Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b7529512-d3e8-458c-b43f-9e84bd73caed.roa
File:                     b7529512-d3e8-458c-b43f-9e84bd73caed.roa (raw, json)
Hash identifier:          i7RGd+9GpUnyExiKWrCDfks3XmK9LlXaKS7yLZpskl8=
Subject key identifier:   7C:CC:C9:7A:CC:1D:61:C9:66:D3:4B:EB:7D:53:D7:8E:55:2D:EC:57
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       09C9E7E02BA8221010875DF5C1F7428D51A4EE9C
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b7529512-d3e8-458c-b43f-9e84bd73caed.roa
Signing time:             Tue 05 May 2026 01:00:13 +0000
ROA not before:           Tue 05 May 2026 01:00:13 +0000
ROA not after:            Mon 03 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        15.177.64.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:c9:e7:e0:2b:a8:22:10:10:87:5d:f5:c1:f7:42:8d:51:a4:ee:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: May  5 01:00:13 2026 GMT
            Not After : Aug  3 23:59:59 2026 GMT
        Subject: serialNumber=6d4283626d9cabf093f59a47cfa96af6cc4eca4db0bd2b8950d2243edc9fc15f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3e:51:90:13:08:d4:c7:4b:84:3c:7b:b5:dd:
                    9b:0b:4c:cf:7c:c2:6a:88:42:3e:7e:a9:8b:b0:50:
                    75:8a:43:67:d4:60:c7:4b:33:56:c6:72:c9:73:ac:
                    26:d7:7e:60:78:df:09:f4:09:00:46:76:dc:f7:54:
                    b7:e6:af:f9:5d:99:8d:43:3a:63:4a:f3:49:9f:7d:
                    f1:e2:55:7c:12:33:06:af:4b:87:80:4f:04:f4:70:
                    87:70:b5:25:e5:ba:22:8c:a8:ed:5b:a6:87:6f:cb:
                    5c:2e:a7:ec:f6:80:d7:49:de:0b:c4:49:4a:9d:2d:
                    df:38:82:7a:12:83:ae:20:99:6c:e2:bf:f6:06:84:
                    42:d9:53:be:ea:ad:1e:df:2c:e6:05:9f:85:8e:2c:
                    12:a5:bc:18:57:96:d0:0f:ec:f8:54:88:68:94:0f:
                    4e:12:b3:d9:34:04:98:a9:b6:34:ef:ad:43:7a:15:
                    bc:0c:d5:da:f2:d9:92:30:96:5e:c6:32:a9:16:aa:
                    10:a8:76:03:89:a9:d6:05:ba:86:2f:c0:d7:bc:c2:
                    42:14:59:91:2a:69:fc:1a:fe:02:28:68:93:ef:e9:
                    07:85:fc:3f:94:f7:9a:af:7b:e2:84:48:6e:93:07:
                    67:d6:fd:ad:49:e4:85:b1:a8:67:43:db:73:16:54:
                    4c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:CC:C9:7A:CC:1D:61:C9:66:D3:4B:EB:7D:53:D7:8E:55:2D:EC:57
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b7529512-d3e8-458c-b43f-9e84bd73caed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.177.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         48:0a:a5:42:33:91:67:35:15:d7:91:81:cd:e4:d5:bc:89:95:
         72:07:6c:24:5e:7b:c6:0b:8b:35:b8:68:c6:00:96:ef:d9:22:
         29:bd:70:04:8e:12:cf:8d:35:94:44:51:94:75:da:75:e8:a2:
         a3:b4:22:d2:43:0a:5e:e1:eb:14:fe:1f:71:96:78:63:16:f0:
         25:53:e8:32:a4:d4:50:a0:b9:ba:f4:6f:13:c5:c4:35:7b:42:
         34:40:bc:19:64:1b:34:81:74:5e:10:89:c5:b7:c0:63:8b:10:
         31:4b:8f:95:1a:12:ef:03:cb:f0:f1:81:fd:32:ab:4b:48:cc:
         77:99:82:a8:0d:cb:d9:83:4c:0f:c6:ea:2c:91:5d:67:b0:b9:
         f4:72:f4:1a:8c:9d:f1:4a:fe:80:32:51:6a:8a:f9:89:93:dd:
         8f:fa:13:4c:cb:bf:ec:56:df:f7:96:df:9c:7c:a5:5d:28:32:
         cc:5e:93:4e:07:4a:f3:f5:a6:3d:18:5f:fc:9c:08:34:58:ae:
         47:63:3c:14:3e:a3:76:10:3a:eb:c7:88:19:8b:19:04:92:f5:
         97:48:96:76:39:10:5e:28:0e:a1:73:6c:84:37:47:48:b4:da:
         84:e5:f2:c9:02:a5:6d:81:c3:99:44:e0:70:59:68:a7:a6:1a:
         56:79:29:80
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUCcnn4CuoIhAQh131wfdCjVGk7pwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNTA1MDEwMDEzWhcNMjYwODAzMjM1OTU5
WjB6MUkwRwYDVQQFE0A2ZDQyODM2MjZkOWNhYmYwOTNmNTlhNDdjZmE5NmFmNmNj
NGVjYTRkYjBiZDJiODk1MGQyMjQzZWRjOWZjMTVmMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCqPlGQEwjUx0uEPHu13ZsLTM98wmqIQj5+qYuwUHWKQ2fU
YMdLM1bGcslzrCbXfmB43wn0CQBGdtz3VLfmr/ldmY1DOmNK80mfffHiVXwSMwav
S4eATwT0cIdwtSXluiKMqO1bpodvy1wup+z2gNdJ3gvESUqdLd84gnoSg64gmWzi
v/YGhELZU77qrR7fLOYFn4WOLBKlvBhXltAP7PhUiGiUD04Ss9k0BJiptjTvrUN6
FbwM1dry2ZIwll7GMqkWqhCodgOJqdYFuoYvwNe8wkIUWZEqafwa/gIoaJPv6QeF
/D+U95qve+KESG6TB2fW/a1J5IWxqGdD23MWVExJAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUfMzJeswdYclm00vrfVPXjlUt7FcwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2I3NTI5NTEyLWQzZTgtNDU4Yy1iNDNmLTllODRiZDczY2FlZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAEPsUAwDQYJKoZIhvcNAQELBQADggEBAEgKpUIzkWc1FdeRgc3k1byJlXIH
bCRee8YLizW4aMYAlu/ZIim9cASOEs+NNZREUZR12nXooqO0ItJDCl7h6xT+H3GW
eGMW8CVT6DKk1FCgubr0bxPFxDV7QjRAvBlkGzSBdF4QicW3wGOLEDFLj5UaEu8D
y/Dxgf0yq0tIzHeZgqgNy9mDTA/G6iyRXWewufRy9BqMnfFK/oAyUWqK+YmT3Y/6
E0zLv+xW3/eW35x8pV0oMsxek04HSvP1pj0YX/ycCDRYrkdjPBQ+o3YQOuvHiBmL
GQSS9ZdIlnY5EF4oDqFzbIQ3R0i02oTl8skCpW2Bw5lE4HBZaKemGlZ5KYA=
-----END CERTIFICATE-----
Generated at Tue May 12 22:19:12 2026 by rpki-client