Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7dfc4e3-7bd2-4b1d-b6a9-afbe5b948e17.roa
File:                     b7dfc4e3-7bd2-4b1d-b6a9-afbe5b948e17.roa (raw, json)
Hash identifier:          U8DVQtpAXWIUm/8J+5Y8fwAtzVSmaQCPnt2Xc0IEdYM=
Subject key identifier:   D6:14:23:86:F6:5F:A5:33:17:67:73:45:94:93:84:4A:F3:F3:CA:9B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       22D8EE11208006F02CF44E68729625C06AF5E02C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7dfc4e3-7bd2-4b1d-b6a9-afbe5b948e17.roa
Signing time:             Wed 20 May 2026 00:00:05 +0000
ROA not before:           Wed 20 May 2026 00:00:05 +0000
ROA not after:            Tue 18 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        56.70.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:d8:ee:11:20:80:06:f0:2c:f4:4e:68:72:96:25:c0:6a:f5:e0:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 20 00:00:05 2026 GMT
            Not After : Aug 18 23:59:59 2026 GMT
        Subject: serialNumber=dad64e6b8c1092ee115f484180f8ea35b96580ac3d20b92f1eb7e482eb9385fa, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:8c:1d:7f:88:71:ab:f3:20:69:0c:0d:1c:29:
                    7d:d5:22:02:e4:42:1f:b5:31:18:b8:67:3b:cf:ec:
                    7c:ad:57:11:52:4c:8d:6b:a9:f3:67:5d:3b:c0:c1:
                    5a:14:61:9c:4f:42:6a:85:08:1d:cb:cc:6a:7f:82:
                    92:55:b9:fc:cc:47:48:00:6f:a3:e0:e1:20:b2:e3:
                    f3:5e:be:20:aa:7e:57:38:5e:7a:8c:5c:88:47:ef:
                    d6:2a:29:80:3e:ff:e5:34:cc:0f:cb:4b:0f:88:2f:
                    26:ec:a8:33:a0:94:da:dc:86:ac:c2:03:ad:31:f9:
                    0c:be:80:c3:59:b3:c2:3e:3c:cb:6a:88:e3:82:2c:
                    59:72:56:1c:0b:e0:cb:52:4b:72:d6:12:69:14:2c:
                    08:20:3e:8c:e6:26:37:dd:ae:16:5a:a3:3b:ab:c5:
                    ae:30:b4:e3:f8:fc:92:ee:ef:84:b0:8c:4d:dc:ec:
                    e7:43:03:48:a5:53:f6:34:bf:96:e0:34:0d:69:fe:
                    2c:ec:67:ce:a1:17:87:65:90:61:6a:56:d4:0a:3a:
                    29:b9:93:e8:57:ff:0c:58:6a:57:15:ba:1d:bc:15:
                    7f:c4:95:68:13:42:b5:ac:38:0d:59:32:32:50:90:
                    b9:ae:75:29:fa:4b:e0:78:92:63:b6:5e:dd:78:5b:
                    0f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:14:23:86:F6:5F:A5:33:17:67:73:45:94:93:84:4A:F3:F3:CA:9B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7dfc4e3-7bd2-4b1d-b6a9-afbe5b948e17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.70.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         87:56:b2:c5:38:33:12:d6:db:76:f1:90:60:17:e0:bd:e1:ca:
         d5:1b:30:6c:c9:b4:66:20:61:4b:73:90:fb:8d:55:a5:2e:3e:
         cc:db:8b:01:39:f1:97:89:0e:9a:43:4f:15:19:c1:b7:55:b6:
         02:11:94:50:01:44:b3:68:be:b7:fc:fb:8a:61:53:16:c8:1f:
         ea:ed:f0:19:76:b8:22:d5:c3:c3:a9:52:cc:26:ee:78:c0:b3:
         8b:e7:6b:87:48:50:94:47:c0:17:87:ea:68:02:11:f2:07:a5:
         8e:ef:03:1f:55:51:16:eb:f8:61:7b:2e:d3:df:b4:ac:6e:f6:
         62:c7:4f:1b:e2:e2:47:21:88:76:45:70:d0:76:ae:79:3d:a2:
         d9:f4:8e:58:16:39:b1:f9:0a:1b:42:72:72:0b:9a:6c:3b:0a:
         04:85:d2:61:66:fd:1d:01:93:a1:c5:ea:ae:70:59:53:f4:e8:
         07:e5:2f:ae:34:92:6b:41:49:75:f5:41:c9:43:fb:2a:16:da:
         96:10:72:90:e8:97:2f:b1:da:64:15:91:58:12:3e:b0:1d:7a:
         ac:52:94:d2:32:a0:89:56:26:b6:af:db:4b:30:2d:62:4f:4b:
         02:1a:26:36:99:d5:5a:ea:b4:62:db:69:d8:a3:4e:7c:71:88:
         af:7c:81:95
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUItjuESCABvAs9E5ocpYlwGr14CwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTIwMDAwMDA1WhcNMjYwODE4MjM1OTU5
WjB6MUkwRwYDVQQFE0BkYWQ2NGU2YjhjMTA5MmVlMTE1ZjQ4NDE4MGY4ZWEzNWI5
NjU4MGFjM2QyMGI5MmYxZWI3ZTQ4MmViOTM4NWZhMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCHjB1/iHGr8yBpDA0cKX3VIgLkQh+1MRi4ZzvP7HytVxFS
TI1rqfNnXTvAwVoUYZxPQmqFCB3LzGp/gpJVufzMR0gAb6Pg4SCy4/NeviCqflc4
XnqMXIhH79YqKYA+/+U0zA/LSw+ILybsqDOglNrchqzCA60x+Qy+gMNZs8I+PMtq
iOOCLFlyVhwL4MtSS3LWEmkULAggPozmJjfdrhZaozurxa4wtOP4/JLu74SwjE3c
7OdDA0ilU/Y0v5bgNA1p/izsZ86hF4dlkGFqVtQKOim5k+hX/wxYalcVuh28FX/E
lWgTQrWsOA1ZMjJQkLmudSn6S+B4kmO2Xt14Ww/vAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQU1hQjhvZfpTMXZ3NFlJOESvPzypswHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2I3ZGZjNGUzLTdiZDItNGIxZC1iNmE5LWFmYmU1Yjk0OGUxNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA4RjANBgkqhkiG9w0BAQsFAAOCAQEAh1ayxTgzEtbbdvGQYBfgveHK1Rsw
bMm0ZiBhS3OQ+41VpS4+zNuLATnxl4kOmkNPFRnBt1W2AhGUUAFEs2i+t/z7imFT
Fsgf6u3wGXa4ItXDw6lSzCbueMCzi+drh0hQlEfAF4fqaAIR8gelju8DH1VRFuv4
YXsu09+0rG72YsdPG+LiRyGIdkVw0HaueT2i2fSOWBY5sfkKG0JycguabDsKBIXS
YWb9HQGTocXqrnBZU/ToB+UvrjSSa0FJdfVByUP7KhbalhBykOiXL7HaZBWRWBI+
sB16rFKU0jKgiVYmtq/bSzAtYk9LAhomNpnVWuq0Yttp2KNOfHGIr3yBlQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 08:44:02 2026 by rpki-client