Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b51ff23f-4cfd-4c35-9970-6403ddeb83b4.roa
File:                     b51ff23f-4cfd-4c35-9970-6403ddeb83b4.roa (raw, json)
Hash identifier:          TlMExPziE0NJMOiawpDIWi60zhC8kXSYpf8MxK5I9bE=
Subject key identifier:   D1:8B:6A:D7:9F:C4:4F:0F:85:B6:0F:74:04:75:ED:B5:5C:1F:47:69
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       035E8BBC30C385F534E9D9D97ECF2AAF5FF7A276
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b51ff23f-4cfd-4c35-9970-6403ddeb83b4.roa
Signing time:             Tue 12 May 2026 00:31:59 +0000
ROA not before:           Tue 12 May 2026 00:31:59 +0000
ROA not after:            Mon 10 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        71.152.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:5e:8b:bc:30:c3:85:f5:34:e9:d9:d9:7e:cf:2a:af:5f:f7:a2:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 12 00:31:59 2026 GMT
            Not After : Aug 10 23:59:59 2026 GMT
        Subject: serialNumber=da2fb9b39169aa231e0be5ec07d9ea7e8fd36244ed27987fbebd10d5f80321df, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b4:bb:9b:95:d3:15:38:35:5f:35:69:85:06:
                    ba:a8:dc:45:91:c8:cf:e2:df:94:22:1f:78:3e:88:
                    f5:b5:e6:d5:67:61:92:3a:b9:73:4e:04:05:bc:32:
                    03:04:ef:3a:08:c5:d0:d6:68:c1:d4:96:a9:fc:54:
                    e6:9d:fb:8b:35:65:53:0d:0b:b5:7b:7f:06:dc:75:
                    d7:da:b1:6e:00:4e:c1:71:41:69:28:22:10:18:0c:
                    df:38:3a:e1:68:3b:71:72:37:6b:a4:93:39:68:c6:
                    a4:85:09:43:98:f2:87:a4:b9:bb:6e:61:38:b2:d0:
                    5f:67:22:5c:62:af:08:38:c3:7c:29:47:7f:63:7c:
                    5f:5b:46:dc:59:61:0f:86:a0:a4:f0:f9:b0:0b:96:
                    38:4d:8f:6a:d6:31:e6:d5:fa:9f:27:62:df:28:db:
                    40:f9:72:7f:f2:a7:bc:75:55:bc:9f:22:2b:81:72:
                    9f:76:0c:fa:7f:6f:47:47:c7:64:27:39:c7:8b:0d:
                    52:b9:bd:ec:2d:c8:9b:59:b1:c9:a6:de:4d:f6:2a:
                    12:83:66:78:64:df:00:53:e0:2f:2c:8f:26:00:eb:
                    55:e0:fa:9f:a7:dc:1c:99:dd:ca:0a:7c:79:ff:6b:
                    df:da:0a:39:2f:7b:03:42:e0:0d:62:df:31:8b:4a:
                    7a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:8B:6A:D7:9F:C4:4F:0F:85:B6:0F:74:04:75:ED:B5:5C:1F:47:69
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b51ff23f-4cfd-4c35-9970-6403ddeb83b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.152.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:b1:32:94:35:75:60:fa:89:ed:35:82:35:7d:99:86:89:50:
         56:a8:60:47:4f:e7:6a:7a:37:c2:88:71:76:21:61:96:26:ff:
         92:07:a0:e3:a2:11:89:c7:ab:52:b7:6d:18:80:f6:46:b3:fd:
         bb:e9:4d:69:22:b7:4a:a2:00:84:2f:cc:b6:31:5f:72:1d:0f:
         bb:e5:f1:e6:e7:18:5d:4d:88:eb:ab:9f:10:e3:0c:e8:65:c7:
         35:1a:7e:e9:11:53:22:53:09:4e:ca:e5:e4:90:29:20:af:4d:
         68:9f:3b:d1:ed:8e:89:a7:1b:0c:f8:00:e7:0c:1b:3d:d7:1a:
         32:9a:05:46:9c:47:0c:f9:26:cc:dd:c1:ab:1a:8d:13:42:b4:
         fe:fa:4f:89:2a:bb:29:fa:06:71:79:f7:61:aa:a6:23:67:92:
         e4:6a:ce:0b:9c:22:5a:72:21:9d:a0:4f:ac:40:b0:d6:d5:f6:
         10:fc:97:18:9a:95:9c:c6:76:6b:83:98:ff:00:76:5b:45:c4:
         c6:84:73:02:90:08:21:cf:52:8a:4d:6f:4e:64:6b:32:3a:a0:
         31:78:c7:0c:9a:4c:64:b6:43:56:ee:20:3e:0a:4c:41:3d:84:
         b6:b0:71:c7:bd:6a:59:a6:e3:41:39:ad:bf:6b:20:77:02:e0:
         40:2f:30:a9
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUA16LvDDDhfU06dnZfs8qr1/3onYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTEyMDAzMTU5WhcNMjYwODEwMjM1OTU5
WjB6MUkwRwYDVQQFE0BkYTJmYjliMzkxNjlhYTIzMWUwYmU1ZWMwN2Q5ZWE3ZThm
ZDM2MjQ0ZWQyNzk4N2ZiZWJkMTBkNWY4MDMyMWRmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCitLubldMVODVfNWmFBrqo3EWRyM/i35QiH3g+iPW15tVn
YZI6uXNOBAW8MgME7zoIxdDWaMHUlqn8VOad+4s1ZVMNC7V7fwbcddfasW4ATsFx
QWkoIhAYDN84OuFoO3FyN2ukkzloxqSFCUOY8oekubtuYTiy0F9nIlxirwg4w3wp
R39jfF9bRtxZYQ+GoKTw+bALljhNj2rWMebV+p8nYt8o20D5cn/yp7x1VbyfIiuB
cp92DPp/b0dHx2QnOceLDVK5vewtyJtZscmm3k32KhKDZnhk3wBT4C8sjyYA61Xg
+p+n3ByZ3coKfHn/a9/aCjkvewNC4A1i3zGLSnoVAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU0Ytq15/ETw+Ftg90BHXttVwfR2kwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2I1MWZmMjNmLTRjZmQtNGMzNS05OTcwLTY0MDNkZGViODNiNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABHmE4wDQYJKoZIhvcNAQELBQADggEBAGmxMpQ1dWD6ie01gjV9mYaJUFao
YEdP52p6N8KIcXYhYZYm/5IHoOOiEYnHq1K3bRiA9kaz/bvpTWkit0qiAIQvzLYx
X3IdD7vl8ebnGF1NiOurnxDjDOhlxzUafukRUyJTCU7K5eSQKSCvTWifO9Htjomn
Gwz4AOcMGz3XGjKaBUacRwz5JszdwasajRNCtP76T4kquyn6BnF592GqpiNnkuRq
zgucIlpyIZ2gT6xAsNbV9hD8lxialZzGdmuDmP8AdltFxMaEcwKQCCHPUopNb05k
azI6oDF4xwyaTGS2Q1buID4KTEE9hLawcce9almm40E5rb9rIHcC4EAvMKk=
-----END CERTIFICATE-----
Generated at Tue May 12 21:55:40 2026 by rpki-client