Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4adbd4db-9c77-456a-9a38-aae1df82a18a.roa
File:                     4adbd4db-9c77-456a-9a38-aae1df82a18a.roa (raw, json)
Hash identifier:          xQDHWM5ebFq+3XEEu+GzxT5HN8Gm7XHi1TUYCyswrcA=
Subject key identifier:   66:A2:D2:3D:B8:47:EB:C0:7A:ED:AF:05:B0:90:07:FE:66:22:04:70
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       387888EF99CF14C040CD97891F5EF816A6778114
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4adbd4db-9c77-456a-9a38-aae1df82a18a.roa
Signing time:             Tue 04 Aug 2026 00:40:10 +0000
ROA not before:           Tue 04 Aug 2026 00:40:10 +0000
ROA not after:            Mon 02 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f1b:4000::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:78:88:ef:99:cf:14:c0:40:cd:97:89:1f:5e:f8:16:a6:77:81:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  4 00:40:10 2026 GMT
            Not After : Nov  2 23:59:59 2026 GMT
        Subject: serialNumber=c52d16782d036f12010b0ad9a748a1a5649b1a7a5a383647959165125c21d301, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:22:44:a5:31:e0:eb:15:14:2c:79:35:61:13:
                    9f:8c:91:e4:18:77:97:f5:26:25:6f:34:97:3e:d0:
                    05:a4:cd:19:bb:31:ec:17:76:1a:bf:ac:57:f2:dd:
                    b2:e5:a6:84:bc:aa:cb:d2:9e:ec:1e:13:30:d6:4c:
                    cf:b8:95:35:7b:ea:48:28:f4:e4:c4:73:54:c3:f8:
                    b2:fe:45:50:0e:fa:68:c2:4d:3a:e2:01:03:c7:ab:
                    d4:bc:ea:b7:ed:f4:11:bf:04:28:0f:94:43:23:16:
                    a3:b3:7f:d4:b9:a5:5a:ac:42:df:09:fb:71:92:fc:
                    a5:d1:ab:d1:3e:c4:bb:71:26:94:71:4a:79:f2:f3:
                    bd:d6:a7:40:b9:72:97:2b:e8:09:4b:cc:99:02:c3:
                    ed:dd:70:d9:37:a0:1a:2b:6b:af:99:7e:f2:b2:7e:
                    fd:05:32:ba:6e:4b:d2:52:8f:e4:27:ed:f8:c5:7e:
                    d2:4e:04:8c:69:1b:10:52:36:3e:31:46:bd:f3:da:
                    42:13:d6:4a:10:03:6a:a8:22:5c:e2:a3:0c:ff:26:
                    24:bb:1a:3c:d1:a5:01:0b:10:98:dc:6c:fa:dd:7b:
                    35:26:97:98:14:3b:80:c0:11:25:9c:9f:9c:62:9f:
                    5e:4c:df:c9:89:7f:c6:b7:48:4a:de:0f:3a:72:f7:
                    98:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:A2:D2:3D:B8:47:EB:C0:7A:ED:AF:05:B0:90:07:FE:66:22:04:70
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4adbd4db-9c77-456a-9a38-aae1df82a18a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f1b:4000::/37

    Signature Algorithm: sha256WithRSAEncryption
         43:fd:c2:58:c1:da:6a:07:7f:f5:4c:a9:03:68:09:31:4a:d9:
         f9:88:4b:a1:7d:eb:d0:ff:ca:01:6c:02:a4:95:a9:ec:ae:7e:
         18:08:43:4c:94:b3:dd:a3:2f:60:27:cc:49:e2:8d:79:9f:47:
         0a:03:b0:d6:d5:cd:33:e2:13:a0:1f:ef:c2:47:fe:70:9c:2f:
         ef:ca:6b:fb:83:ab:66:17:5f:76:c6:fa:be:76:74:fc:a0:ac:
         30:94:7d:3e:b2:48:6a:db:35:f2:c8:28:d3:ac:b1:39:52:ac:
         58:af:83:a0:e6:73:f5:5c:56:68:00:c3:d7:ff:b5:77:a2:25:
         89:f8:8f:a3:5b:9a:4c:e8:f0:b3:72:28:70:5a:cb:ba:94:4c:
         a9:9b:ef:48:cb:91:c5:b1:13:1d:ce:e6:6c:cd:37:1c:d1:53:
         4b:dc:2d:72:ac:7a:0d:03:c9:5e:2a:d3:44:b4:78:a1:b1:7f:
         4e:d2:41:ad:85:40:78:4d:9f:79:67:fd:ba:0f:e4:96:20:6b:
         50:53:1a:ae:f5:9d:c9:c1:cb:f4:9b:45:30:30:20:e0:ab:fe:
         ac:10:3a:eb:e3:28:a3:a0:90:e9:d2:c8:57:ca:ad:ad:ca:9f:
         81:43:b2:8a:27:b5:18:50:e4:87:07:8c:6d:a9:1e:c9:42:4d:
         63:c4:2f:21
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUOHiI75nPFMBAzZeJH174FqZ3gRQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA0MDA0MDEwWhcNMjYxMTAyMjM1OTU5
WjB6MUkwRwYDVQQFE0BjNTJkMTY3ODJkMDM2ZjEyMDEwYjBhZDlhNzQ4YTFhNTY0
OWIxYTdhNWEzODM2NDc5NTkxNjUxMjVjMjFkMzAxMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC1IkSlMeDrFRQseTVhE5+MkeQYd5f1JiVvNJc+0AWkzRm7
MewXdhq/rFfy3bLlpoS8qsvSnuweEzDWTM+4lTV76kgo9OTEc1TD+LL+RVAO+mjC
TTriAQPHq9S86rft9BG/BCgPlEMjFqOzf9S5pVqsQt8J+3GS/KXRq9E+xLtxJpRx
Snny873Wp0C5cpcr6AlLzJkCw+3dcNk3oBora6+ZfvKyfv0FMrpuS9JSj+Qn7fjF
ftJOBIxpGxBSNj4xRr3z2kIT1koQA2qoIlziowz/JiS7GjzRpQELEJjcbPrdezUm
l5gUO4DAESWcn5xin15M38mJf8a3SEreDzpy95jvAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUZqLSPbhH68B67a8FsJAH/mYiBHAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzRhZGJkNGRiLTljNzctNDU2YS05YTM4LWFhZTFkZjgyYTE4YS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgMmAB8bQDANBgkqhkiG9w0BAQsFAAOCAQEAQ/3CWMHaagd/9UypA2gJMUrZ
+YhLoX3r0P/KAWwCpJWp7K5+GAhDTJSz3aMvYCfMSeKNeZ9HCgOw1tXNM+IToB/v
wkf+cJwv78pr+4OrZhdfdsb6vnZ0/KCsMJR9PrJIats18sgo06yxOVKsWK+DoOZz
9VxWaADD1/+1d6IlifiPo1uaTOjws3IocFrLupRMqZvvSMuRxbETHc7mbM03HNFT
S9wtcqx6DQPJXirTRLR4obF/TtJBrYVAeE2feWf9ug/kliBrUFMarvWdycHL9JtF
MDAg4Kv+rBA66+Moo6CQ6dLIV8qtrcqfgUOyiie1GFDkhweMbakeyUJNY8QvIQ==
-----END CERTIFICATE-----
Generated at Thu Sep 17 16:19:22 2026 by rpki-client