Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5c334c5e-07f3-4ac4-9769-dad3b14cf8e7.roa
File:                     5c334c5e-07f3-4ac4-9769-dad3b14cf8e7.roa (raw, json)
Hash identifier:          7wXFX1OaWHyl1enOLGRIUn+Ln21kW676Vfo1QSDXKVs=
Subject key identifier:   58:30:F7:B4:C2:17:7D:4C:24:25:26:F2:CE:FF:E1:A1:D5:22:0C:1A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4E84CBE4643D8D46C02624616BB81DD18FAC7146
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5c334c5e-07f3-4ac4-9769-dad3b14cf8e7.roa
Signing time:             Wed 13 May 2026 00:40:52 +0000
ROA not before:           Wed 13 May 2026 00:40:52 +0000
ROA not after:            Tue 11 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        129.17.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:84:cb:e4:64:3d:8d:46:c0:26:24:61:6b:b8:1d:d1:8f:ac:71:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 13 00:40:52 2026 GMT
            Not After : Aug 11 23:59:59 2026 GMT
        Subject: serialNumber=37698803d04d20ff5bbe0476eb12e7ad7416917c2f08055f018a44b31d54c7a0, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a7:4c:06:f1:b8:55:da:da:fd:60:f9:3b:3a:
                    c5:7c:c2:80:12:4b:92:68:b0:56:f8:d6:7e:5c:30:
                    a4:a8:9a:6b:d9:91:92:e1:a6:05:22:24:36:c9:58:
                    8d:24:91:fa:8b:87:5c:60:7d:fe:18:af:11:10:38:
                    18:65:f9:03:d1:b7:a7:b9:06:00:19:58:2f:e8:2c:
                    4b:11:37:4b:6b:15:2a:54:c0:28:cf:97:a1:89:28:
                    04:63:f3:43:5b:4a:8e:58:ac:87:ee:64:a9:d3:51:
                    e1:9d:30:92:b3:60:5d:e8:75:50:f5:c9:fd:16:24:
                    53:07:01:8d:fc:6a:e4:cd:11:70:cb:87:4d:fb:95:
                    60:d7:c9:ae:53:b2:cc:ef:56:39:cd:7d:f2:8b:f4:
                    07:9c:08:56:a7:e0:b5:e9:01:fb:1d:fc:89:16:45:
                    a4:3b:aa:b2:a1:89:75:22:71:bb:88:84:69:f6:90:
                    44:50:40:11:76:92:49:8e:de:8b:c2:ad:7d:c2:e2:
                    b1:c3:20:aa:f7:11:b6:81:d8:40:1d:c2:f7:c0:4b:
                    94:3c:82:77:6c:4c:9e:77:8a:97:48:11:a3:b8:a0:
                    2e:f3:9e:ba:32:63:77:4b:d3:18:8b:e2:1a:12:93:
                    0c:9e:2d:36:d7:7b:71:ef:9c:77:c5:59:ab:5f:f8:
                    b2:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:30:F7:B4:C2:17:7D:4C:24:25:26:F2:CE:FF:E1:A1:D5:22:0C:1A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5c334c5e-07f3-4ac4-9769-dad3b14cf8e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.17.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         25:83:0a:8e:3e:fe:be:db:c4:5d:cc:06:d1:15:67:77:29:cc:
         41:23:f6:c6:c6:91:4e:0a:6f:b8:3b:ab:12:3e:03:8f:1b:fe:
         13:f3:94:ca:c7:bf:6d:74:d5:a5:4d:90:c6:fa:3d:d3:83:fa:
         39:a6:cf:f5:3c:20:df:79:c7:e0:07:81:3e:88:6c:67:71:d9:
         bc:c4:4a:f7:44:3e:b1:43:c2:d9:ab:8b:1b:34:67:b7:5f:11:
         8c:72:17:3d:b9:89:63:6c:c0:0d:e9:94:49:01:0a:d4:2b:c3:
         d8:1b:8b:08:19:c7:77:f3:0a:5a:e8:8e:c0:62:d1:32:27:ce:
         23:aa:f4:f0:00:57:a7:2c:8e:f9:0f:18:ed:84:ab:42:69:7d:
         67:02:dc:52:8e:50:c8:1a:12:37:10:83:f0:eb:d1:97:47:b8:
         5a:31:cb:73:0c:b4:0a:91:ea:84:6d:70:8f:8a:5a:de:e3:7e:
         7e:93:a3:84:7c:8f:5a:b6:51:7a:63:02:df:82:cc:f4:d1:f7:
         cd:45:27:f4:a9:28:f2:94:09:c5:df:f4:43:32:dc:eb:56:0d:
         23:7c:dd:ce:5a:e0:97:3e:09:45:96:29:25:e3:7e:9f:75:a4:
         92:26:11:32:48:cf:ea:94:94:40:b9:7c:d5:b5:a8:09:f5:8b:
         4e:c4:ab:97
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUToTL5GQ9jUbAJiRha7gd0Y+scUYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTEzMDA0MDUyWhcNMjYwODExMjM1OTU5
WjB6MUkwRwYDVQQFE0AzNzY5ODgwM2QwNGQyMGZmNWJiZTA0NzZlYjEyZTdhZDc0
MTY5MTdjMmYwODA1NWYwMThhNDRiMzFkNTRjN2EwMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDRp0wG8bhV2tr9YPk7OsV8woASS5JosFb41n5cMKSommvZ
kZLhpgUiJDbJWI0kkfqLh1xgff4YrxEQOBhl+QPRt6e5BgAZWC/oLEsRN0trFSpU
wCjPl6GJKARj80NbSo5YrIfuZKnTUeGdMJKzYF3odVD1yf0WJFMHAY38auTNEXDL
h037lWDXya5TsszvVjnNffKL9AecCFan4LXpAfsd/IkWRaQ7qrKhiXUicbuIhGn2
kERQQBF2kkmO3ovCrX3C4rHDIKr3EbaB2EAdwvfAS5Q8gndsTJ53ipdIEaO4oC7z
nroyY3dL0xiL4hoSkwyeLTbXe3HvnHfFWatf+LKNAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUWDD3tMIXfUwkJSbyzv/hodUiDBowHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzVjMzM0YzVlLTA3ZjMtNGFjNC05NzY5LWRhZDNiMTRjZjhlNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwCBETANBgkqhkiG9w0BAQsFAAOCAQEAJYMKjj7+vtvEXcwG0RVndynMQSP2
xsaRTgpvuDurEj4Djxv+E/OUyse/bXTVpU2Qxvo904P6OabP9Twg33nH4AeBPohs
Z3HZvMRK90Q+sUPC2auLGzRnt18RjHIXPbmJY2zADemUSQEK1CvD2BuLCBnHd/MK
WuiOwGLRMifOI6r08ABXpyyO+Q8Y7YSrQml9ZwLcUo5QyBoSNxCD8OvRl0e4WjHL
cwy0CpHqhG1wj4pa3uN+fpOjhHyPWrZRemMC34LM9NH3zUUn9Kko8pQJxd/0QzLc
61YNI3zdzlrglz4JRZYpJeN+n3WkkiYRMkjP6pSUQLl81bWoCfWLTsSrlw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:49:28 2026 by rpki-client