Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e7b3944-7311-4337-8436-836528b45a90.roa
File:                     6e7b3944-7311-4337-8436-836528b45a90.roa (raw, json)
Hash identifier:          CI94fsOUUlk2nYzURuTLpOEcPoH0+9sZvJdW3+7dCgA=
Subject key identifier:   60:14:5F:29:AB:B2:50:3C:EF:AA:A2:86:24:56:51:56:81:6A:59:B0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5826E7520CAF1666D9115DF77455A1D30DC25C52
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e7b3944-7311-4337-8436-836528b45a90.roa
Signing time:             Thu 18 Sep 2025 19:37:33 +0000
ROA not before:           Thu 18 Sep 2025 19:37:33 +0000
ROA not after:            Thu 23 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        23.91.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:26:e7:52:0c:af:16:66:d9:11:5d:f7:74:55:a1:d3:0d:c2:5c:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 18 19:37:33 2025 GMT
            Not After : Oct 23 23:59:59 2025 GMT
        Subject: serialNumber=be1e269be25fb10c927f34e38d81f8137f2523ba33d9cf2298cad0775b1fb6de, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a8:8d:01:c6:a5:66:a2:8e:11:58:20:26:de:
                    fd:77:e0:1d:07:97:df:64:31:35:7e:c3:22:01:b4:
                    5b:e8:a8:02:43:97:b4:ea:63:ec:22:24:88:f8:a9:
                    93:e0:4c:f4:e9:52:d3:f3:9d:de:24:cd:01:b1:3c:
                    24:3c:f6:ce:38:98:82:ab:4d:57:24:13:62:bd:a0:
                    9a:ac:28:c5:c6:37:16:1e:99:72:3e:6b:9c:62:05:
                    b3:3a:3e:a0:5c:2a:75:86:10:3b:2b:c8:71:6a:74:
                    ba:31:d8:01:1d:b4:22:48:cb:08:66:37:1e:ca:b4:
                    5f:8a:7b:47:13:23:6f:e9:cb:65:99:28:a2:b9:a5:
                    95:2a:1c:ee:97:8b:95:fd:50:c8:ee:e9:67:33:6d:
                    ba:76:60:37:ad:36:b8:6f:7a:78:cf:a2:cb:f1:97:
                    8f:99:54:b6:fa:50:ce:bb:72:b5:65:ad:24:f5:6f:
                    7a:1b:47:a9:ed:08:48:98:e7:c1:d7:12:4d:d4:91:
                    1f:3b:c2:10:6e:45:73:8b:0d:0d:25:25:0c:58:0e:
                    93:ac:56:ec:51:7a:d1:18:6c:9b:c1:8f:9e:5b:47:
                    f3:21:1f:57:aa:30:17:c1:be:c3:42:e3:ef:6e:6d:
                    fd:a7:4a:2c:33:a5:2c:f2:5f:ad:54:8f:d3:00:c1:
                    95:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:14:5F:29:AB:B2:50:3C:EF:AA:A2:86:24:56:51:56:81:6A:59:B0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e7b3944-7311-4337-8436-836528b45a90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.91.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:78:c0:f8:70:42:22:64:0a:06:ac:be:4e:f1:57:c0:0c:0f:
         53:28:53:85:cd:c2:e5:ca:5f:e7:1f:fe:db:da:35:67:64:8d:
         ab:55:67:bd:07:a3:c6:d6:a9:4f:08:c5:fd:d5:c7:d7:ca:db:
         da:f3:c5:7c:b9:56:47:79:d3:ee:49:16:6c:d4:ab:ee:2e:85:
         dc:f6:81:7f:f4:64:55:0a:fd:c0:0a:9a:21:49:03:ae:64:e9:
         e2:16:f9:6f:a5:eb:e3:7a:1c:50:66:6f:e0:61:25:ba:80:00:
         f9:82:05:5c:71:0c:0a:10:43:ee:bb:7e:1a:38:f7:db:b2:32:
         dd:e1:86:00:50:b0:d2:5d:90:4c:5c:f5:03:43:ed:78:74:7b:
         2a:86:97:c2:cd:6c:59:14:46:da:9b:fa:e8:aa:ce:cd:8f:d7:
         31:51:0d:d9:ce:1f:f2:37:47:b7:84:a4:2e:94:70:d5:53:e6:
         de:6c:5f:5d:f5:fe:ff:c0:68:a1:e2:16:54:4c:8d:cf:1a:de:
         b6:52:c8:a1:be:c4:69:a1:1d:f7:12:fe:20:fa:78:6f:6d:82:
         25:72:7b:8c:ab:ba:49:9a:aa:5d:48:5c:8f:b8:9c:46:81:a4:
         38:77:d9:c4:27:ae:84:32:e3:f8:54:35:d6:fc:7f:67:cb:dd:
         6e:ab:0a:f7
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUWCbnUgyvFmbZEV33dFWh0w3CXFIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwOTE4MTkzNzMzWhcNMjUxMDIzMjM1OTU5
WjB6MUkwRwYDVQQFE0BiZTFlMjY5YmUyNWZiMTBjOTI3ZjM0ZTM4ZDgxZjgxMzdm
MjUyM2JhMzNkOWNmMjI5OGNhZDA3NzViMWZiNmRlMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCsqI0BxqVmoo4RWCAm3v134B0Hl99kMTV+wyIBtFvoqAJD
l7TqY+wiJIj4qZPgTPTpUtPznd4kzQGxPCQ89s44mIKrTVckE2K9oJqsKMXGNxYe
mXI+a5xiBbM6PqBcKnWGEDsryHFqdLox2AEdtCJIywhmNx7KtF+Ke0cTI2/py2WZ
KKK5pZUqHO6Xi5X9UMju6Wczbbp2YDetNrhvenjPosvxl4+ZVLb6UM67crVlrST1
b3obR6ntCEiY58HXEk3UkR87whBuRXOLDQ0lJQxYDpOsVuxRetEYbJvBj55bR/Mh
H1eqMBfBvsNC4+9ubf2nSiwzpSzyX61Uj9MAwZWbAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUYBRfKauyUDzvqqKGJFZRVoFqWbAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzZlN2IzOTQ0LTczMTEtNDMzNy04NDM2LTgzNjUyOGI0NWE5MC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAXWwYwDQYJKoZIhvcNAQELBQADggEBAHh4wPhwQiJkCgasvk7xV8AMD1Mo
U4XNwuXKX+cf/tvaNWdkjatVZ70Ho8bWqU8Ixf3Vx9fK29rzxXy5Vkd50+5JFmzU
q+4uhdz2gX/0ZFUK/cAKmiFJA65k6eIW+W+l6+N6HFBmb+BhJbqAAPmCBVxxDAoQ
Q+67fho499uyMt3hhgBQsNJdkExc9QND7Xh0eyqGl8LNbFkURtqb+uiqzs2P1zFR
DdnOH/I3R7eEpC6UcNVT5t5sX131/v/AaKHiFlRMjc8a3rZSyKG+xGmhHfcS/iD6
eG9tgiVye4yrukmaql1IXI+4nEaBpDh32cQnroQy4/hUNdb8f2fL3W6rCvc=
-----END CERTIFICATE-----
Generated at Fri Sep 19 03:18:00 2025 by rpki-client