Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d7b50e9c-3edf-4fc9-a4cc-de7202665f35.roa
File:                     d7b50e9c-3edf-4fc9-a4cc-de7202665f35.roa (raw, json)
Hash identifier:          ElF6+xvP9HzjSOwh9VpVFZoQfLNV2M/ye6U7g0tBX0Q=
Subject key identifier:   CC:13:D9:B3:51:CE:40:BC:27:F0:AD:81:82:30:EC:2E:23:B6:7F:8B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       51C32CF55D149ACA5EF05C8850BAAD11D3A78EA6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d7b50e9c-3edf-4fc9-a4cc-de7202665f35.roa
Signing time:             Tue 12 May 2026 01:10:11 +0000
ROA not before:           Tue 12 May 2026 01:10:11 +0000
ROA not after:            Mon 10 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        71.152.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:c3:2c:f5:5d:14:9a:ca:5e:f0:5c:88:50:ba:ad:11:d3:a7:8e:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 12 01:10:11 2026 GMT
            Not After : Aug 10 23:59:59 2026 GMT
        Subject: serialNumber=228e2eae4bd49128841475a96b2c361f27f3682802a8254dda5a726cc48bfd5f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:6e:62:e1:ee:f0:04:ce:3f:b7:49:6a:80:48:
                    01:50:66:7a:87:7f:b5:3a:79:32:44:4a:bd:2d:97:
                    e8:2d:66:0e:7c:55:8e:c0:af:b8:fe:eb:c0:57:c4:
                    ae:20:f6:3b:65:01:b5:10:b7:d1:39:43:72:65:47:
                    01:b4:aa:fa:a2:54:c0:5a:cd:c4:bb:2a:69:f9:6d:
                    e2:2d:1f:3c:b6:ca:0f:bb:19:26:5e:85:69:2a:62:
                    3d:20:ad:be:fc:a3:5c:9a:95:6d:65:fe:41:b4:b4:
                    c3:14:ee:99:c2:c9:a6:29:5e:ee:f8:16:6c:24:fd:
                    50:ac:4a:0e:3b:15:e2:75:eb:1a:15:9d:22:1b:0b:
                    e7:a1:71:3c:9b:56:a3:d2:18:8a:6f:4b:1e:a6:5b:
                    f9:b3:4c:5f:bd:87:77:26:65:3b:48:cf:fd:83:80:
                    86:58:4e:f9:9c:6d:55:4f:87:32:3d:e8:ce:80:22:
                    5c:14:e7:79:88:b4:20:01:f5:f9:03:51:77:00:2e:
                    b3:5c:85:56:30:6b:96:9a:7d:35:3f:e3:a2:5d:7c:
                    34:c3:a9:61:0c:73:d8:4c:94:5c:16:0d:36:6c:de:
                    fd:c8:2f:35:c9:7e:8b:ed:62:86:df:49:a0:97:50:
                    5e:f7:a2:b9:e9:1a:ac:c9:10:d3:3a:f4:34:9c:2e:
                    4e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:13:D9:B3:51:CE:40:BC:27:F0:AD:81:82:30:EC:2E:23:B6:7F:8B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d7b50e9c-3edf-4fc9-a4cc-de7202665f35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.152.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:f7:71:d8:01:9d:71:f9:bc:3c:2b:f1:7a:8a:46:c5:d5:13:
         5a:d8:a7:e1:cd:63:e6:f4:b1:fd:e2:62:75:ba:95:7a:2a:80:
         1b:75:80:8b:00:f1:80:c8:fe:08:c0:77:20:1f:58:8b:e5:4e:
         a8:b2:9a:9e:af:65:b4:d6:e5:31:95:f2:b9:e3:eb:9f:98:64:
         c8:f0:a0:aa:79:3c:32:70:4a:92:22:58:d7:fe:f7:0c:b8:26:
         33:f1:5d:da:ba:a9:c7:51:19:ef:9b:f7:cf:9f:39:ad:2b:2b:
         f0:cd:9f:e1:4d:b3:70:5d:6d:5e:62:c1:d8:c3:03:2c:46:49:
         6a:7f:17:fe:04:13:71:81:55:bc:36:1c:01:59:a6:c3:4b:12:
         de:1c:5d:fa:f9:1f:f5:ab:69:42:f6:86:9f:0c:3c:4f:b3:70:
         05:29:be:e5:f6:ba:aa:11:fb:21:1b:b8:20:36:09:7f:d4:f8:
         66:ff:da:a2:06:64:75:c1:c0:ff:66:c1:67:e5:c8:3f:af:5c:
         67:2f:ae:39:49:3c:17:49:37:dd:af:4a:98:d6:74:92:40:84:
         0f:dd:de:96:44:ed:25:21:0c:a2:59:ce:f3:75:a0:ba:c5:cb:
         c4:d3:60:f0:48:6f:ce:d7:9e:99:3d:a3:a8:5d:17:5d:1d:46:
         0e:de:3b:92
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUUcMs9V0Umspe8FyIULqtEdOnjqYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTEyMDExMDExWhcNMjYwODEwMjM1OTU5
WjB6MUkwRwYDVQQFE0AyMjhlMmVhZTRiZDQ5MTI4ODQxNDc1YTk2YjJjMzYxZjI3
ZjM2ODI4MDJhODI1NGRkYTVhNzI2Y2M0OGJmZDVmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCYbmLh7vAEzj+3SWqASAFQZnqHf7U6eTJESr0tl+gtZg58
VY7Ar7j+68BXxK4g9jtlAbUQt9E5Q3JlRwG0qvqiVMBazcS7Kmn5beItHzy2yg+7
GSZehWkqYj0grb78o1yalW1l/kG0tMMU7pnCyaYpXu74Fmwk/VCsSg47FeJ16xoV
nSIbC+ehcTybVqPSGIpvSx6mW/mzTF+9h3cmZTtIz/2DgIZYTvmcbVVPhzI96M6A
IlwU53mItCAB9fkDUXcALrNchVYwa5aafTU/46JdfDTDqWEMc9hMlFwWDTZs3v3I
LzXJfovtYobfSaCXUF73ornpGqzJENM69DScLk67AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUzBPZs1HOQLwn8K2BgjDsLiO2f4swHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2Q3YjUwZTljLTNlZGYtNGZjOS1hNGNjLWRlNzIwMjY2NWYzNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABHmH8wDQYJKoZIhvcNAQELBQADggEBAFj3cdgBnXH5vDwr8XqKRsXVE1rY
p+HNY+b0sf3iYnW6lXoqgBt1gIsA8YDI/gjAdyAfWIvlTqiymp6vZbTW5TGV8rnj
65+YZMjwoKp5PDJwSpIiWNf+9wy4JjPxXdq6qcdRGe+b98+fOa0rK/DNn+FNs3Bd
bV5iwdjDAyxGSWp/F/4EE3GBVbw2HAFZpsNLEt4cXfr5H/WraUL2hp8MPE+zcAUp
vuX2uqoR+yEbuCA2CX/U+Gb/2qIGZHXBwP9mwWflyD+vXGcvrjlJPBdJN92vSpjW
dJJAhA/d3pZE7SUhDKJZzvN1oLrFy8TTYPBIb87Xnpk9o6hdF10dRg7eO5I=
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:16:33 2026 by rpki-client