Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1c371f96-b6a2-4545-bc1d-b411650f7a7b.roa
File:                     1c371f96-b6a2-4545-bc1d-b411650f7a7b.roa (raw, json)
Hash identifier:          EHi+/6+E1P2oZtjObNMaO8HRlulhD6BdMZTXghiaMWQ=
Subject key identifier:   76:E0:E9:E4:32:96:37:E2:85:47:06:B6:B1:6A:C1:90:CF:E8:4F:6A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       062DC1480AF555CB49563AD76908F675142EA53B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1c371f96-b6a2-4545-bc1d-b411650f7a7b.roa
Signing time:             Fri 08 May 2026 00:20:47 +0000
ROA not before:           Fri 08 May 2026 00:20:47 +0000
ROA not after:            Thu 06 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        24.110.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:2d:c1:48:0a:f5:55:cb:49:56:3a:d7:69:08:f6:75:14:2e:a5:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  8 00:20:47 2026 GMT
            Not After : Aug  6 23:59:59 2026 GMT
        Subject: serialNumber=4266d370137d0fec7c256e6d62825afcf41e10c349ded8e8b161bf6b7783460a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5a:e7:f9:c7:99:f0:d3:75:79:d5:52:8b:c1:
                    ed:ae:fc:fd:b6:19:3e:b3:06:ee:13:99:6e:c2:d0:
                    e9:22:3f:c3:f7:a0:a1:63:1c:f7:0e:bd:08:37:80:
                    5b:a9:a1:4e:c2:f0:5f:d2:62:89:6b:a8:13:90:36:
                    8c:0b:e8:02:4e:36:eb:63:60:ea:63:40:b4:87:9f:
                    f8:41:79:3b:f5:f4:0f:72:21:87:b1:04:08:35:08:
                    ec:92:6a:e0:a4:2c:9b:1f:42:75:dd:d1:22:6d:8f:
                    c7:ac:c1:60:c0:1d:fd:2e:1e:23:e6:ec:93:a2:c5:
                    ac:e7:71:a7:dc:2b:29:e8:f7:8f:d7:43:a1:05:1e:
                    a5:ab:fc:bf:03:81:ba:72:93:1c:66:f8:db:1d:cb:
                    5b:f8:01:56:b0:02:43:bc:78:b9:54:04:57:3c:6e:
                    89:ec:0c:4e:89:53:45:01:7f:2d:27:5e:d9:e4:74:
                    60:cf:de:be:c9:34:6a:2d:1d:8e:01:59:b6:b3:b9:
                    c6:ed:1e:f7:29:b5:8f:a6:5c:da:35:dc:39:a5:58:
                    9d:44:7e:0c:80:6d:6d:81:76:73:12:6b:12:f0:2c:
                    05:3c:01:fc:eb:9a:8b:d4:ab:7b:91:08:6d:76:f3:
                    44:7f:9d:f7:53:4e:d4:0b:01:95:8d:0d:18:30:72:
                    ee:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:E0:E9:E4:32:96:37:E2:85:47:06:B6:B1:6A:C1:90:CF:E8:4F:6A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1c371f96-b6a2-4545-bc1d-b411650f7a7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.110.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:1e:87:2f:92:ca:f0:5b:b3:7a:85:4a:db:6d:6c:81:3d:af:
         00:ea:d2:cc:ca:29:c9:3b:6d:b0:bb:c6:a0:90:b6:66:09:33:
         88:60:12:c5:f0:82:d0:29:33:e5:df:58:4c:82:4c:ea:b7:b6:
         b0:02:9e:1f:7a:ed:b1:af:bc:ae:83:76:78:78:f4:a0:55:d1:
         43:97:b0:f1:19:e1:36:d0:b7:6d:5f:97:26:2d:c4:eb:b4:e3:
         18:eb:b4:62:83:f0:67:a1:5f:75:c1:f9:a0:96:0c:c2:9a:e8:
         fb:8a:24:ec:1f:3b:84:bf:a7:45:a2:ea:b5:f7:d1:78:52:e2:
         92:18:dd:f0:14:92:a0:b1:69:d3:8f:4d:fb:dd:ae:95:33:1c:
         6f:12:20:98:36:bc:78:8c:bf:76:f7:3c:3a:d6:0b:70:63:40:
         e3:70:79:12:46:c7:01:97:d1:81:b2:7b:8e:92:a8:dd:35:f9:
         2e:f1:40:46:1c:0c:85:c9:5b:39:62:6b:c9:ca:9d:b0:ef:2e:
         d7:ff:3e:a7:59:e9:1b:a5:dd:00:67:9f:0e:37:2c:34:e3:b4:
         2a:49:2f:94:15:7d:47:f4:c6:e5:2e:26:4c:70:6f:20:1e:93:
         96:f1:14:59:ac:76:61:cb:89:a7:91:60:bf:9a:32:fc:f2:fd:
         3a:e5:a7:a9
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUBi3BSAr1VctJVjrXaQj2dRQupTswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA4MDAyMDQ3WhcNMjYwODA2MjM1OTU5
WjB6MUkwRwYDVQQFE0A0MjY2ZDM3MDEzN2QwZmVjN2MyNTZlNmQ2MjgyNWFmY2Y0
MWUxMGMzNDlkZWQ4ZThiMTYxYmY2Yjc3ODM0NjBhMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC+Wuf5x5nw03V51VKLwe2u/P22GT6zBu4TmW7C0OkiP8P3
oKFjHPcOvQg3gFupoU7C8F/SYolrqBOQNowL6AJONutjYOpjQLSHn/hBeTv19A9y
IYexBAg1COySauCkLJsfQnXd0SJtj8eswWDAHf0uHiPm7JOixazncafcKyno94/X
Q6EFHqWr/L8Dgbpykxxm+Nsdy1v4AVawAkO8eLlUBFc8bonsDE6JU0UBfy0nXtnk
dGDP3r7JNGotHY4BWbazucbtHvcptY+mXNo13DmlWJ1EfgyAbW2BdnMSaxLwLAU8
AfzrmovUq3uRCG1280R/nfdTTtQLAZWNDRgwcu6XAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUduDp5DKWN+KFRwa2sWrBkM/oT2owHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzFjMzcxZjk2LWI2YTItNDU0NS1iYzFkLWI0MTE2NTBmN2E3Yi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAYbgUwDQYJKoZIhvcNAQELBQADggEBAIgehy+SyvBbs3qFStttbIE9rwDq
0szKKck7bbC7xqCQtmYJM4hgEsXwgtApM+XfWEyCTOq3trACnh967bGvvK6Ddnh4
9KBV0UOXsPEZ4TbQt21flyYtxOu04xjrtGKD8GehX3XB+aCWDMKa6PuKJOwfO4S/
p0Wi6rX30XhS4pIY3fAUkqCxadOPTfvdrpUzHG8SIJg2vHiMv3b3PDrWC3BjQONw
eRJGxwGX0YGye46SqN01+S7xQEYcDIXJWzlia8nKnbDvLtf/PqdZ6Rul3QBnnw43
LDTjtCpJL5QVfUf0xuUuJkxwbyAek5bxFFmsdmHLiaeRYL+aMvzy/Trlp6k=
-----END CERTIFICATE-----
Generated at Tue May 12 21:51:08 2026 by rpki-client