Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7b4c0bc3-b91f-4b99-a1f8-22d669788ad4.roa
File:                     7b4c0bc3-b91f-4b99-a1f8-22d669788ad4.roa (raw, json)
Hash identifier:          FV3xWJ2XXFcreJ4BpyIgxyq0qgiwEYTT7PwKM8VFXXI=
Subject key identifier:   4A:7E:BE:44:C4:20:A6:73:9C:C6:42:7A:11:40:FA:1F:FB:94:6D:67
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       27CB7EC9AF1514B4F07B8FF574ABFB56834F93C8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7b4c0bc3-b91f-4b99-a1f8-22d669788ad4.roa
Signing time:             Mon 04 May 2026 01:21:48 +0000
ROA not before:           Mon 04 May 2026 01:21:48 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        93.77.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:cb:7e:c9:af:15:14:b4:f0:7b:8f:f5:74:ab:fb:56:83:4f:93:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  4 01:21:48 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=3fa339843a3cb015499327f1e5b965abfbdc021c418153da696cfe4761cc1f68, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5b:4e:c4:ff:37:84:81:43:e1:c3:7a:6a:90:
                    84:c8:1d:a4:34:80:6d:21:a9:b0:38:24:14:67:5d:
                    39:35:cf:a9:b1:cc:31:a1:96:ba:94:c5:d6:05:e2:
                    d4:33:b7:4a:a1:fe:e5:a8:e1:95:d8:6b:70:f8:c6:
                    84:6a:70:24:69:e1:8f:3d:c4:0f:83:a0:3f:e1:eb:
                    87:64:df:dc:e7:89:08:d5:ef:6a:78:a2:19:25:2a:
                    c8:33:43:b9:43:e5:f9:15:4d:e1:5a:61:3f:3f:a3:
                    07:64:d6:02:3d:2c:9f:72:fe:3e:b0:25:21:30:38:
                    4c:12:55:d1:5f:42:dc:0d:ba:fa:60:3c:f4:3c:2f:
                    50:b3:45:17:8b:65:80:da:fd:40:a8:71:d0:f5:fd:
                    d1:f7:86:12:dd:d3:f8:ed:6c:c5:d0:e1:64:7f:bb:
                    bc:57:35:d9:f4:79:3e:bf:4f:3a:ec:39:a6:ab:8c:
                    e2:24:7a:56:28:f7:b3:94:80:e8:51:8b:da:2d:44:
                    b2:61:21:66:79:99:b6:67:ce:47:ea:00:cd:94:d3:
                    0e:0f:50:64:26:18:d2:fe:8e:d0:0c:58:9a:27:7c:
                    5b:04:6a:17:3e:d2:29:ea:db:57:bf:09:38:8e:89:
                    93:5f:fd:36:1e:95:55:91:45:47:53:34:bb:bc:64:
                    09:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:7E:BE:44:C4:20:A6:73:9C:C6:42:7A:11:40:FA:1F:FB:94:6D:67
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7b4c0bc3-b91f-4b99-a1f8-22d669788ad4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.77.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:f5:3e:d8:99:93:ac:d5:7b:12:80:5e:d0:20:1d:b5:10:1d:
         c1:f0:ae:67:ef:b1:7d:09:35:dc:58:11:51:d1:89:9f:4e:83:
         71:67:d0:6d:bb:52:43:d7:cf:aa:25:18:91:a8:ba:92:9a:7f:
         b4:e8:6c:c6:30:9b:96:39:bf:0b:07:46:15:e2:b2:00:f1:e3:
         0f:b3:32:d1:cf:18:c0:f0:05:26:41:c0:a3:a6:10:52:62:f9:
         dd:26:25:bc:f1:b3:87:9b:f2:03:7b:55:8b:ef:eb:f3:03:df:
         ab:58:34:b7:b6:91:70:ea:b2:ad:d0:e6:52:8d:29:ae:2d:ad:
         10:a7:03:a1:e0:bf:63:a5:10:2e:6e:b8:d6:45:3f:b1:0e:44:
         7c:63:e1:6f:45:fe:40:0c:18:56:55:ac:69:79:99:ed:83:73:
         32:12:b3:91:ad:8f:cf:e2:74:4c:2c:7e:4e:1a:62:1c:6e:e6:
         cb:ba:f7:ba:b8:fb:21:a4:07:ed:dd:b0:a1:cd:07:a6:f8:1e:
         a1:1f:c1:93:24:15:e6:8c:34:44:dc:18:99:8f:f3:8a:3a:47:
         df:23:67:8e:51:71:b3:1b:d9:5a:7e:ce:03:70:0d:df:7e:4e:
         67:03:76:ca:07:94:23:9e:2b:ff:73:fa:35:3d:db:9b:55:c9:
         53:f2:a9:44
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUJ8t+ya8VFLTwe4/1dKv7VoNPk8gwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA0MDEyMTQ4WhcNMjYwODAyMjM1OTU5
WjB6MUkwRwYDVQQFE0AzZmEzMzk4NDNhM2NiMDE1NDk5MzI3ZjFlNWI5NjVhYmZi
ZGMwMjFjNDE4MTUzZGE2OTZjZmU0NzYxY2MxZjY4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCvW07E/zeEgUPhw3pqkITIHaQ0gG0hqbA4JBRnXTk1z6mx
zDGhlrqUxdYF4tQzt0qh/uWo4ZXYa3D4xoRqcCRp4Y89xA+DoD/h64dk39zniQjV
72p4ohklKsgzQ7lD5fkVTeFaYT8/owdk1gI9LJ9y/j6wJSEwOEwSVdFfQtwNuvpg
PPQ8L1CzRReLZYDa/UCocdD1/dH3hhLd0/jtbMXQ4WR/u7xXNdn0eT6/TzrsOaar
jOIkelYo97OUgOhRi9otRLJhIWZ5mbZnzkfqAM2U0w4PUGQmGNL+jtAMWJonfFsE
ahc+0inq21e/CTiOiZNf/TYelVWRRUdTNLu8ZAm1AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUSn6+RMQgpnOcxkJ6EUD6H/uUbWcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzdiNGMwYmMzLWI5MWYtNGI5OS1hMWY4LTIyZDY2OTc4OGFkNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABdTZ8wDQYJKoZIhvcNAQELBQADggEBAE/1PtiZk6zVexKAXtAgHbUQHcHw
rmfvsX0JNdxYEVHRiZ9Og3Fn0G27UkPXz6olGJGoupKaf7TobMYwm5Y5vwsHRhXi
sgDx4w+zMtHPGMDwBSZBwKOmEFJi+d0mJbzxs4eb8gN7VYvv6/MD36tYNLe2kXDq
sq3Q5lKNKa4trRCnA6Hgv2OlEC5uuNZFP7EORHxj4W9F/kAMGFZVrGl5me2DczIS
s5Gtj8/idEwsfk4aYhxu5su697q4+yGkB+3dsKHNB6b4HqEfwZMkFeaMNETcGJmP
84o6R98jZ45RcbMb2Vp+zgNwDd9+TmcDdsoHlCOeK/9z+jU925tVyVPyqUQ=
-----END CERTIFICATE-----
Generated at Tue May 12 21:55:00 2026 by rpki-client