Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/51955179-91c0-486d-9cde-37bfac2e5cef.roa
File:                     51955179-91c0-486d-9cde-37bfac2e5cef.roa (raw, json)
Hash identifier:          NpGdwhxnXvwx5uIWFVKiudLiRbDHI18P/i7GnbZoRiA=
Subject key identifier:   6B:5E:09:BE:B1:BE:02:28:A6:9B:61:41:59:D4:06:D6:21:B5:91:D8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0F80FC99D1713B79C27CBB42A3BE6C60F9966188
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/51955179-91c0-486d-9cde-37bfac2e5cef.roa
Signing time:             Fri 06 Feb 2026 00:00:11 +0000
ROA not before:           Fri 06 Feb 2026 00:00:11 +0000
ROA not after:            Thu 07 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        65.9.168.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:80:fc:99:d1:71:3b:79:c2:7c:bb:42:a3:be:6c:60:f9:96:61:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb  6 00:00:11 2026 GMT
            Not After : May  7 23:59:59 2026 GMT
        Subject: serialNumber=510de66c18b3dee8d6ce194c176174bc73b4da7a63034be2bf935462664d8d01, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:82:1f:65:86:46:ca:9f:35:a8:8f:ac:88:ce:
                    b9:ff:fc:51:d1:29:52:95:89:03:22:8c:3b:0c:7d:
                    7e:7c:4e:b1:85:11:fa:83:67:f2:26:c0:32:f7:c2:
                    03:5b:5b:9b:e9:5b:73:f6:e0:a1:e8:18:ad:9c:b7:
                    8f:08:5c:a7:48:fb:c5:70:bc:a8:ca:de:54:0d:73:
                    32:50:6b:bd:a8:f4:b9:46:28:d4:99:62:96:59:45:
                    ac:6e:e5:ea:07:2d:56:ae:45:05:0a:a7:93:de:75:
                    53:1b:f0:c6:e4:28:70:d7:74:e4:c9:8b:af:16:f2:
                    db:ef:54:29:4a:28:36:29:30:1b:f0:a0:94:7e:97:
                    21:4f:9d:1a:26:f9:b9:0e:52:28:c6:54:39:d4:f7:
                    dc:4e:41:b9:8b:5f:6e:80:95:9c:46:c8:f0:bf:02:
                    9a:59:63:cb:60:3d:7e:42:fc:0f:99:43:7b:3c:84:
                    fa:21:f8:5d:50:dd:c3:f4:1e:2c:f1:9a:7c:80:02:
                    b7:4d:8b:37:c1:bd:7c:a6:d0:85:6a:0e:79:9f:ca:
                    7f:9f:6e:27:4d:6f:df:b8:4d:10:b8:a7:e4:61:36:
                    93:1c:b4:eb:c1:72:12:11:88:d8:41:a3:56:42:47:
                    f7:75:aa:52:6b:ee:6b:7a:a6:1a:84:9a:46:97:1f:
                    74:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:5E:09:BE:B1:BE:02:28:A6:9B:61:41:59:D4:06:D6:21:B5:91:D8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/51955179-91c0-486d-9cde-37bfac2e5cef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.9.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:e0:e6:d2:88:ae:8f:b3:f0:a9:41:af:e1:7b:4a:c4:5f:66:
         ca:c6:1b:6f:41:85:7b:e0:8d:82:d7:62:e3:b7:9a:08:7d:86:
         62:d9:57:d3:ce:52:96:7b:d3:27:f9:d2:93:b8:9f:62:05:a5:
         c5:2f:64:0a:d1:f3:3c:d8:65:84:fc:d5:ad:5d:a0:67:c8:b1:
         96:fe:5f:2b:44:93:57:41:d0:c9:61:e9:ac:0b:49:d2:b1:cf:
         24:60:81:a8:11:ae:ea:f3:eb:c2:75:66:e2:21:b1:a6:61:68:
         e5:91:8c:8f:23:bb:57:64:f5:6a:01:bf:24:e2:96:5b:b6:87:
         60:b2:7d:70:34:98:16:f1:f4:c4:fe:61:2b:23:fc:ac:04:83:
         a0:f6:f2:48:4d:94:d9:f5:35:8a:e3:23:91:6a:98:0d:38:59:
         8d:dd:0c:a5:42:96:73:fb:e8:7b:6f:c4:1f:11:ca:0a:7d:ab:
         5a:d3:17:88:c8:17:e6:99:af:05:a3:be:bc:55:29:29:1a:f3:
         f7:03:99:4f:96:c2:44:1c:c3:2c:9d:a1:31:39:b7:88:05:80:
         1f:1d:b2:43:d7:b9:7c:ac:00:4b:d0:43:64:5c:72:ae:e3:40:
         33:3a:9e:6f:72:46:c9:cf:55:98:5e:60:0c:e8:5e:e9:07:cb:
         15:a8:64:51
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUD4D8mdFxO3nCfLtCo75sYPmWYYgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjA2MDAwMDExWhcNMjYwNTA3MjM1OTU5
WjB6MUkwRwYDVQQFE0A1MTBkZTY2YzE4YjNkZWU4ZDZjZTE5NGMxNzYxNzRiYzcz
YjRkYTdhNjMwMzRiZTJiZjkzNTQ2MjY2NGQ4ZDAxMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCfgh9lhkbKnzWoj6yIzrn//FHRKVKViQMijDsMfX58TrGF
EfqDZ/ImwDL3wgNbW5vpW3P24KHoGK2ct48IXKdI+8VwvKjK3lQNczJQa72o9LlG
KNSZYpZZRaxu5eoHLVauRQUKp5PedVMb8MbkKHDXdOTJi68W8tvvVClKKDYpMBvw
oJR+lyFPnRom+bkOUijGVDnU99xOQbmLX26AlZxGyPC/AppZY8tgPX5C/A+ZQ3s8
hPoh+F1Q3cP0HizxmnyAArdNizfBvXym0IVqDnmfyn+fbidNb9+4TRC4p+RhNpMc
tOvBchIRiNhBo1ZCR/d1qlJr7mt6phqEmkaXH3T9AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUa14JvrG+Aiimm2FBWdQG1iG1kdgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzUxOTU1MTc5LTkxYzAtNDg2ZC05Y2RlLTM3YmZhYzJlNWNlZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAFBCagwDQYJKoZIhvcNAQELBQADggEBAEvg5tKIro+z8KlBr+F7SsRfZsrG
G29BhXvgjYLXYuO3mgh9hmLZV9POUpZ70yf50pO4n2IFpcUvZArR8zzYZYT81a1d
oGfIsZb+XytEk1dB0Mlh6awLSdKxzyRggagRrurz68J1ZuIhsaZhaOWRjI8ju1dk
9WoBvyTillu2h2CyfXA0mBbx9MT+YSsj/KwEg6D28khNlNn1NYrjI5FqmA04WY3d
DKVClnP76HtvxB8Rygp9q1rTF4jIF+aZrwWjvrxVKSka8/cDmU+WwkQcwyydoTE5
t4gFgB8dskPXuXysAEvQQ2Rccq7jQDM6nm9yRsnPVZheYAzoXukHyxWoZFE=
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:55:22 2026 by rpki-client