Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d71ada9-bbc3-41f1-b86d-df15fdacb515.roa
File:                     4d71ada9-bbc3-41f1-b86d-df15fdacb515.roa (raw, json)
Hash identifier:          BWckelMG9j7KQJ8+UGf7HiozV9t0IKPl0YqQA7qBB00=
Subject key identifier:   53:32:9E:66:94:04:F2:53:B9:66:4F:6D:01:BF:9C:95:D7:BC:E5:D1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       26E963D586D8A7313929694B1A9F7814C9098F48
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d71ada9-bbc3-41f1-b86d-df15fdacb515.roa
Signing time:             Sat 16 May 2026 01:20:02 +0000
ROA not before:           Sat 16 May 2026 01:20:02 +0000
ROA not after:            Fri 14 Aug 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        23.22.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:e9:63:d5:86:d8:a7:31:39:29:69:4b:1a:9f:78:14:c9:09:8f:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 16 01:20:02 2026 GMT
            Not After : Aug 14 23:59:59 2026 GMT
        Subject: serialNumber=55cf0c0b0f0c8b40a1c893251a2bfaa22cef4d2cf6e182a08c2814a7aac11c64, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4b:01:4d:ef:03:51:7e:bd:3f:49:c8:99:f6:
                    57:98:31:ac:49:36:17:a4:32:85:a8:2d:92:9a:ba:
                    61:98:ad:1f:f2:ce:9e:09:02:c3:97:62:8d:2c:1f:
                    09:75:e3:b9:c0:8e:07:f9:54:ff:34:9b:5d:8f:11:
                    85:ff:5b:06:c8:9a:5d:b7:fc:80:d1:4d:b4:0a:f4:
                    61:83:eb:64:cc:8c:49:f8:7b:30:f0:b5:13:56:8f:
                    37:bd:bb:b9:8c:75:1b:85:d5:b5:64:81:05:59:36:
                    61:71:ed:97:53:1e:f3:34:e1:8c:60:15:26:7c:7e:
                    35:b5:23:d8:87:71:15:2b:e6:27:d5:78:2c:08:f1:
                    a6:b2:b0:33:c7:7c:d2:78:c8:6a:43:96:9c:3b:a8:
                    64:81:95:be:6c:96:a7:8b:1b:5f:d1:1b:c2:68:75:
                    82:23:7d:4d:08:1e:c3:a4:a6:fb:8b:86:db:23:2f:
                    5c:c6:98:51:f2:6b:fd:13:fc:c0:c9:f2:79:0d:f1:
                    e1:28:d0:f2:3e:35:69:c8:9d:cc:47:96:c1:a5:58:
                    64:35:ce:7a:94:c4:01:78:b4:d0:09:97:6f:9c:da:
                    f1:c3:7b:f5:30:f4:81:76:4b:3a:b4:8a:42:2b:47:
                    7c:e2:5a:6a:3e:86:c5:15:f0:7a:f0:f3:a1:5a:f2:
                    ef:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:32:9E:66:94:04:F2:53:B9:66:4F:6D:01:BF:9C:95:D7:BC:E5:D1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d71ada9-bbc3-41f1-b86d-df15fdacb515.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.22.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a4:34:91:d2:d4:98:7d:26:17:f1:e5:99:40:24:89:0a:bd:eb:
         70:b9:da:42:71:42:34:6a:9a:3c:6f:7a:52:88:70:fe:99:a7:
         fb:85:4d:fc:dd:e9:86:de:68:e7:5a:ae:4d:20:31:ce:b0:ed:
         8f:b2:95:08:a6:86:e0:6c:f0:dd:97:be:76:72:2f:03:3f:4e:
         b5:61:7b:c9:b9:2f:f9:0f:a2:a9:e2:04:21:c7:51:c7:00:fd:
         b6:ae:84:80:6b:b5:73:51:c5:cb:25:12:5d:d3:99:ac:d6:aa:
         2d:15:62:f5:f4:9c:0d:35:4d:a5:1b:ac:ed:8b:0f:d3:52:6e:
         3b:82:39:94:90:80:ae:16:d0:a9:d0:7f:0d:a8:c7:5e:1c:d9:
         d5:d3:ab:c7:82:37:36:c3:17:18:4b:48:46:bc:0e:ce:fe:79:
         55:58:3a:b3:03:df:11:88:cb:ef:7f:ab:d3:2e:c4:02:2f:49:
         3a:50:2f:f8:2a:a5:b2:64:bb:bb:7a:f5:6a:82:c8:6a:26:39:
         a3:5c:b9:94:50:4b:7f:66:63:73:e1:c8:5f:5d:d8:27:57:44:
         07:c3:cd:f4:eb:cf:3d:4b:8a:96:1f:d2:8f:10:61:6b:7a:24:
         4a:24:51:d3:67:d0:c6:5a:92:4b:92:24:55:40:9f:60:be:33:
         a3:e6:7e:b8
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUJulj1YbYpzE5KWlLGp94FMkJj0gwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE2MDEyMDAyWhcNMjYwODE0MjM1OTU5
WjB6MUkwRwYDVQQFE0A1NWNmMGMwYjBmMGM4YjQwYTFjODkzMjUxYTJiZmFhMjJj
ZWY0ZDJjZjZlMTgyYTA4YzI4MTRhN2FhYzExYzY0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQClSwFN7wNRfr0/SciZ9leYMaxJNhekMoWoLZKaumGYrR/y
zp4JAsOXYo0sHwl147nAjgf5VP80m12PEYX/WwbIml23/IDRTbQK9GGD62TMjEn4
ezDwtRNWjze9u7mMdRuF1bVkgQVZNmFx7ZdTHvM04YxgFSZ8fjW1I9iHcRUr5ifV
eCwI8aaysDPHfNJ4yGpDlpw7qGSBlb5slqeLG1/RG8JodYIjfU0IHsOkpvuLhtsj
L1zGmFHya/0T/MDJ8nkN8eEo0PI+NWnIncxHlsGlWGQ1znqUxAF4tNAJl2+c2vHD
e/Uw9IF2Szq0ikIrR3ziWmo+hsUV8Hrw86Fa8u/HAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUUzKeZpQE8lO5Zk9tAb+clde85dEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzRkNzFhZGE5LWJiYzMtNDFmMS1iODZkLWRmMTVmZGFjYjUxNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAQXFlAwDQYJKoZIhvcNAQELBQADggEBAKQ0kdLUmH0mF/HlmUAkiQq963C5
2kJxQjRqmjxvelKIcP6Zp/uFTfzd6YbeaOdark0gMc6w7Y+ylQimhuBs8N2XvnZy
LwM/TrVhe8m5L/kPoqniBCHHUccA/bauhIBrtXNRxcslEl3TmazWqi0VYvX0nA01
TaUbrO2LD9NSbjuCOZSQgK4W0KnQfw2ox14c2dXTq8eCNzbDFxhLSEa8Ds7+eVVY
OrMD3xGIy+9/q9MuxAIvSTpQL/gqpbJku7t69WqCyGomOaNcuZRQS39mY3PhyF9d
2CdXRAfDzfTrzz1LipYf0o8QYWt6JEokUdNn0MZakkuSJFVAn2C+M6Pmfrg=
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:06:02 2026 by rpki-client