Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c77575b0-c6a7-4283-aaf6-d6fe963f1e94.roa
File:                     c77575b0-c6a7-4283-aaf6-d6fe963f1e94.roa (raw, json)
Hash identifier:          t5xcBjb++cM6rc6T3QF5PHOS/p7bgmWgrUSy9WfbiDI=
Subject key identifier:   5B:F5:0B:4F:BB:58:26:0B:CD:F4:F8:92:93:19:82:46:F0:55:80:63
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6CD28EA7AE7D9A51DAB6D1856AC0B9FF72259026
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c77575b0-c6a7-4283-aaf6-d6fe963f1e94.roa
Signing time:             Thu 16 Apr 2026 00:00:09 +0000
ROA not before:           Thu 16 Apr 2026 00:00:09 +0000
ROA not after:            Wed 15 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        69.16.160.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:d2:8e:a7:ae:7d:9a:51:da:b6:d1:85:6a:c0:b9:ff:72:25:90:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 16 00:00:09 2026 GMT
            Not After : Jul 15 23:59:59 2026 GMT
        Subject: serialNumber=281dc4f8698bf53f3fd4ffafb428a3bf5ab92b805da28356ca0d4c475f896001, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:48:96:3d:a0:3a:8b:0a:9b:89:07:9f:4c:84:
                    dd:f5:7d:4f:c1:06:48:0c:a4:e0:cd:61:62:e6:9b:
                    1e:b3:d3:96:63:a6:f6:70:85:9e:01:9a:20:2d:d5:
                    f0:45:22:fc:9c:70:03:f7:37:d1:bb:26:35:ee:5b:
                    bb:b7:de:47:86:45:fd:ca:51:07:a0:a6:3c:96:54:
                    06:b9:85:4e:43:c4:93:87:da:98:35:dc:f5:6f:d9:
                    ec:83:43:60:68:78:e7:54:72:db:de:7c:ff:d6:66:
                    8a:43:fc:88:7a:93:68:de:13:aa:bb:4b:f4:5a:ac:
                    7f:69:f1:9a:e8:a9:23:3c:f6:5d:38:3e:97:d9:95:
                    62:72:3b:f2:5b:24:e3:cd:71:53:1f:74:3f:49:49:
                    20:3d:68:0f:a7:58:ba:48:21:b0:8f:ef:6e:6f:a3:
                    9f:45:21:7b:12:2e:ed:be:79:55:a6:c5:c4:79:b5:
                    10:8d:47:70:27:21:d7:91:a7:e2:cd:dd:d4:e4:e2:
                    06:36:0b:bf:f9:83:c4:c0:c2:d1:48:c1:19:a7:69:
                    a0:f9:1b:ee:bb:9c:6c:0f:8e:05:83:a7:a2:bc:72:
                    88:ba:2e:12:d7:2c:97:b1:c2:f7:2c:81:ac:af:5f:
                    99:c3:19:28:4a:bb:2d:3e:09:06:75:a8:c1:01:ab:
                    84:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:F5:0B:4F:BB:58:26:0B:CD:F4:F8:92:93:19:82:46:F0:55:80:63
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c77575b0-c6a7-4283-aaf6-d6fe963f1e94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.16.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         70:bf:b1:cf:50:60:62:13:a8:76:54:2a:7a:f9:99:ac:8b:02:
         e4:2e:d1:1c:f3:4d:bd:71:77:4d:a0:3b:83:e4:6d:36:e3:3a:
         fb:55:29:57:b3:f0:6f:4d:c6:e1:19:27:85:5b:05:1d:73:c9:
         d1:ea:90:db:ae:4f:fa:77:80:9d:5e:2b:80:b4:0b:aa:f2:b7:
         8f:4d:97:32:77:9e:30:b4:e5:cc:6c:a6:fc:48:f8:bf:8d:dd:
         7d:d0:8d:06:84:e6:7a:30:a7:a9:28:35:fa:59:32:d6:62:21:
         8b:bc:d6:ce:9f:f2:58:48:7b:29:11:3c:a9:f4:b8:ea:f2:00:
         5e:27:8f:ac:c9:90:ab:eb:d3:b4:18:2e:15:b7:1d:b8:48:83:
         d1:7b:18:71:87:29:eb:2a:e3:7d:4c:cc:2a:01:76:a1:7a:fa:
         58:80:d9:99:06:1d:8c:74:b6:28:d2:d3:2f:79:ee:2d:f0:3c:
         5d:9a:17:fa:87:f2:b1:29:9e:0d:9c:3e:b2:65:34:9c:38:8e:
         56:ff:34:f9:e5:23:6c:b6:18:3b:09:cc:6f:89:28:37:a0:28:
         6f:39:be:2d:22:d4:7b:28:4d:10:6b:65:6d:31:3c:48:6c:d6:
         3f:80:0e:23:e5:03:1d:78:f0:b4:33:44:58:c0:97:7f:e8:da:
         64:f3:63:77
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUbNKOp659mlHattGFasC5/3IlkCYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNDE2MDAwMDA5WhcNMjYwNzE1MjM1OTU5
WjB6MUkwRwYDVQQFE0AyODFkYzRmODY5OGJmNTNmM2ZkNGZmYWZiNDI4YTNiZjVh
YjkyYjgwNWRhMjgzNTZjYTBkNGM0NzVmODk2MDAxMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC/SJY9oDqLCpuJB59MhN31fU/BBkgMpODNYWLmmx6z05Zj
pvZwhZ4BmiAt1fBFIvyccAP3N9G7JjXuW7u33keGRf3KUQegpjyWVAa5hU5DxJOH
2pg13PVv2eyDQ2BoeOdUctvefP/WZopD/Ih6k2jeE6q7S/RarH9p8ZroqSM89l04
PpfZlWJyO/JbJOPNcVMfdD9JSSA9aA+nWLpIIbCP725vo59FIXsSLu2+eVWmxcR5
tRCNR3AnIdeRp+LN3dTk4gY2C7/5g8TAwtFIwRmnaaD5G+67nGwPjgWDp6K8coi6
LhLXLJexwvcsgayvX5nDGShKuy0+CQZ1qMEBq4RZAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUW/ULT7tYJgvN9PiSkxmCRvBVgGMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2M3NzU3NWIwLWM2YTctNDI4My1hYWY2LWQ2ZmU5NjNmMWU5NC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBANFEKAwDQYJKoZIhvcNAQELBQADggEBAHC/sc9QYGITqHZUKnr5mayLAuQu
0RzzTb1xd02gO4PkbTbjOvtVKVez8G9NxuEZJ4VbBR1zydHqkNuuT/p3gJ1eK4C0
C6ryt49NlzJ3njC05cxspvxI+L+N3X3QjQaE5nowp6koNfpZMtZiIYu81s6f8lhI
eykRPKn0uOryAF4nj6zJkKvr07QYLhW3HbhIg9F7GHGHKesq431MzCoBdqF6+liA
2ZkGHYx0tijS0y957i3wPF2aF/qH8rEpng2cPrJlNJw4jlb/NPnlI2y2GDsJzG+J
KDegKG85vi0i1HsoTRBrZW0xPEhs1j+ADiPlAx148LQzRFjAl3/o2mTzY3c=
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:50:11 2026 by rpki-client