Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9e093b29-3153-49c7-bbdd-9089a1389778.roa
File:                     9e093b29-3153-49c7-bbdd-9089a1389778.roa (raw, json)
Hash identifier:          aJRDbLC09XUUlnsdAN4uBEi/x3FAVd4NdlcQLDJgof8=
Subject key identifier:   D8:CB:6A:41:BB:E9:B8:80:48:4A:87:36:BC:57:8E:92:C6:C0:44:4E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       427D1D2A60A825E3C4B37BF2991B66D2B164B224
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9e093b29-3153-49c7-bbdd-9089a1389778.roa
Signing time:             Wed 29 Apr 2026 00:00:10 +0000
ROA not before:           Wed 29 Apr 2026 00:00:10 +0000
ROA not after:            Tue 28 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        204.169.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:7d:1d:2a:60:a8:25:e3:c4:b3:7b:f2:99:1b:66:d2:b1:64:b2:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 29 00:00:10 2026 GMT
            Not After : Jul 28 23:59:59 2026 GMT
        Subject: serialNumber=74559853ec1ad6bc83155be1f46024f195e3be11bce24bdc6145b6fcd1b1d411, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:21:7d:0c:da:c3:a6:7f:48:87:38:91:39:ec:
                    da:fb:45:ae:6f:93:9a:0e:82:89:8e:9a:c7:a2:f8:
                    99:ba:ed:65:b9:62:cc:eb:3e:90:62:ac:47:91:28:
                    44:7b:87:39:05:9b:6f:53:2a:33:34:8a:ba:db:35:
                    df:ff:8f:82:2b:7e:bf:1b:ca:ff:04:f7:35:73:25:
                    eb:fd:30:9f:74:52:16:d8:6d:03:77:17:84:7a:99:
                    1e:e6:f3:6d:3e:b0:c6:8b:20:fd:a5:cd:4a:ee:46:
                    5b:ee:c2:61:c3:73:b9:96:b2:8f:f5:ac:77:05:dd:
                    5a:f4:fb:eb:dc:4f:e1:3e:aa:e8:71:c0:f3:3e:d8:
                    30:54:b3:88:cd:bd:74:76:65:df:31:4b:a6:97:1d:
                    f3:a8:3f:1a:c3:e6:41:15:ac:02:42:75:5a:ea:c3:
                    0b:42:fd:1e:1f:f1:7c:bd:c5:c4:97:e5:61:04:d1:
                    aa:92:4e:26:3c:54:0f:03:4f:9f:19:f4:b0:12:04:
                    12:f4:1b:72:43:9b:de:5b:33:ba:0f:96:83:a6:76:
                    e0:29:9e:bb:0b:bd:0b:57:d0:16:95:89:d9:8a:d5:
                    a8:8c:8a:15:9a:60:6a:c6:20:1e:e7:cd:b1:47:75:
                    8f:d8:a8:e3:55:e9:98:10:a2:e5:c3:62:ba:11:c2:
                    c0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:CB:6A:41:BB:E9:B8:80:48:4A:87:36:BC:57:8E:92:C6:C0:44:4E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9e093b29-3153-49c7-bbdd-9089a1389778.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.169.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         cf:6f:76:70:b7:b6:a8:28:60:fc:5c:23:57:7d:15:d1:dc:2f:
         2c:9f:75:3c:6b:be:fd:ff:a9:ce:cb:95:cd:31:b6:8c:6c:32:
         07:4f:97:ce:b4:54:89:d6:c4:28:14:12:1b:5a:ab:c8:17:e3:
         70:8e:7b:ca:58:70:55:f3:f0:f8:81:46:8f:83:f2:a1:f2:d4:
         5c:7d:e5:19:33:95:0f:42:5c:98:98:6e:fa:f8:3b:6e:1c:dd:
         51:98:77:bc:2c:79:fa:88:9f:ee:18:24:e4:33:fd:20:9a:2b:
         cc:44:fe:75:5b:ce:9a:d6:5f:f1:14:11:24:39:95:ff:bb:03:
         50:14:2f:1f:30:63:19:a1:45:2c:a1:40:c0:c0:e7:19:d6:13:
         96:4d:a4:ca:1f:59:b7:05:46:4c:29:27:e0:f7:29:bd:52:71:
         3b:c1:88:65:da:ce:3c:1c:d5:94:27:a9:c1:7f:b2:6f:9b:54:
         03:3e:b4:83:b9:b8:36:49:a9:26:a8:c5:17:05:75:70:b4:01:
         63:cf:fd:3c:21:73:3e:61:f8:cb:82:fa:a0:3a:79:98:3f:4a:
         0e:b2:3c:f7:3b:1d:b2:ec:0d:8e:4d:d4:71:70:04:26:4d:f5:
         36:a7:f5:0b:10:24:5a:19:d8:6f:c6:a5:b4:91:4d:77:71:f0:
         93:2f:df:53
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUQn0dKmCoJePEs3vymRtm0rFksiQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNDI5MDAwMDEwWhcNMjYwNzI4MjM1OTU5
WjB6MUkwRwYDVQQFE0A3NDU1OTg1M2VjMWFkNmJjODMxNTViZTFmNDYwMjRmMTk1
ZTNiZTExYmNlMjRiZGM2MTQ1YjZmY2QxYjFkNDExMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC7IX0M2sOmf0iHOJE57Nr7Ra5vk5oOgomOmsei+Jm67WW5
YszrPpBirEeRKER7hzkFm29TKjM0irrbNd//j4Irfr8byv8E9zVzJev9MJ90UhbY
bQN3F4R6mR7m820+sMaLIP2lzUruRlvuwmHDc7mWso/1rHcF3Vr0++vcT+E+quhx
wPM+2DBUs4jNvXR2Zd8xS6aXHfOoPxrD5kEVrAJCdVrqwwtC/R4f8Xy9xcSX5WEE
0aqSTiY8VA8DT58Z9LASBBL0G3JDm95bM7oPloOmduApnrsLvQtX0BaVidmK1aiM
ihWaYGrGIB7nzbFHdY/YqONV6ZgQouXDYroRwsAvAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQU2MtqQbvpuIBISoc2vFeOksbARE4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzllMDkzYjI5LTMxNTMtNDljNy1iYmRkLTkwODlhMTM4OTc3OC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwDMqTANBgkqhkiG9w0BAQsFAAOCAQEAz292cLe2qChg/FwjV30V0dwvLJ91
PGu+/f+pzsuVzTG2jGwyB0+XzrRUidbEKBQSG1qryBfjcI57ylhwVfPw+IFGj4Py
ofLUXH3lGTOVD0JcmJhu+vg7bhzdUZh3vCx5+oif7hgk5DP9IJorzET+dVvOmtZf
8RQRJDmV/7sDUBQvHzBjGaFFLKFAwMDnGdYTlk2kyh9ZtwVGTCkn4PcpvVJxO8GI
ZdrOPBzVlCepwX+yb5tUAz60g7m4NkmpJqjFFwV1cLQBY8/9PCFzPmH4y4L6oDp5
mD9KDrI89zsdsuwNjk3UcXAEJk31Nqf1CxAkWhnYb8altJFNd3Hwky/fUw==
-----END CERTIFICATE-----
Generated at Sun May 3 16:15:13 2026 by rpki-client