Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0bd37e9a-d46b-4388-ae57-38ab8bd4f3c4.roa
File:                     0bd37e9a-d46b-4388-ae57-38ab8bd4f3c4.roa (raw, json)
Hash identifier:          Pw4+X3DEORBeHiZFxea59aS1mmuOvX/SfMgau58sO5w=
Subject key identifier:   19:51:92:62:57:BC:72:8A:75:F6:D7:9E:9C:77:F6:BF:F9:D9:00:60
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       6F926DF12329B79D593A7384D8819486C1A7C8D8
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0bd37e9a-d46b-4388-ae57-38ab8bd4f3c4.roa
Signing time:             Fri 08 May 2026 02:01:20 +0000
ROA not before:           Fri 08 May 2026 02:01:20 +0000
ROA not after:            Thu 06 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        35.182.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:92:6d:f1:23:29:b7:9d:59:3a:73:84:d8:81:94:86:c1:a7:c8:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: May  8 02:01:20 2026 GMT
            Not After : Aug  6 23:59:59 2026 GMT
        Subject: serialNumber=c940446ef895d4091a7d08b771aae64587b365494ee6d4380ebf52f989689752, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7d:eb:43:c8:d5:ae:5c:6c:c9:70:98:d1:cd:
                    db:19:d3:42:c0:b7:c7:1c:8d:66:47:3d:33:1e:0e:
                    da:91:fa:ee:1b:1a:1c:a0:c5:0b:b3:14:c8:b2:66:
                    1b:3e:8d:6d:14:f4:6e:6b:81:0d:33:ec:da:9d:a5:
                    85:96:6b:92:fb:5c:46:11:a3:a2:7f:d8:bb:44:29:
                    88:57:8e:14:ab:5d:3e:04:1d:51:fc:c5:d5:d4:16:
                    80:1d:91:8a:81:eb:1b:56:6f:46:f4:5c:d9:c4:7e:
                    32:66:c2:4d:47:91:1a:a4:52:ff:65:81:60:66:a7:
                    13:13:a9:f1:3d:93:37:53:06:3a:fe:15:82:13:6e:
                    7a:58:39:73:2d:71:01:b0:58:20:5d:bc:41:14:f4:
                    6c:ab:c5:04:d1:73:ad:82:78:14:42:3d:2e:6d:4f:
                    7b:d7:36:9a:42:ee:5c:0e:72:88:cf:ff:8a:4d:6e:
                    f2:06:a6:98:bd:a6:42:6c:58:27:be:99:06:1c:c0:
                    48:4b:bc:cd:49:9b:c4:d8:52:48:45:be:3a:30:f5:
                    ac:8f:5a:78:7a:8d:05:00:82:66:76:90:9f:48:8e:
                    78:40:df:3e:2e:2d:fb:46:62:e2:b8:0a:4c:4c:09:
                    e2:9e:c9:4c:bf:e9:a7:d0:b7:3c:38:f5:fa:f2:bd:
                    1d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:51:92:62:57:BC:72:8A:75:F6:D7:9E:9C:77:F6:BF:F9:D9:00:60
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0bd37e9a-d46b-4388-ae57-38ab8bd4f3c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.182.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         53:e7:dd:4a:8b:99:c3:a1:31:5b:4d:66:22:b2:7b:cb:64:19:
         3e:24:47:17:0b:b7:c3:c9:51:2d:2f:6b:ec:68:69:84:64:c8:
         96:40:e7:b7:1e:bd:1b:ef:b5:a2:d0:28:8c:02:6e:96:27:5f:
         64:4e:cf:ba:78:d1:34:78:0f:e0:f8:73:ca:aa:9b:d8:c4:65:
         f7:f2:bf:e3:40:28:f6:d2:6b:91:ef:df:fa:a8:ef:e4:9e:94:
         a3:96:45:d5:97:7d:ea:51:77:61:ae:ff:dd:bf:34:a8:25:43:
         0b:47:35:fc:f8:ec:75:92:93:b1:bd:a6:e5:a4:be:73:87:68:
         6b:74:69:9d:0a:7f:f8:08:f3:2f:81:9a:ca:37:a7:8f:49:d1:
         d2:d4:24:2c:a0:38:c7:96:76:84:61:ec:a1:fe:2a:e7:3d:d5:
         a5:fe:3b:2e:b2:ad:ca:38:ca:5d:e2:f9:73:0c:3e:2e:39:3b:
         5f:83:7e:f4:46:18:46:41:8d:7a:5e:1d:83:ec:74:03:57:cd:
         c5:b3:25:1d:33:fe:93:c7:cb:94:6f:f8:dc:a8:2c:af:01:06:
         26:cf:81:17:b2:dc:4f:fc:d1:e7:a0:45:57:aa:07:d0:36:7d:
         40:71:0e:4c:de:a6:c1:6d:0a:99:9a:88:e5:14:5a:e6:8e:5a:
         59:39:c2:52
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUb5Jt8SMpt51ZOnOE2IGUhsGnyNgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNTA4MDIwMTIwWhcNMjYwODA2MjM1OTU5
WjB6MUkwRwYDVQQFE0BjOTQwNDQ2ZWY4OTVkNDA5MWE3ZDA4Yjc3MWFhZTY0NTg3
YjM2NTQ5NGVlNmQ0MzgwZWJmNTJmOTg5Njg5NzUyMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC7fetDyNWuXGzJcJjRzdsZ00LAt8ccjWZHPTMeDtqR+u4b
GhygxQuzFMiyZhs+jW0U9G5rgQ0z7NqdpYWWa5L7XEYRo6J/2LtEKYhXjhSrXT4E
HVH8xdXUFoAdkYqB6xtWb0b0XNnEfjJmwk1HkRqkUv9lgWBmpxMTqfE9kzdTBjr+
FYITbnpYOXMtcQGwWCBdvEEU9GyrxQTRc62CeBRCPS5tT3vXNppC7lwOcojP/4pN
bvIGppi9pkJsWCe+mQYcwEhLvM1Jm8TYUkhFvjow9ayPWnh6jQUAgmZ2kJ9IjnhA
3z4uLftGYuK4CkxMCeKeyUy/6afQtzw49fryvR3xAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUGVGSYle8cop19teenHf2v/nZAGAwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzBiZDM3ZTlhLWQ0NmItNDM4OC1hZTU3LTM4YWI4YmQ0ZjNjNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwEjtjANBgkqhkiG9w0BAQsFAAOCAQEAU+fdSouZw6ExW01mIrJ7y2QZPiRH
Fwu3w8lRLS9r7GhphGTIlkDntx69G++1otAojAJulidfZE7PunjRNHgP4Phzyqqb
2MRl9/K/40Ao9tJrke/f+qjv5J6Uo5ZF1Zd96lF3Ya7/3b80qCVDC0c1/PjsdZKT
sb2m5aS+c4doa3RpnQp/+AjzL4Gayjenj0nR0tQkLKA4x5Z2hGHsof4q5z3Vpf47
LrKtyjjKXeL5cww+Ljk7X4N+9EYYRkGNel4dg+x0A1fNxbMlHTP+k8fLlG/43Kgs
rwEGJs+BF7LcT/zR56BFV6oH0DZ9QHEOTN6mwW0KmZqI5RRa5o5aWTnCUg==
-----END CERTIFICATE-----
Generated at Tue May 12 22:34:33 2026 by rpki-client