Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/269cebc9-cd3a-46d6-b6ab-f2546cfc5f43.roa
File:                     269cebc9-cd3a-46d6-b6ab-f2546cfc5f43.roa (raw, json)
Hash identifier:          ghzt5d4hk2Yj/MKOkyrvDaeGmjy2Xk8U5AZeliNjil8=
Subject key identifier:   DC:27:96:1B:24:EC:0F:10:AE:EB:8F:5D:0A:40:90:69:8E:1C:18:FE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2132499BE39774890EBBA7802E0F311DF70A6EE5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/269cebc9-cd3a-46d6-b6ab-f2546cfc5f43.roa
Signing time:             Tue 05 May 2026 00:40:33 +0000
ROA not before:           Tue 05 May 2026 00:40:33 +0000
ROA not after:            Mon 03 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        184.72.80.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:32:49:9b:e3:97:74:89:0e:bb:a7:80:2e:0f:31:1d:f7:0a:6e:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  5 00:40:33 2026 GMT
            Not After : Aug  3 23:59:59 2026 GMT
        Subject: serialNumber=f85d57bc170b1cc3f9cc9869a2fe11d32c417385b75ee5b8cb892e1d8baa7cfd, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1c:ff:e3:87:a4:df:a9:3e:0a:06:04:ee:5c:
                    70:28:14:52:d1:37:bd:93:9b:5e:fa:6e:51:41:c3:
                    ab:55:d6:e8:52:19:ad:a2:d8:9c:b1:82:9a:aa:f6:
                    5b:81:48:50:2e:91:d3:3a:24:b4:f0:6c:dd:ec:04:
                    5a:f5:1d:4b:26:e4:b4:b3:8d:e9:69:67:b0:f6:25:
                    34:30:80:b6:84:00:79:a3:f3:28:5e:f8:51:f6:ec:
                    87:a4:ae:c2:01:67:6c:1d:27:f0:4c:04:94:a7:eb:
                    3b:73:cd:79:65:63:ad:5d:39:f5:46:62:be:3c:ed:
                    1f:52:26:1b:7b:d0:67:55:44:77:c1:35:55:fd:c2:
                    af:69:28:a1:03:26:85:54:cf:44:f4:e3:2f:91:b3:
                    46:74:4f:00:67:6f:9d:e2:33:8f:b6:6e:e1:8f:6a:
                    25:91:8d:00:91:17:76:55:0b:b3:51:da:85:cb:b1:
                    7c:0c:59:84:68:ac:d8:7b:3f:5b:e1:12:b0:9f:fa:
                    8d:5d:0d:c6:f4:4c:3a:42:e7:c1:c4:0a:8d:78:ea:
                    11:82:a1:61:11:75:0e:a7:96:66:b5:ab:b1:09:72:
                    7f:51:36:86:0c:a5:d2:6f:a2:d4:0b:21:35:19:93:
                    c2:c0:96:9c:88:b8:bd:af:b4:19:61:10:ac:28:9a:
                    b9:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:27:96:1B:24:EC:0F:10:AE:EB:8F:5D:0A:40:90:69:8E:1C:18:FE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/269cebc9-cd3a-46d6-b6ab-f2546cfc5f43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.72.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5f:81:3d:3a:77:ce:22:6c:ce:1c:c4:b5:0d:e3:61:fa:c0:e9:
         8a:09:50:d0:2e:d6:b5:1c:f9:a4:dd:64:ef:c1:9b:c3:31:f4:
         bd:7c:48:2b:2e:64:31:01:54:65:25:90:32:4d:14:a3:29:69:
         97:26:7c:02:a1:3f:fb:b6:77:ea:a3:f2:19:0d:1a:17:6b:e0:
         55:03:05:04:6c:2f:3a:b5:47:e0:a0:6a:be:09:1c:d8:b2:22:
         c9:f6:27:c2:31:bb:03:05:ae:59:24:70:b4:1b:b1:3a:50:21:
         b2:39:ae:93:e5:91:f7:90:ec:2a:f2:04:f2:38:6a:43:fd:80:
         17:8e:96:fd:83:38:ad:ff:f1:5c:10:9f:8b:a7:1b:20:89:16:
         8d:39:f7:62:30:a2:f4:0f:e6:62:d1:5f:06:e5:c5:a8:31:31:
         4b:88:c9:e9:de:f9:d7:1d:db:1b:e9:f4:6a:52:8e:40:70:fa:
         09:7a:3a:c2:06:60:ea:21:62:8b:ab:c0:8a:e9:ad:b4:5e:b6:
         d7:17:9e:78:89:2a:95:ca:ea:5d:bd:91:7c:b6:83:71:8f:fa:
         11:62:cc:97:e3:c5:82:2e:2f:f1:40:9f:59:3f:67:08:3d:d5:
         fb:33:28:8f:1a:7e:73:13:b5:77:ee:51:bb:3d:e7:2f:c6:36:
         b3:13:15:ad
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUITJJm+OXdIkOu6eALg8xHfcKbuUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA1MDA0MDMzWhcNMjYwODAzMjM1OTU5
WjB6MUkwRwYDVQQFE0BmODVkNTdiYzE3MGIxY2MzZjljYzk4NjlhMmZlMTFkMzJj
NDE3Mzg1Yjc1ZWU1YjhjYjg5MmUxZDhiYWE3Y2ZkMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDPHP/jh6TfqT4KBgTuXHAoFFLRN72Tm176blFBw6tV1uhS
Ga2i2Jyxgpqq9luBSFAukdM6JLTwbN3sBFr1HUsm5LSzjelpZ7D2JTQwgLaEAHmj
8yhe+FH27IekrsIBZ2wdJ/BMBJSn6ztzzXllY61dOfVGYr487R9SJht70GdVRHfB
NVX9wq9pKKEDJoVUz0T04y+Rs0Z0TwBnb53iM4+2buGPaiWRjQCRF3ZVC7NR2oXL
sXwMWYRorNh7P1vhErCf+o1dDcb0TDpC58HECo146hGCoWERdQ6nlma1q7EJcn9R
NoYMpdJvotQLITUZk8LAlpyIuL2vtBlhEKwomrnHAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU3CeWGyTsDxCu649dCkCQaY4cGP4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzI2OWNlYmM5LWNkM2EtNDZkNi1iNmFiLWYyNTQ2Y2ZjNWY0My5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAO4SFAwDQYJKoZIhvcNAQELBQADggEBAF+BPTp3ziJszhzEtQ3jYfrA6YoJ
UNAu1rUc+aTdZO/Bm8Mx9L18SCsuZDEBVGUlkDJNFKMpaZcmfAKhP/u2d+qj8hkN
Ghdr4FUDBQRsLzq1R+Cgar4JHNiyIsn2J8IxuwMFrlkkcLQbsTpQIbI5rpPlkfeQ
7CryBPI4akP9gBeOlv2DOK3/8VwQn4unGyCJFo0592IwovQP5mLRXwblxagxMUuI
yene+dcd2xvp9GpSjkBw+gl6OsIGYOohYourwIrprbRettcXnniJKpXK6l29kXy2
g3GP+hFizJfjxYIuL/FAn1k/Zwg91fszKI8afnMTtXfuUbs95y/GNrMTFa0=
-----END CERTIFICATE-----
Generated at Wed May 13 03:07:00 2026 by rpki-client