jan 2027 23:59:59 +0000
asID:                     14618
IP address blocks:        184.72.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:4b:7b:12:2b:de:20:0c:c4:1a:30:7c:70:58:5f:bf:d5:71:89:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 12 00:20:09 2026 GMT
            Not After : Jan 10 23:59:59 2027 GMT
        Subject: serialNumber=ac45ca52ab243b1a2a6fc4f3f09078fa35fc0fc487f21c1a5a02ebea37fe0be8, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ef:20:89:77:da:20:2d:a0:99:77:3f:dc:d0:
                    7e:9b:c3:dd:59:0d:6b:40:74:3f:f5:c9:7d:69:9b:
                    a7:bf:fb:4f:d4:52:ee:2c:d5:2f:47:f5:b6:5c:c1:
                    99:69:98:fa:cd:31:4a:d5:9b:ed:cb:a6:9d:45:5c:
                    b0:cf:54:54:85:b7:f5:5c:7e:3c:8c:ab:0f:e5:ce:
                    2d:aa:5a:3a:6f:c2:4a:52:a1:98:a0:b9:e1:fa:d4:
                    23:7f:42:ef:f8:59:ca:f3:9a:ea:3b:28:c3:35:35:
                    d5:bf:58:db:12:f4:bb:68:ae:d9:d3:23:27:8b:5c:
                    08:b0:6a:5c:17:a7:db:64:4c:d4:68:02:30:37:b1:
                    d7:bc:e9:c8:a5:aa:97:e2:70:10:b2:a9:d0:d4:24:
                    c4:8c:c6:ff:8b:bc:90:ce:fc:59:e5:30:62:5f:e0:
                    24:07:34:99:d5:98:88:88:52:df:e7:03:23:4a:36:
                    0d:a1:00:53:63:f8:4a:be:90:e3:05:0f:ed:4d:0c:
                    2b:7d:ff:c5:91:90:b0:d5:6d:47:ce:22:12:44:a1:
                    ce:77:54:3f:0b:4b:54:7b:ef:86:aa:ae:2f:b1:77:
                    06:23:75:7d:31:e6:ee:ff:18:a7:06:6e:0c:da:15:
                    04:50:dd:65:7b:22:e6:11:07:e1:85:80:3d:5a:65:
                    97:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:9F:45:D5:97:BE:11:02:AD:F3:78:C6:61:41:C2:62:05:D1:68:D7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2365433-7c93-4016-ad7e-0a4383160d29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.72.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:3c:4b:68:c4:bd:3c:46:81:0f:f0:cb:2a:1d:4a:73:95:2d:
         51:55:f7:a6:a0:83:0c:b7:83:ef:87:b9:fc:62:b0:e7:d2:85:
         85:13:b1:b8:5e:ad:1d:c0:99:9e:c6:5d:8b:bb:d0:d1:5f:a1:
         e1:e0:4c:17:40:98:90:f2:43:14:96:a5:ed:20:94:af:1c:21:
         2e:92:24:1f:51:5f:be:d2:28:13:2b:18:d4:7d:7d:4e:d7:21:
         00:65:b0:86:f6:2a:3f:3b:a7:c4:27:49:d6:40:d9:8f:cd:48:
         95:18:ec:a2:57:32:7c:95:8b:a9:d8:15:b3:4d:b7:fa:f7:3b:
         dc:75:80:95:88:06:5a:ed:88:eb:70:7e:8c:85:33:e1:79:57:
         a4:a8:7e:4e:3b:4b:1b:ce:8d:47:0a:87:fa:b9:e9:de:e3:7b:
         16:f7:47:dd:48:1c:11:5b:05:2e:19:a9:f8:6e:6e:db:c5:2b:
         8a:97:0a:ae:ef:78:d8:34:f1:9f:1b:93:bd:c5:64:8d:19:b1:
         bd:31:88:11:50:6f:88:f4:4a:80:64:13:ff:82:41:f4:15:cc:
         eb:dd:e4:2e:1b:76:d2:e1:1e:b8:04:c7:c3:cb:54:bf:5a:67:
         bb:65:7b:4f:26:8e:42:80:30:93:cb:ec:be:12:62:f3:ed:8c:
         bc:9f:e1:92
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUSEt7EiveIAzEGjB8cFhfv9VxiWAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDEyMDAyMDA5WhcNMjcwMTEwMjM1OTU5
WjB6MUkwRwYDVQQFE0BhYzQ1Y2E1MmFiMjQzYjFhMmE2ZmM0ZjNmMDkwNzhmYTM1
ZmMwZmM0ODdmMjFjMWE1YTAyZWJlYTM3ZmUwYmU4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCd7yCJd9ogLaCZdz/c0H6bw91ZDWtAdD/1yX1pm6e/+0/U
Uu4s1S9H9bZcwZlpmPrNMUrVm+3Lpp1FXLDPVFSFt/VcfjyMqw/lzi2qWjpvwkpS
oZigueH61CN/Qu/4Wcrzmuo7KMM1NdW/WNsS9LtortnTIyeLXAiwalwXp9tkTNRo
AjA3sde86cilqpficBCyqdDUJMSMxv+LvJDO/FnlMGJf4CQHNJnVmIiIUt/nAyNK
Ng2hAFNj+Eq+kOMFD+1NDCt9/8WRkLDVbUfOIhJEoc53VD8LS1R774aqri+xdwYj
dX0x5u7/GKcGbgzaFQRQ3WV7IuYRB+GFgD1aZZfzAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUWJ9F1Ze+EQKt83jGYUHCYgXRaNcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2YyMzY1NDMzLTdjOTMtNDAxNi1hZDdlLTBhNDM4MzE2MGQyOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAC4SF0wDQYJKoZIhvcNAQELBQADggEBAG08S2jEvTxGgQ/wyyodSnOVLVFV
96aggwy3g++HufxisOfShYUTsbherR3AmZ7GXYu70NFfoeHgTBdAmJDyQxSWpe0g
lK8cIS6SJB9RX77SKBMrGNR9fU7XIQBlsIb2Kj87p8QnSdZA2Y/NSJUY7KJXMnyV
i6nYFbNNt/r3O9x1gJWIBlrtiOtwfoyFM+F5V6Sofk47SxvOjUcKh/q56d7jexb3
R91IHBFbBS4ZqfhubtvFK4qXCq7veNg08Z8bk73FZI0Zsb0xiBFQb4j0SoBkE/+C
QfQVzOvd5C4bdtLhHrgEx8PLVL9aZ7tle08mjkKAMJPL7L4SYvPtjLyf4ZI=
-----END CERTIFICATE-----
Generated at Sun Nov 15 17:47:21 2026 by rpki-client