Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/269cebc9-cd3a-46d6-b6ab-f2546cfc5f43.roa
File:                     269cebc9-cd3a-46d6-b6ab-f2546cfc5f43.roa (raw, json)
Hash identifier:          JfhbEZqE3tTLnkp2Aw0/W+dFKSggUskB8+c8wVwNBkQ=
Subject key identifier:   71:8D:B9:77:9B:BA:C7:3D:E5:EC:33:73:8D:9C:42:51:BE:B2:88:1B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       49494CED9BDFF631619A889D9A7DB4A65D6029E4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/269cebc9-cd3a-46d6-b6ab-f2546cfc5f43.roa
Signing time:             Fri 24 Jul 2026 00:41:16 +0000
ROA not before:           Fri 24 Jul 2026 00:41:16 +0000
ROA not after:            Thu 22 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        184.72.80.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:49:4c:ed:9b:df:f6:31:61:9a:88:9d:9a:7d:b4:a6:5d:60:29:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 24 00:41:16 2026 GMT
            Not After : Oct 22 23:59:59 2026 GMT
        Subject: serialNumber=47d452c86fd713fb70374ac93f6553ddc96ff77e6a60e60e972d64d79e8f825d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:08:d8:89:5f:51:72:31:a4:cd:10:56:b0:30:
                    df:91:12:55:fc:be:53:4c:bb:01:92:df:4c:51:8f:
                    ff:d2:8a:28:c7:29:c3:b6:c9:2a:ee:b9:6e:ca:6c:
                    23:db:fb:69:ca:80:48:60:ab:1e:3c:d8:b3:aa:1b:
                    22:ee:0f:27:bb:c8:fa:16:48:04:f3:1a:ba:cb:30:
                    c0:06:2c:22:48:b2:61:1e:3f:6f:db:85:c2:b3:a6:
                    1e:67:10:5a:8e:bb:25:d1:d6:ac:9f:a2:0b:15:75:
                    44:1d:a9:cd:ac:4c:19:16:0a:77:23:6f:45:22:cf:
                    d5:5f:c0:d5:b1:48:18:78:b3:2f:0d:7a:43:d1:23:
                    b5:e4:0d:0e:c8:ec:d9:3d:d5:e7:91:86:e6:e1:5f:
                    96:36:68:8c:74:73:63:5d:7a:d3:ed:57:65:7e:52:
                    00:ab:07:60:8e:f1:b6:97:dc:31:18:91:ee:f1:7b:
                    1d:46:40:3a:16:b0:c3:f6:29:36:45:41:50:bb:8f:
                    a5:6e:a6:fa:52:13:dd:9f:b1:94:b6:52:a2:f7:6b:
                    20:8a:df:7e:9b:6c:e9:f5:54:13:18:a9:a3:90:73:
                    f2:1d:f8:31:9f:90:ac:cf:0e:5c:7d:e9:e3:89:28:
                    07:7d:da:b7:89:34:ac:e9:0e:49:cc:e9:01:3a:2a:
                    f4:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:8D:B9:77:9B:BA:C7:3D:E5:EC:33:73:8D:9C:42:51:BE:B2:88:1B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/269cebc9-cd3a-46d6-b6ab-f2546cfc5f43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.72.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         10:aa:67:35:88:00:69:d4:82:fb:36:7c:7e:4b:20:2b:d6:7c:
         24:ce:4b:71:a2:f6:21:f2:1b:9c:1d:24:fd:fa:9d:d5:54:a2:
         a5:49:ee:67:ee:ce:ec:56:79:04:39:f1:72:d4:0a:f2:67:3b:
         13:74:e2:bb:e0:19:11:ad:3b:d5:2c:3b:73:83:ed:c8:00:57:
         5a:e0:52:05:6b:14:c9:f0:45:c4:88:a0:0a:b1:00:30:c8:7d:
         b9:14:22:7d:23:5c:70:51:ad:d3:a6:6d:50:77:ef:b5:33:53:
         a5:0e:8c:f1:61:19:0f:09:37:05:a0:30:05:1e:ca:ce:38:0f:
         a0:fc:6e:74:32:c0:07:d4:24:65:96:c1:28:ea:26:52:d6:79:
         d8:1a:c4:96:75:8e:02:bf:b6:80:09:d0:38:92:93:ef:69:c0:
         ed:88:4b:0a:d7:07:e0:22:fe:a2:17:b9:88:49:ad:65:a6:46:
         6e:c0:60:9e:73:65:f5:26:a7:86:f2:76:53:c1:68:27:9a:f8:
         94:25:54:12:04:44:3e:17:f0:b2:c7:07:be:3e:af:a9:e4:11:
         63:1b:08:5b:e1:de:22:0c:0d:b0:86:ae:e6:a8:03:39:5c:cc:
         6d:ca:f1:b9:35:2a:f8:39:aa:80:3e:74:f0:26:52:a1:1b:28:
         7a:04:53:e4
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUSUlM7Zvf9jFhmoidmn20pl1gKeQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzI0MDA0MTE2WhcNMjYxMDIyMjM1OTU5
WjB6MUkwRwYDVQQFE0A0N2Q0NTJjODZmZDcxM2ZiNzAzNzRhYzkzZjY1NTNkZGM5
NmZmNzdlNmE2MGU2MGU5NzJkNjRkNzllOGY4MjVkMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCuCNiJX1FyMaTNEFawMN+RElX8vlNMuwGS30xRj//SiijH
KcO2ySruuW7KbCPb+2nKgEhgqx482LOqGyLuDye7yPoWSATzGrrLMMAGLCJIsmEe
P2/bhcKzph5nEFqOuyXR1qyfogsVdUQdqc2sTBkWCncjb0Uiz9VfwNWxSBh4sy8N
ekPRI7XkDQ7I7Nk91eeRhubhX5Y2aIx0c2NdetPtV2V+UgCrB2CO8baX3DEYke7x
ex1GQDoWsMP2KTZFQVC7j6VupvpSE92fsZS2UqL3ayCK336bbOn1VBMYqaOQc/Id
+DGfkKzPDlx96eOJKAd92reJNKzpDknM6QE6KvSzAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUcY25d5u6xz3l7DNzjZxCUb6yiBswHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzI2OWNlYmM5LWNkM2EtNDZkNi1iNmFiLWYyNTQ2Y2ZjNWY0My5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAO4SFAwDQYJKoZIhvcNAQELBQADggEBABCqZzWIAGnUgvs2fH5LICvWfCTO
S3Gi9iHyG5wdJP36ndVUoqVJ7mfuzuxWeQQ58XLUCvJnOxN04rvgGRGtO9UsO3OD
7cgAV1rgUgVrFMnwRcSIoAqxADDIfbkUIn0jXHBRrdOmbVB377UzU6UOjPFhGQ8J
NwWgMAUeys44D6D8bnQywAfUJGWWwSjqJlLWedgaxJZ1jgK/toAJ0DiSk+9pwO2I
SwrXB+Ai/qIXuYhJrWWmRm7AYJ5zZfUmp4bydlPBaCea+JQlVBIERD4X8LLHB74+
r6nkEWMbCFvh3iIMDbCGruaoAzlczG3K8bk1Kvg5qoA+dPAmUqEbKHoEU+Q=
-----END CERTIFICATE-----
Generated at Tue Jul 28 17:13:34 2026 by rpki-client