Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/47a27941-1f5f-4303-9603-eefe007f03fc.roa
File:                     47a27941-1f5f-4303-9603-eefe007f03fc.roa (raw, json)
Hash identifier:          CpM8ajAXkYaAj/2VRPDtIQVcCrZTcaIbATXf0WZUUFQ=
Subject key identifier:   7F:6B:A1:43:D2:59:85:00:9C:AC:D9:4B:FF:FF:4E:90:20:FA:21:0C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       607F4FE1770DA13A48A60F576F05E02D68986F21
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/47a27941-1f5f-4303-9603-eefe007f03fc.roa
Signing time:             Fri 15 May 2026 02:20:06 +0000
ROA not before:           Fri 15 May 2026 02:20:06 +0000
ROA not after:            Thu 13 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        16.171.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:7f:4f:e1:77:0d:a1:3a:48:a6:0f:57:6f:05:e0:2d:68:98:6f:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 15 02:20:06 2026 GMT
            Not After : Aug 13 23:59:59 2026 GMT
        Subject: serialNumber=61f67a2253462e410babf662e6624dae5b7490a9106ab89edf3604986096632d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ba:7f:ed:e5:5b:e6:ed:61:c3:39:92:5a:fe:
                    b0:e7:c3:1d:d3:73:7c:d9:a8:ad:5b:50:ca:32:35:
                    a8:77:f4:7f:cc:23:37:18:5e:b6:8d:76:f9:f3:2b:
                    e1:2f:75:77:c6:7e:c4:cb:de:66:53:3b:47:5e:0b:
                    57:45:fb:6a:2d:2e:39:1f:87:ac:56:62:32:d0:d6:
                    50:d8:c5:a5:47:6c:fc:58:2e:67:c5:90:df:74:c6:
                    9b:2a:d9:63:b1:69:f1:31:a0:f0:a1:1e:c1:58:94:
                    0d:0c:80:3e:16:c4:dd:5f:3b:1d:34:9c:d4:3a:37:
                    d5:0d:58:fa:45:4c:21:ab:e2:fd:c3:38:14:90:d3:
                    47:a0:cd:83:20:2b:0b:8a:ad:ae:46:07:5d:6c:d2:
                    ec:2e:9b:c9:9c:a0:e3:61:d6:e8:00:ec:3b:1c:50:
                    b2:0e:0a:b3:be:10:ad:c6:19:13:43:a1:f1:65:89:
                    69:ca:0d:16:c5:91:92:9d:87:b7:2b:9d:9d:91:a6:
                    87:7d:d7:70:4b:c4:0d:6f:c2:50:34:d3:a8:ff:73:
                    01:fa:11:38:e5:18:e8:5f:84:1b:64:de:5f:60:e3:
                    e3:44:a8:18:35:a2:73:ea:78:64:92:34:e8:ff:35:
                    1e:f2:39:08:c0:6f:9d:0f:5a:49:4e:ab:63:94:ab:
                    8f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:6B:A1:43:D2:59:85:00:9C:AC:D9:4B:FF:FF:4E:90:20:FA:21:0C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/47a27941-1f5f-4303-9603-eefe007f03fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.171.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:f6:dd:8b:61:31:7e:c8:bf:06:6a:7d:a4:6a:0f:67:ed:d3:
         73:b0:fe:a0:31:94:4e:bd:92:51:02:ab:c8:e0:9e:42:34:06:
         d6:ac:f5:07:df:12:60:d2:22:82:c5:c8:fd:2f:95:2d:10:c1:
         35:76:37:28:cf:f9:87:8b:fa:11:cc:83:6e:25:e9:4f:95:af:
         ad:9d:b1:d8:5c:ad:9d:c5:31:3d:3a:3d:c5:e7:05:ec:6d:8f:
         47:32:bc:ce:1d:09:84:18:0b:35:c8:d0:f9:87:e8:5a:b1:d5:
         2f:99:53:7f:ec:dd:34:1d:03:ae:ea:65:61:c1:9d:37:30:f5:
         81:f6:ae:a5:39:b8:59:20:d7:9f:53:47:82:fd:ee:52:c8:60:
         68:35:e8:67:ef:cb:18:35:01:1c:e2:07:ba:71:32:0c:cf:16:
         19:94:5b:e6:0f:09:7e:3a:b1:ea:4b:95:00:d9:cc:4c:f2:52:
         26:9b:be:52:38:2f:19:6e:cb:a1:59:55:c2:4f:2b:ec:19:3c:
         13:b7:bb:0e:70:80:d1:9b:55:a6:e3:89:90:1e:54:b2:54:67:
         20:6d:f2:36:b3:7f:be:13:0d:4d:07:94:aa:78:78:79:c2:ef:
         2c:99:62:c3:fa:92:8e:45:7d:5a:3f:52:44:26:07:09:f0:5d:
         56:26:02:b3
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUYH9P4XcNoTpIpg9XbwXgLWiYbyEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE1MDIyMDA2WhcNMjYwODEzMjM1OTU5
WjB6MUkwRwYDVQQFE0A2MWY2N2EyMjUzNDYyZTQxMGJhYmY2NjJlNjYyNGRhZTVi
NzQ5MGE5MTA2YWI4OWVkZjM2MDQ5ODYwOTY2MzJkMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC1un/t5Vvm7WHDOZJa/rDnwx3Tc3zZqK1bUMoyNah39H/M
IzcYXraNdvnzK+EvdXfGfsTL3mZTO0deC1dF+2otLjkfh6xWYjLQ1lDYxaVHbPxY
LmfFkN90xpsq2WOxafExoPChHsFYlA0MgD4WxN1fOx00nNQ6N9UNWPpFTCGr4v3D
OBSQ00egzYMgKwuKra5GB11s0uwum8mcoONh1ugA7DscULIOCrO+EK3GGRNDofFl
iWnKDRbFkZKdh7crnZ2Rpod913BLxA1vwlA006j/cwH6ETjlGOhfhBtk3l9g4+NE
qBg1onPqeGSSNOj/NR7yOQjAb50PWklOq2OUq48vAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUf2uhQ9JZhQCcrNlL//9OkCD6IQwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzQ3YTI3OTQxLTFmNWYtNDMwMy05NjAzLWVlZmUwMDdmMDNmYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIQq1AwDQYJKoZIhvcNAQELBQADggEBAI323YthMX7IvwZqfaRqD2ft03Ow
/qAxlE69klECq8jgnkI0Btas9QffEmDSIoLFyP0vlS0QwTV2NyjP+YeL+hHMg24l
6U+Vr62dsdhcrZ3FMT06PcXnBextj0cyvM4dCYQYCzXI0PmH6Fqx1S+ZU3/s3TQd
A67qZWHBnTcw9YH2rqU5uFkg159TR4L97lLIYGg16Gfvyxg1ARziB7pxMgzPFhmU
W+YPCX46sepLlQDZzEzyUiabvlI4Lxluy6FZVcJPK+wZPBO3uw5wgNGbVabjiZAe
VLJUZyBt8jazf74TDU0HlKp4eHnC7yyZYsP6ko5FfVo/UkQmBwnwXVYmArM=
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:47:40 2026 by rpki-client