Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/881c6b9b-594d-4ee7-a6d1-b1e9e6ae935b.roa
File:                     881c6b9b-594d-4ee7-a6d1-b1e9e6ae935b.roa (raw, json)
Hash identifier:          MKiZhxeZOlCkv0EhwbJf6dJy93X2Tb8Z3mtE8l9YIU4=
Subject key identifier:   05:0B:51:9B:A9:1E:FD:88:7B:82:2F:57:47:B6:08:E4:D0:EF:7D:8E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       73E956AD4F97A155ADE9C81A1088D73F38FEA029
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/881c6b9b-594d-4ee7-a6d1-b1e9e6ae935b.roa
Signing time:             Sun 17 May 2026 00:20:56 +0000
ROA not before:           Sun 17 May 2026 00:20:56 +0000
ROA not after:            Sat 15 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        72.44.40.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:e9:56:ad:4f:97:a1:55:ad:e9:c8:1a:10:88:d7:3f:38:fe:a0:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 17 00:20:56 2026 GMT
            Not After : Aug 15 23:59:59 2026 GMT
        Subject: serialNumber=f4273f122923c1be8839d1e22d11e26607bea1d9b501ab6171b069c8b2405566, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1c:81:d0:80:9b:5d:84:b9:82:c5:79:ce:57:
                    71:f1:72:39:60:be:03:f2:bc:93:46:ed:5a:e5:bf:
                    c3:9e:f5:84:0e:31:cf:59:31:28:82:01:0d:d2:d3:
                    39:dc:06:4e:bb:f3:9d:a4:06:3b:83:9f:b0:53:b8:
                    4a:9b:72:28:06:90:55:95:29:0e:c6:23:c6:aa:e7:
                    79:fc:67:f5:9e:80:1f:5c:4d:88:d4:5a:18:7a:be:
                    1b:a4:0b:11:bb:67:86:f6:c1:bd:21:9a:99:eb:81:
                    e3:b7:ce:6d:8b:f7:e7:0e:21:5e:f5:58:0d:55:04:
                    e8:12:f1:7f:3a:12:f1:a9:3f:0a:5e:eb:ff:44:53:
                    df:6e:29:56:9e:52:e7:44:be:0d:46:53:cd:57:87:
                    a8:6f:b8:3c:ab:58:60:06:8e:38:01:34:de:1d:4e:
                    da:d1:c5:22:e4:35:46:2e:bc:59:85:b5:03:0f:9c:
                    dd:ab:b5:c6:89:b8:1d:76:4a:00:d3:c3:c9:62:76:
                    19:ef:f1:1b:10:ee:d4:f4:e9:75:ca:82:1e:fb:e6:
                    66:52:98:7d:b7:de:92:67:d4:24:dd:ac:37:e2:c3:
                    bb:3b:8b:a6:93:63:42:ec:7a:2a:d3:b4:39:e3:63:
                    54:01:c3:5d:97:78:52:89:95:a1:5c:8f:64:b1:a6:
                    16:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:0B:51:9B:A9:1E:FD:88:7B:82:2F:57:47:B6:08:E4:D0:EF:7D:8E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/881c6b9b-594d-4ee7-a6d1-b1e9e6ae935b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.44.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6e:7c:99:7e:e9:66:84:80:43:81:e6:a8:20:9e:12:b9:44:b5:
         21:d0:96:e7:c4:d7:cb:52:56:10:51:ae:f6:e1:64:b1:68:24:
         8f:9d:9b:6c:34:1b:27:af:49:33:ad:c0:af:44:61:ac:69:04:
         72:d9:59:2d:b1:d2:2f:f0:3b:20:cb:6c:4a:1b:74:f9:4b:01:
         b4:52:c2:7c:86:77:9a:cf:31:6f:03:b6:c0:1c:06:36:7e:59:
         7f:96:e8:fc:04:5a:05:8a:46:2e:9b:d3:2c:09:72:26:04:2c:
         6e:a0:d1:25:90:35:33:27:a3:30:5c:77:05:07:c0:f7:ae:31:
         35:6b:1a:fc:d7:d6:97:85:53:cf:fd:09:bd:13:94:03:0a:ab:
         86:56:d8:56:33:42:b4:89:27:52:07:02:41:13:f8:9d:84:6f:
         6d:f7:42:8b:22:9f:6b:93:f2:5d:6c:6e:e0:74:af:c5:94:ba:
         49:21:0b:93:6a:32:9f:e3:bf:52:2c:d1:bd:64:12:96:53:dc:
         d6:bb:fb:27:bb:d8:16:c4:a3:c7:aa:00:2f:54:44:df:48:02:
         89:d7:1f:73:28:d6:bc:29:9d:d6:bb:b4:cc:0e:39:1f:a1:d1:
         9b:1f:6d:b3:7e:f7:6d:c2:f0:5c:9b:45:d3:43:f8:f9:3e:b7:
         df:28:00:51
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUc+lWrU+XoVWt6cgaEIjXPzj+oCkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE3MDAyMDU2WhcNMjYwODE1MjM1OTU5
WjB6MUkwRwYDVQQFE0BmNDI3M2YxMjI5MjNjMWJlODgzOWQxZTIyZDExZTI2NjA3
YmVhMWQ5YjUwMWFiNjE3MWIwNjljOGIyNDA1NTY2MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQClHIHQgJtdhLmCxXnOV3HxcjlgvgPyvJNG7Vrlv8Oe9YQO
Mc9ZMSiCAQ3S0zncBk67852kBjuDn7BTuEqbcigGkFWVKQ7GI8aq53n8Z/WegB9c
TYjUWhh6vhukCxG7Z4b2wb0hmpnrgeO3zm2L9+cOIV71WA1VBOgS8X86EvGpPwpe
6/9EU99uKVaeUudEvg1GU81Xh6hvuDyrWGAGjjgBNN4dTtrRxSLkNUYuvFmFtQMP
nN2rtcaJuB12SgDTw8lidhnv8RsQ7tT06XXKgh775mZSmH233pJn1CTdrDfiw7s7
i6aTY0LseirTtDnjY1QBw12XeFKJlaFcj2Sxphb1AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUBQtRm6ke/Yh7gi9XR7YI5NDvfY4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzg4MWM2YjliLTU5NGQtNGVlNy1hNmQxLWIxZTllNmFlOTM1Yi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBANILCgwDQYJKoZIhvcNAQELBQADggEBAG58mX7pZoSAQ4HmqCCeErlEtSHQ
lufE18tSVhBRrvbhZLFoJI+dm2w0GyevSTOtwK9EYaxpBHLZWS2x0i/wOyDLbEob
dPlLAbRSwnyGd5rPMW8DtsAcBjZ+WX+W6PwEWgWKRi6b0ywJciYELG6g0SWQNTMn
ozBcdwUHwPeuMTVrGvzX1peFU8/9Cb0TlAMKq4ZW2FYzQrSJJ1IHAkET+J2Eb233
Qosin2uT8l1sbuB0r8WUukkhC5NqMp/jv1Is0b1kEpZT3Na7+ye72BbEo8eqAC9U
RN9IAonXH3Mo1rwpnda7tMwOOR+h0ZsfbbN+923C8FybRdND+Pk+t98oAFE=
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:09:13 2026 by rpki-client