Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b63fd343-5e29-48fc-84c9-2d11751d74e8.roa
File:                     b63fd343-5e29-48fc-84c9-2d11751d74e8.roa (raw, json)
Hash identifier:          12jNW6ZF6pECWaFNNlUU3DXogHtuyZAeso4JQQgvPBM=
Subject key identifier:   F9:A6:04:86:A8:71:24:2E:66:FF:AE:72:50:F2:C6:30:A8:CC:D4:A8
Certificate issuer:       /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial:       87542870EDDB67D6833FD7F0086A370475C9BA
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b63fd343-5e29-48fc-84c9-2d11751d74e8.roa
Signing time:             Fri 15 May 2026 00:10:20 +0000
ROA not before:           Fri 15 May 2026 00:10:20 +0000
ROA not after:            Thu 13 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        69.169.238.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            87:54:28:70:ed:db:67:d6:83:3f:d7:f0:08:6a:37:04:75:c9:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
        Validity
            Not Before: May 15 00:10:20 2026 GMT
            Not After : Aug 13 23:59:59 2026 GMT
        Subject: serialNumber=4395b0353bf610db7b1ece25699a072a6c388fcab906a094c6413dc67eb1f9cd, CN=42519eb9-9579-4979-bdaf-164abd0e290e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e9:97:1c:a8:af:ec:3b:2d:97:9e:29:0b:2d:
                    89:4d:7e:5e:6f:6a:78:76:88:83:ec:16:df:f5:6f:
                    35:d1:96:33:0d:b7:8c:54:61:59:9b:89:fc:9e:f5:
                    ac:51:f9:5a:39:88:b8:f8:e4:10:28:7b:77:2a:a1:
                    64:7d:de:a3:da:a1:a4:5d:77:9e:ee:00:8b:8e:de:
                    31:b2:18:b2:f7:08:db:d0:e8:a2:8f:00:e4:7f:1a:
                    d9:4d:5f:19:0b:48:bc:0c:8d:91:49:a6:5a:af:12:
                    c4:db:28:ab:dc:d5:8f:18:dc:1a:b9:1d:9d:8b:80:
                    42:19:2c:61:e3:3d:42:3f:55:df:64:dd:c1:48:3a:
                    61:6f:f0:fa:d1:aa:be:87:54:0a:ac:6c:05:15:58:
                    61:a5:42:6f:05:6d:f2:45:f9:85:41:91:af:68:a3:
                    ae:b6:67:7f:e1:33:d2:14:57:bb:48:cf:ca:85:df:
                    bb:51:c4:5a:e1:3d:65:c6:d3:49:a6:9b:93:cf:8f:
                    0c:c1:0a:ba:ae:38:d2:d1:c3:c6:a3:43:6b:cb:7e:
                    f0:ca:91:fd:e9:52:4c:25:4c:28:3b:f1:3e:cb:56:
                    f6:bd:b6:d5:f6:d1:5c:f2:a9:97:06:12:27:32:e1:
                    dc:9d:2f:5d:b3:10:25:38:2f:35:3e:be:7a:41:64:
                    06:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:A6:04:86:A8:71:24:2E:66:FF:AE:72:50:F2:C6:30:A8:CC:D4:A8
            X509v3 Authority Key Identifier:
                keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b63fd343-5e29-48fc-84c9-2d11751d74e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.169.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:f3:d2:c8:c3:97:3e:13:a9:01:b9:cf:70:9d:ac:73:0e:86:
         fe:4e:ed:1c:64:b0:cb:4d:c0:eb:cb:45:4f:6b:84:47:7c:8a:
         da:1e:06:da:f6:51:ad:37:37:ca:4c:30:2b:1b:b1:7a:a6:3f:
         4f:d7:98:77:e4:9e:3d:5a:f0:16:81:27:ad:23:2a:e2:b2:54:
         f3:91:42:5e:e7:5f:3a:9d:85:27:90:71:52:73:b5:ee:0a:ba:
         0c:ae:8c:78:c5:94:ce:18:a5:8e:d3:5e:43:d1:db:5b:63:03:
         27:63:fd:de:e2:b9:72:83:e4:0b:48:ae:b0:1c:b0:09:fc:ac:
         70:62:c9:b9:1c:30:5c:b7:0d:a4:bb:1f:9a:17:55:d5:e5:32:
         cf:ba:82:74:3a:76:19:7e:8e:98:87:12:97:d2:62:29:b9:d1:
         6e:30:b1:6d:f5:b4:99:94:d2:2e:d9:45:11:6b:f3:73:cd:c2:
         53:93:20:a7:e5:9e:a8:60:3a:dc:09:1d:d7:77:f4:dc:8a:86:
         a3:7a:80:b5:90:65:d8:5d:f4:ab:4b:75:0c:6d:49:3b:d7:a7:
         67:2d:6a:14:46:fa:64:eb:a9:1b:4b:d5:12:6c:28:b5:88:06:
         4c:af:1f:e8:94:00:20:8a:e8:a5:e5:95:37:e7:f7:49:cc:ec:
         78:da:ae:e6
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUAIdUKHDt22fWgz/X8AhqNwR1ybowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm
MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYwNTE1MDAxMDIwWhcNMjYwODEzMjM1OTU5
WjB6MUkwRwYDVQQFE0A0Mzk1YjAzNTNiZjYxMGRiN2IxZWNlMjU2OTlhMDcyYTZj
Mzg4ZmNhYjkwNmEwOTRjNjQxM2RjNjdlYjFmOWNkMS0wKwYDVQQDEyQ0MjUxOWVi
OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCb6ZccqK/sOy2XnikLLYlNfl5vanh2iIPsFt/1bzXRljMN
t4xUYVmbifye9axR+Vo5iLj45BAoe3cqoWR93qPaoaRdd57uAIuO3jGyGLL3CNvQ
6KKPAOR/GtlNXxkLSLwMjZFJplqvEsTbKKvc1Y8Y3Bq5HZ2LgEIZLGHjPUI/Vd9k
3cFIOmFv8PrRqr6HVAqsbAUVWGGlQm8FbfJF+YVBka9oo662Z3/hM9IUV7tIz8qF
37tRxFrhPWXG00mmm5PPjwzBCrquONLRw8ajQ2vLfvDKkf3pUkwlTCg78T7LVva9
ttX20VzyqZcGEicy4dydL12zECU4LzU+vnpBZAYNAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU+aYEhqhxJC5m/65yUPLGMKjM1KgwHwYDVR0jBBgwFoAUvJOucQ+vFCI2
CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04
NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2
ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1
NTUxNGQ5YzdkL2I2M2ZkMzQzLTVlMjktNDhmYy04NGM5LTJkMTE3NTFkNzRlOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx
LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAFFqe4wDQYJKoZIhvcNAQELBQADggEBAHrz0sjDlz4TqQG5z3CdrHMOhv5O
7RxksMtNwOvLRU9rhEd8itoeBtr2Ua03N8pMMCsbsXqmP0/XmHfknj1a8BaBJ60j
KuKyVPORQl7nXzqdhSeQcVJzte4KugyujHjFlM4YpY7TXkPR21tjAydj/d7iuXKD
5AtIrrAcsAn8rHBiybkcMFy3DaS7H5oXVdXlMs+6gnQ6dhl+jpiHEpfSYim50W4w
sW31tJmU0i7ZRRFr83PNwlOTIKflnqhgOtwJHdd39NyKhqN6gLWQZdhd9KtLdQxt
STvXp2ctahRG+mTrqRtL1RJsKLWIBkyvH+iUACCK6KXllTfn90nM7HjaruY=
-----END CERTIFICATE-----
Generated at Wed Jun 17 08:35:31 2026 by rpki-client