Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/73f7f69b-bb29-4953-a203-0837e4810e45.roa
File:                     73f7f69b-bb29-4953-a203-0837e4810e45.roa (raw, json)
Hash identifier:          OJ8+Bs1rtrDXVI1uZnq0mI2Z9GwFYKDRV4gjIC1IAZo=
Subject key identifier:   E7:0B:AF:BD:4E:F0:3F:BB:CD:D7:E7:70:F8:5C:E8:7C:4F:B1:3E:3D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       148C8010E3E5A519A52E8C911591431E6F5F1EE6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/73f7f69b-bb29-4953-a203-0837e4810e45.roa
Signing time:             Fri 31 Jul 2026 01:10:51 +0000
ROA not before:           Fri 31 Jul 2026 01:10:51 +0000
ROA not after:            Thu 29 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        1.178.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:8c:80:10:e3:e5:a5:19:a5:2e:8c:91:15:91:43:1e:6f:5f:1e:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 31 01:10:51 2026 GMT
            Not After : Oct 29 23:59:59 2026 GMT
        Subject: serialNumber=00222594e1b682de929d0ea832353d2e6145e430f8d60c3eeaf4a4ab63531189, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9f:c3:29:72:c0:5e:bc:fc:4c:9e:eb:9b:65:
                    85:2a:7e:6f:d2:4f:a2:cd:77:a4:80:69:1b:2c:b0:
                    9e:70:a2:2c:44:35:9c:60:2b:2a:6f:e7:c4:71:88:
                    ad:85:cb:01:eb:e3:ce:26:49:9f:c2:39:ee:37:44:
                    37:d7:7b:8b:ea:0c:35:03:c8:32:4f:71:73:1f:f8:
                    80:81:33:6c:cf:d8:50:11:f2:eb:8d:4f:7f:02:9d:
                    42:63:25:7f:47:da:72:2e:91:bb:fd:da:db:34:87:
                    6a:54:95:d7:29:96:9b:91:6d:0b:3f:51:51:be:34:
                    fd:78:6f:c5:59:a7:1e:12:80:6d:32:03:7f:b6:d7:
                    e1:c9:84:ab:8c:df:9f:cc:27:fe:d9:2f:5d:82:90:
                    d6:42:b8:07:ef:78:62:31:5c:a8:57:22:33:22:5c:
                    cb:eb:47:da:f6:84:a3:3e:df:ef:45:37:ae:05:43:
                    01:13:2b:6b:3c:36:61:24:a4:e8:80:c5:5c:01:eb:
                    f2:31:b5:4b:61:f8:94:09:fc:93:79:51:99:25:20:
                    9d:64:90:34:09:c8:82:bc:2e:fa:20:7b:cb:f9:ec:
                    d3:14:a8:8c:e1:59:da:60:fe:09:0c:ae:4f:ca:f8:
                    63:0f:8b:b6:ee:2e:0f:72:bc:02:ec:45:82:a6:10:
                    4d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:0B:AF:BD:4E:F0:3F:BB:CD:D7:E7:70:F8:5C:E8:7C:4F:B1:3E:3D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/73f7f69b-bb29-4953-a203-0837e4810e45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.178.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:4d:79:5c:28:52:a9:6d:6f:61:7d:2d:3b:56:85:3c:61:33:
         6e:6d:6d:45:da:ef:da:8a:bc:39:f8:59:c8:bb:5a:ae:4f:70:
         76:c2:e9:51:ad:40:4b:2f:7d:cc:41:04:a5:41:2e:28:82:88:
         26:8a:1a:6d:bb:af:e3:a1:b7:d6:d7:15:98:f0:a3:3f:8e:52:
         fc:ff:31:3f:cb:00:a1:37:09:0b:89:8b:30:11:37:e5:a4:34:
         e5:0b:38:4a:22:d4:d2:5d:99:1d:b4:0b:67:51:5f:51:80:ec:
         75:da:65:b2:f6:f7:fb:23:45:d5:5a:0f:8e:dd:d6:b9:fa:a4:
         ab:29:c7:3c:e9:3d:22:1f:85:6d:9a:b4:45:7d:c9:9c:f6:c7:
         32:ce:55:5c:c9:ba:d2:7c:65:19:8e:15:92:ab:f8:f8:76:53:
         5b:50:82:22:74:be:95:5f:ad:4b:fb:a4:28:b8:d3:ec:a6:28:
         ec:83:6d:65:9a:4a:2d:38:22:22:48:7d:6f:21:d5:7a:11:79:
         a2:c6:e9:e7:d5:2c:66:48:a5:0a:7f:9f:f2:36:90:1b:de:5c:
         d3:76:13:98:d3:0a:5c:8c:92:0c:42:44:ac:4e:0e:4a:6a:e6:
         ec:98:b0:f4:47:1d:0d:c2:25:33:cb:c8:91:62:3a:9c:31:2e:
         67:d3:d2:1c
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUFIyAEOPlpRmlLoyRFZFDHm9fHuYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzMxMDExMDUxWhcNMjYxMDI5MjM1OTU5
WjB6MUkwRwYDVQQFE0AwMDIyMjU5NGUxYjY4MmRlOTI5ZDBlYTgzMjM1M2QyZTYx
NDVlNDMwZjhkNjBjM2VlYWY0YTRhYjYzNTMxMTg5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCqn8MpcsBevPxMnuubZYUqfm/ST6LNd6SAaRsssJ5woixE
NZxgKypv58RxiK2FywHr484mSZ/COe43RDfXe4vqDDUDyDJPcXMf+ICBM2zP2FAR
8uuNT38CnUJjJX9H2nIukbv92ts0h2pUldcplpuRbQs/UVG+NP14b8VZpx4SgG0y
A3+21+HJhKuM35/MJ/7ZL12CkNZCuAfveGIxXKhXIjMiXMvrR9r2hKM+3+9FN64F
QwETK2s8NmEkpOiAxVwB6/IxtUth+JQJ/JN5UZklIJ1kkDQJyIK8Lvoge8v57NMU
qIzhWdpg/gkMrk/K+GMPi7buLg9yvALsRYKmEE3hAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU5wuvvU7wP7vN1+dw+FzofE+xPj0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzczZjdmNjliLWJiMjktNDk1My1hMjAzLTA4MzdlNDgxMGU0NS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIBsrQwDQYJKoZIhvcNAQELBQADggEBABtNeVwoUqltb2F9LTtWhTxhM25t
bUXa79qKvDn4Wci7Wq5PcHbC6VGtQEsvfcxBBKVBLiiCiCaKGm27r+Oht9bXFZjw
oz+OUvz/MT/LAKE3CQuJizARN+WkNOULOEoi1NJdmR20C2dRX1GA7HXaZbL29/sj
RdVaD47d1rn6pKspxzzpPSIfhW2atEV9yZz2xzLOVVzJutJ8ZRmOFZKr+Ph2U1tQ
giJ0vpVfrUv7pCi40+ymKOyDbWWaSi04IiJIfW8h1XoReaLG6efVLGZIpQp/n/I2
kBveXNN2E5jTClyMkgxCRKxODkpq5uyYsPRHHQ3CJTPLyJFiOpwxLmfT0hw=
-----END CERTIFICATE-----
Generated at Tue Sep 15 13:23:07 2026 by rpki-client