Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ed3afac-055a-4ba0-8dd9-6d8700aa13eb.roa
File:                     0ed3afac-055a-4ba0-8dd9-6d8700aa13eb.roa (raw, json)
Hash identifier:          BzlSVmDbad4USvaG+pK30HHPEufSPf2vvOHsXH1tIGM=
Subject key identifier:   33:93:C8:DC:12:24:8C:DA:88:90:B0:9C:7E:4C:BC:E8:9D:74:E6:1C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       65ED8C29872DDBA4600948F34F41C10A4A5CDAAE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ed3afac-055a-4ba0-8dd9-6d8700aa13eb.roa
Signing time:             Sat 14 Feb 2026 00:10:56 +0000
ROA not before:           Sat 14 Feb 2026 00:10:56 +0000
ROA not after:            Fri 15 May 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        184.72.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:ed:8c:29:87:2d:db:a4:60:09:48:f3:4f:41:c1:0a:4a:5c:da:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 14 00:10:56 2026 GMT
            Not After : May 15 23:59:59 2026 GMT
        Subject: serialNumber=b5cfdc43c6ddd59e9afe4578272627318b6b28bb974508ceab764aa1ec3c5983, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:59:69:99:31:c2:e7:01:fc:a9:71:90:fa:5c:
                    1d:b1:50:f9:6a:db:11:07:bd:bb:c4:ad:81:ac:9a:
                    5e:80:bf:50:15:50:17:62:bc:8e:68:20:c8:02:cc:
                    d9:bf:cf:cd:63:4d:03:79:72:eb:81:a7:52:aa:e0:
                    2c:23:50:20:bd:14:a8:64:59:c9:23:16:40:c6:bd:
                    ce:66:fb:46:fa:45:c2:73:ff:95:b3:b6:df:07:4d:
                    4f:44:0d:74:dd:8a:51:37:36:cb:a9:a5:31:e4:b2:
                    e4:63:98:0f:37:b6:70:1c:89:bc:cc:4c:70:b1:76:
                    1d:0e:45:f6:03:8b:7a:57:1d:ea:53:98:4f:da:25:
                    e0:65:54:63:b6:f2:fb:5a:9d:5a:7d:59:7d:15:0f:
                    0c:f7:6a:65:9c:de:2a:5d:e0:d9:d1:a5:ec:cb:e0:
                    a6:8b:aa:cc:d5:c6:ba:24:b1:61:97:88:3a:ca:fe:
                    1a:1b:25:32:be:ec:a4:c5:60:ff:ca:52:04:42:82:
                    24:60:f4:dc:db:e1:36:37:65:f3:f5:c6:ab:32:8d:
                    5b:52:34:95:5d:ef:0d:06:f2:50:ce:9a:a3:f4:96:
                    f1:54:f3:9b:f6:bb:14:0a:38:56:b5:a2:23:09:28:
                    86:bd:28:25:4b:81:45:aa:5e:27:83:42:fb:1d:ce:
                    17:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:93:C8:DC:12:24:8C:DA:88:90:B0:9C:7E:4C:BC:E8:9D:74:E6:1C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ed3afac-055a-4ba0-8dd9-6d8700aa13eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.72.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         0c:79:c3:1e:6a:c4:2a:68:98:94:8a:5d:0f:a9:76:09:3f:42:
         bb:9f:f1:ce:29:6c:0a:1f:0e:c1:08:3d:87:bc:62:3a:9c:4f:
         04:be:6b:be:23:40:2b:81:67:dd:29:12:36:d8:31:02:1c:3b:
         70:97:38:0d:63:93:d2:56:77:0d:df:0a:ff:1e:00:49:3b:0d:
         38:b2:41:9b:9a:14:89:b3:c8:15:fd:13:82:dd:97:c6:6c:47:
         f5:83:ed:c6:20:f4:55:ea:e3:23:f7:5a:b1:03:fa:a0:db:35:
         ec:1d:71:b9:9b:1f:b2:1c:da:ee:d0:12:74:de:ca:da:89:e0:
         f1:30:6d:02:7c:c5:bd:c8:bc:8b:05:7f:bc:21:8f:2c:a8:75:
         49:5a:cc:5a:ef:62:9a:aa:cc:44:2a:64:f1:ce:ce:2e:2f:0a:
         fb:54:a2:0a:f0:f5:29:37:05:bf:0a:bf:01:60:f4:95:4a:a4:
         b1:fd:3f:b4:d8:32:93:48:64:54:89:27:e9:b5:3c:2a:ba:c2:
         d1:07:57:40:b0:21:8c:90:b9:52:02:2e:d2:f5:cd:61:1e:30:
         6e:da:af:d8:e6:48:5a:00:fa:88:df:bb:de:70:99:f1:30:f0:
         fa:7b:d5:c8:c2:63:63:b2:d0:7f:4a:f2:29:cd:44:1f:80:99:
         a9:d9:d7:67
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUZe2MKYct26RgCUjzT0HBCkpc2q4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjE0MDAxMDU2WhcNMjYwNTE1MjM1OTU5
WjB6MUkwRwYDVQQFE0BiNWNmZGM0M2M2ZGRkNTllOWFmZTQ1NzgyNzI2MjczMThi
NmIyOGJiOTc0NTA4Y2VhYjc2NGFhMWVjM2M1OTgzMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC6WWmZMcLnAfypcZD6XB2xUPlq2xEHvbvErYGsml6Av1AV
UBdivI5oIMgCzNm/z81jTQN5cuuBp1Kq4CwjUCC9FKhkWckjFkDGvc5m+0b6RcJz
/5Wztt8HTU9EDXTdilE3NsuppTHksuRjmA83tnAcibzMTHCxdh0ORfYDi3pXHepT
mE/aJeBlVGO28vtanVp9WX0VDwz3amWc3ipd4NnRpezL4KaLqszVxroksWGXiDrK
/hobJTK+7KTFYP/KUgRCgiRg9Nzb4TY3ZfP1xqsyjVtSNJVd7w0G8lDOmqP0lvFU
85v2uxQKOFa1oiMJKIa9KCVLgUWqXieDQvsdzhctAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUM5PI3BIkjNqIkLCcfky86J105hwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzBlZDNhZmFjLTA1NWEtNGJhMC04ZGQ5LTZkODcwMGFhMTNlYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAe4SIAwDQYJKoZIhvcNAQELBQADggEBAAx5wx5qxCpomJSKXQ+pdgk/Qruf
8c4pbAofDsEIPYe8YjqcTwS+a74jQCuBZ90pEjbYMQIcO3CXOA1jk9JWdw3fCv8e
AEk7DTiyQZuaFImzyBX9E4Ldl8ZsR/WD7cYg9FXq4yP3WrED+qDbNewdcbmbH7Ic
2u7QEnTeytqJ4PEwbQJ8xb3IvIsFf7whjyyodUlazFrvYpqqzEQqZPHOzi4vCvtU
ogrw9Sk3Bb8KvwFg9JVKpLH9P7TYMpNIZFSJJ+m1PCq6wtEHV0CwIYyQuVICLtL1
zWEeMG7ar9jmSFoA+ojfu95wmfEw8Pp71cjCY2Oy0H9K8inNRB+AmanZ12c=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:11:20 2026 by rpki-client