Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79b61ca4-67b3-4ea2-95eb-ba7f6e611072.roa
File:                     79b61ca4-67b3-4ea2-95eb-ba7f6e611072.roa (raw, json)
Hash identifier:          dQA79SSFJwrifiyGrDam+mxqztBbV4CAcUP6Lm8/9H0=
Subject key identifier:   B2:D2:C2:EE:6C:71:69:04:4A:F0:54:3D:C6:25:FE:BE:54:89:44:08
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2FF7A72B2BC9A1833DBB49A1ACE9972FD8D3C01A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79b61ca4-67b3-4ea2-95eb-ba7f6e611072.roa
Signing time:             Sun 17 May 2026 00:40:05 +0000
ROA not before:           Sun 17 May 2026 00:40:05 +0000
ROA not after:            Sat 15 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        64.226.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:f7:a7:2b:2b:c9:a1:83:3d:bb:49:a1:ac:e9:97:2f:d8:d3:c0:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 17 00:40:05 2026 GMT
            Not After : Aug 15 23:59:59 2026 GMT
        Subject: serialNumber=d58df0575bd276a16d0058347099e73ca59627c7988674910707e70dde02f925, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e5:c8:3f:d2:c9:38:a2:ff:9c:25:58:46:32:
                    0e:06:ed:fe:ca:b8:83:c9:8f:2c:76:73:f6:c8:ce:
                    38:3d:c0:fe:98:8c:06:ca:bf:bf:3d:0a:60:48:29:
                    4c:df:c5:37:ff:a4:9f:a6:77:95:44:a6:e9:00:13:
                    30:7a:96:cd:4b:41:4b:06:88:53:ce:fd:46:2d:4a:
                    39:ac:0c:d5:24:3a:cb:f2:63:97:fa:48:4d:1d:bd:
                    e4:fa:fe:fe:48:71:b1:00:10:a0:ed:de:f2:fa:0b:
                    6c:9e:96:b9:c9:22:9e:f3:56:c7:6c:2b:d1:b0:e3:
                    ae:be:5f:3f:3f:6c:b7:d7:1e:7a:49:17:9e:e0:2f:
                    ac:ed:18:09:7b:41:b1:f4:d1:02:d2:17:5f:ab:94:
                    9d:c9:bf:41:d8:d2:98:f1:71:97:d0:78:68:cb:6a:
                    ff:8a:0f:ab:d6:b6:5e:17:90:77:fe:9b:02:fe:ba:
                    8f:a1:e8:5c:bf:3c:09:41:a3:d5:75:56:e6:66:1c:
                    44:af:72:66:da:4a:44:8f:cd:b0:01:72:8f:76:f0:
                    f3:de:bf:e4:d6:2c:36:68:9f:9e:18:0e:f8:74:a8:
                    06:42:c9:97:f0:83:58:32:b3:34:77:01:f1:8c:57:
                    b1:b3:74:d3:29:2a:a1:ce:2f:1f:c7:aa:4a:59:d0:
                    35:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:D2:C2:EE:6C:71:69:04:4A:F0:54:3D:C6:25:FE:BE:54:89:44:08
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79b61ca4-67b3-4ea2-95eb-ba7f6e611072.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.226.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cc:52:be:22:32:82:be:d6:6a:51:72:a5:03:17:cb:fe:1b:e9:
         9a:45:99:22:c4:b8:34:0f:6d:50:44:bb:99:31:11:6e:a7:41:
         9c:4c:be:02:f0:8b:47:8c:87:5a:71:67:3d:fe:24:9c:08:6c:
         3d:be:a1:e3:ce:43:34:ca:44:04:12:ae:eb:0c:88:c0:89:73:
         44:d7:60:d6:01:2a:fb:d8:d8:b6:72:3d:08:d5:b8:b8:92:ce:
         2a:7d:53:9c:b4:b0:71:0f:70:f9:28:0f:85:5f:23:ab:55:4c:
         81:b8:85:94:b3:61:28:00:8b:7e:60:20:7e:b9:2b:a3:5f:44:
         09:ae:a6:0e:be:2f:04:db:4e:5e:64:e4:30:75:16:58:46:e2:
         77:d3:af:69:65:72:87:00:b9:24:8d:57:73:e6:9b:22:15:b1:
         66:b4:d1:0b:0c:49:bb:af:4c:57:8a:3c:b5:d4:61:2b:f5:f4:
         71:a7:f8:c3:40:bd:8a:d0:04:ea:e0:d3:f1:f5:54:59:5b:e9:
         7b:14:82:77:bd:fb:73:bf:05:16:af:fc:ca:8f:05:33:f0:15:
         b2:c0:5d:a2:2e:64:90:04:62:6f:95:2a:9c:07:87:8c:5c:d5:
         c3:2c:40:ce:3d:c3:0d:4a:8e:4a:94:20:db:38:83:a5:9a:ac:
         92:11:4e:b2
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUL/enKyvJoYM9u0mhrOmXL9jTwBowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE3MDA0MDA1WhcNMjYwODE1MjM1OTU5
WjB6MUkwRwYDVQQFE0BkNThkZjA1NzViZDI3NmExNmQwMDU4MzQ3MDk5ZTczY2E1
OTYyN2M3OTg4Njc0OTEwNzA3ZTcwZGRlMDJmOTI1MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCY5cg/0sk4ov+cJVhGMg4G7f7KuIPJjyx2c/bIzjg9wP6Y
jAbKv789CmBIKUzfxTf/pJ+md5VEpukAEzB6ls1LQUsGiFPO/UYtSjmsDNUkOsvy
Y5f6SE0dveT6/v5IcbEAEKDt3vL6C2yelrnJIp7zVsdsK9Gw466+Xz8/bLfXHnpJ
F57gL6ztGAl7QbH00QLSF1+rlJ3Jv0HY0pjxcZfQeGjLav+KD6vWtl4XkHf+mwL+
uo+h6Fy/PAlBo9V1VuZmHESvcmbaSkSPzbABco928PPev+TWLDZon54YDvh0qAZC
yZfwg1gyszR3AfGMV7GzdNMpKqHOLx/HqkpZ0DXnAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUstLC7mxxaQRK8FQ9xiX+vlSJRAgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzc5YjYxY2E0LTY3YjMtNGVhMi05NWViLWJhN2Y2ZTYxMTA3Mi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABA4t0wDQYJKoZIhvcNAQELBQADggEBAMxSviIygr7WalFypQMXy/4b6ZpF
mSLEuDQPbVBEu5kxEW6nQZxMvgLwi0eMh1pxZz3+JJwIbD2+oePOQzTKRAQSrusM
iMCJc0TXYNYBKvvY2LZyPQjVuLiSzip9U5y0sHEPcPkoD4VfI6tVTIG4hZSzYSgA
i35gIH65K6NfRAmupg6+LwTbTl5k5DB1FlhG4nfTr2llcocAuSSNV3PmmyIVsWa0
0QsMSbuvTFeKPLXUYSv19HGn+MNAvYrQBOrg0/H1VFlb6XsUgne9+3O/BRav/MqP
BTPwFbLAXaIuZJAEYm+VKpwHh4xc1cMsQM49ww1KjkqUINs4g6WarJIRTrI=
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:47:04 2026 by rpki-client