Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/06e91c9a-92c4-4fdf-9169-e031b8ce6f59.roa
File:                     06e91c9a-92c4-4fdf-9169-e031b8ce6f59.roa (raw, json)
Hash identifier:          jxx3m6/sx3Hce/4lGwZoZ1IPIvwhxxrXPAzTLobAfEo=
Subject key identifier:   77:41:09:85:B8:11:5C:74:54:9D:2E:CE:33:F9:59:2F:74:14:76:D2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       59761851B807FCDC305DB01D5C4FE2DF86EC2838
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/06e91c9a-92c4-4fdf-9169-e031b8ce6f59.roa
Signing time:             Tue 28 Apr 2026 00:31:20 +0000
ROA not before:           Tue 28 Apr 2026 00:31:20 +0000
ROA not after:            Mon 27 Jul 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        15.233.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:76:18:51:b8:07:fc:dc:30:5d:b0:1d:5c:4f:e2:df:86:ec:28:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 28 00:31:20 2026 GMT
            Not After : Jul 27 23:59:59 2026 GMT
        Subject: serialNumber=9664c313e7f154a617ef5458c0a9b314e2f9162a051f5024318740d6ae82d2b8, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:86:9e:f5:9b:e1:e4:8d:f1:b7:73:4e:c1:6d:
                    44:f2:e3:6d:83:cf:80:31:9c:13:c0:a4:7a:9c:c3:
                    09:9c:c9:c2:23:9c:63:f2:8e:80:6e:7e:4c:82:e7:
                    f3:f0:35:72:0d:b8:51:a4:42:9a:46:f3:02:c9:45:
                    3c:fe:05:85:e9:42:c9:19:bb:4c:97:c6:10:8f:7a:
                    fb:7b:5b:97:29:f5:da:3f:4b:0e:5f:7e:f3:90:4e:
                    24:83:5a:30:44:21:d5:98:f6:4e:29:58:38:34:d7:
                    ab:94:50:98:92:6c:6d:e2:a7:fc:06:78:5b:db:3f:
                    cf:a0:c3:91:51:3e:d7:9b:63:89:e4:f7:f6:62:0d:
                    5a:03:6b:57:b5:82:49:3e:af:e0:d6:99:d7:b7:eb:
                    c5:6e:bf:b4:17:8b:ee:9b:cd:9d:7e:72:be:6e:46:
                    28:60:9f:40:be:a9:f3:8a:d6:03:71:c7:dc:34:40:
                    41:49:aa:af:f5:f6:7f:43:7d:dd:24:86:9d:f6:fa:
                    3e:56:64:4c:64:b1:c1:d3:32:fb:f8:f5:81:cc:22:
                    12:14:3c:04:fe:9a:a0:f8:ad:06:c4:89:11:45:2a:
                    6b:2f:5e:1d:db:48:8c:6f:74:f4:b2:a0:62:65:e6:
                    20:a0:77:0b:2f:6b:2f:bc:3c:77:a7:91:18:1b:3a:
                    d2:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:41:09:85:B8:11:5C:74:54:9D:2E:CE:33:F9:59:2F:74:14:76:D2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/06e91c9a-92c4-4fdf-9169-e031b8ce6f59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.233.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         51:bf:5a:8c:4c:d4:83:98:54:71:bc:a2:12:6a:5c:fe:85:d1:
         e8:69:06:50:5b:fa:8e:3d:87:f1:95:2a:18:ef:26:09:ff:29:
         f2:e3:d4:81:cc:8a:31:e9:7b:b5:33:0c:f8:7e:e4:ea:c9:3e:
         f5:33:a4:81:0b:48:c8:dd:f4:a1:64:4a:3d:ba:7c:c2:fb:c3:
         31:bf:73:86:76:f9:a2:53:41:6d:94:2e:e2:85:d0:06:04:29:
         94:db:e5:dd:56:ad:9b:98:3d:14:e7:5c:7d:4c:44:f6:a5:5c:
         c4:b6:9c:b4:85:54:ca:08:fd:fb:8c:b2:08:6c:fd:ce:52:4b:
         f0:21:6a:5c:ee:21:1f:de:ec:08:07:fd:39:06:ff:bc:42:52:
         1b:0e:c0:b7:d0:91:20:c7:73:b2:6b:c0:1b:64:88:34:c6:bd:
         1a:61:d2:90:79:9b:03:d2:8c:84:87:45:bb:f6:5c:35:b5:61:
         d0:9e:1b:97:a0:a6:f0:43:a4:79:43:92:20:2e:48:65:2a:c4:
         bf:f8:35:da:d3:78:63:35:93:15:2a:f8:57:02:da:2a:c5:9a:
         32:6b:a7:86:39:8f:ca:60:1b:4b:59:05:fc:4c:9d:ed:78:c3:
         eb:05:4a:34:b0:01:35:aa:7b:7d:30:00:34:c8:51:13:35:7c:
         6b:e0:a8:45
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUWXYYUbgH/NwwXbAdXE/i34bsKDgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNDI4MDAzMTIwWhcNMjYwNzI3MjM1OTU5
WjB6MUkwRwYDVQQFE0A5NjY0YzMxM2U3ZjE1NGE2MTdlZjU0NThjMGE5YjMxNGUy
ZjkxNjJhMDUxZjUwMjQzMTg3NDBkNmFlODJkMmI4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC9hp71m+HkjfG3c07BbUTy422Dz4AxnBPApHqcwwmcycIj
nGPyjoBufkyC5/PwNXINuFGkQppG8wLJRTz+BYXpQskZu0yXxhCPevt7W5cp9do/
Sw5ffvOQTiSDWjBEIdWY9k4pWDg016uUUJiSbG3ip/wGeFvbP8+gw5FRPtebY4nk
9/ZiDVoDa1e1gkk+r+DWmde368Vuv7QXi+6bzZ1+cr5uRihgn0C+qfOK1gNxx9w0
QEFJqq/19n9Dfd0khp32+j5WZExkscHTMvv49YHMIhIUPAT+mqD4rQbEiRFFKmsv
Xh3bSIxvdPSyoGJl5iCgdwsvay+8PHenkRgbOtL1AgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUd0EJhbgRXHRUnS7OM/lZL3QUdtIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzA2ZTkxYzlhLTkyYzQtNGZkZi05MTY5LWUwMzFiOGNlNmY1OS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAP6TANBgkqhkiG9w0BAQsFAAOCAQEAUb9ajEzUg5hUcbyiEmpc/oXR6GkG
UFv6jj2H8ZUqGO8mCf8p8uPUgcyKMel7tTMM+H7k6sk+9TOkgQtIyN30oWRKPbp8
wvvDMb9zhnb5olNBbZQu4oXQBgQplNvl3Vatm5g9FOdcfUxE9qVcxLactIVUygj9
+4yyCGz9zlJL8CFqXO4hH97sCAf9OQb/vEJSGw7At9CRIMdzsmvAG2SINMa9GmHS
kHmbA9KMhIdFu/ZcNbVh0J4bl6Cm8EOkeUOSIC5IZSrEv/g12tN4YzWTFSr4VwLa
KsWaMmunhjmPymAbS1kF/Eyd7XjD6wVKNLABNap7fTAANMhREzV8a+CoRQ==
-----END CERTIFICATE-----
Generated at Mon May 4 21:37:14 2026 by rpki-client