Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/940d4db1-8435-4b14-9f65-40384956f3cf.roa
File:                     940d4db1-8435-4b14-9f65-40384956f3cf.roa (raw, json)
Hash identifier:          AE+W9RylpyqH44S0yceexoRy/JQwjB8BFi7Pu9tLAfI=
Subject key identifier:   C3:FF:6D:68:E9:AD:04:2F:0C:54:DE:F9:9E:66:20:A6:16:D4:98:0E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       640EC2189DC96A145533EE631CA1F2C9255F3571
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/940d4db1-8435-4b14-9f65-40384956f3cf.roa
Signing time:             Sat 08 Aug 2026 00:11:19 +0000
ROA not before:           Sat 08 Aug 2026 00:11:19 +0000
ROA not after:            Fri 06 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        35.51.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:0e:c2:18:9d:c9:6a:14:55:33:ee:63:1c:a1:f2:c9:25:5f:35:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  8 00:11:19 2026 GMT
            Not After : Nov  6 23:59:59 2026 GMT
        Subject: serialNumber=69917005d723475fe8bdc136795147ab2fce20779fbce9e1d99d191200e09c95, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:5a:cd:34:60:4e:a8:94:e6:b6:85:73:93:ea:
                    b8:b4:30:56:74:2a:d7:04:5e:4c:c7:50:f3:fa:65:
                    04:b5:71:53:21:5f:07:71:87:95:38:b4:a4:8d:e8:
                    ca:93:91:cd:50:e7:d5:21:6b:3c:89:3a:66:be:9f:
                    c7:40:2a:b1:7a:af:fd:02:0a:33:01:a5:6a:dc:e1:
                    06:a6:71:1b:be:c0:06:29:d3:7d:37:36:03:69:a4:
                    48:cf:04:3a:b2:f0:53:96:61:57:d6:3d:c5:af:2f:
                    d3:8c:f1:d0:18:1a:2c:64:93:42:63:2e:de:d5:80:
                    8a:c8:f5:94:7f:49:9c:25:b2:47:69:cd:95:10:0a:
                    cf:ed:ea:52:40:44:dc:fb:15:ba:d3:60:5e:c1:31:
                    c8:c3:b0:37:dc:a2:76:93:d1:09:20:6f:4c:1e:56:
                    cd:d6:6d:f6:67:a5:53:99:0d:86:42:08:d5:fe:16:
                    7f:47:7c:df:10:3e:f0:e5:e4:5e:b3:aa:a3:34:1b:
                    62:ea:d7:82:f2:3e:f0:3f:7e:0d:6f:6b:f8:58:36:
                    b1:6c:74:85:5d:4d:c3:09:25:6d:9b:04:ce:01:1f:
                    e8:ca:25:06:f3:91:4a:12:df:40:06:b6:0a:f0:7e:
                    02:fa:1a:ab:c3:68:54:02:93:50:9b:ba:61:82:d3:
                    1f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:FF:6D:68:E9:AD:04:2F:0C:54:DE:F9:9E:66:20:A6:16:D4:98:0E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/940d4db1-8435-4b14-9f65-40384956f3cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.51.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6d:61:b5:99:51:4a:29:9f:54:fd:b9:77:c7:6e:bf:62:7b:99:
         f1:77:78:e5:d5:24:fe:f3:60:b7:09:9f:be:94:ca:53:7d:a8:
         29:c2:36:97:5f:0c:2b:1e:12:20:28:09:08:c9:41:46:f3:5e:
         4a:18:d7:b8:bd:04:1b:45:c7:31:b8:a7:e4:c2:28:04:38:c1:
         8c:82:bc:57:8a:a4:cd:71:ec:e0:e6:3f:0b:4e:47:eb:25:48:
         9a:de:f0:17:92:cd:b2:da:d4:a4:29:1d:eb:f2:06:2e:d8:df:
         3b:01:87:5c:6b:6e:d3:72:b1:12:8a:9e:1c:24:1a:b3:1f:2d:
         5b:90:33:6f:a2:a5:0d:07:c8:52:9e:7e:6d:6f:6e:04:41:99:
         a3:c5:6e:4c:71:7e:87:85:e0:5a:dc:9c:d1:69:f6:79:ed:27:
         27:95:b5:00:3e:2c:a2:69:21:28:3f:62:d4:74:e2:2b:1f:04:
         a6:9b:e7:a7:78:c9:d9:31:26:61:6c:ef:32:95:57:41:6c:27:
         d9:4b:d4:6a:ed:86:d1:20:a6:b1:58:ef:3a:c8:73:3d:67:5d:
         b0:49:4d:04:a2:4f:00:f1:79:ab:40:9f:d5:84:ea:57:6b:14:
         0f:23:70:79:64:fb:c7:64:ad:eb:c4:e5:05:7b:a7:77:6c:f2:
         7f:b3:6f:a7
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUZA7CGJ3JahRVM+5jHKHyySVfNXEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA4MDAxMTE5WhcNMjYxMTA2MjM1OTU5
WjB6MUkwRwYDVQQFE0A2OTkxNzAwNWQ3MjM0NzVmZThiZGMxMzY3OTUxNDdhYjJm
Y2UyMDc3OWZiY2U5ZTFkOTlkMTkxMjAwZTA5Yzk1MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCZWs00YE6olOa2hXOT6ri0MFZ0KtcEXkzHUPP6ZQS1cVMh
Xwdxh5U4tKSN6MqTkc1Q59UhazyJOma+n8dAKrF6r/0CCjMBpWrc4QamcRu+wAYp
0303NgNppEjPBDqy8FOWYVfWPcWvL9OM8dAYGixkk0JjLt7VgIrI9ZR/SZwlskdp
zZUQCs/t6lJARNz7FbrTYF7BMcjDsDfconaT0Qkgb0weVs3WbfZnpVOZDYZCCNX+
Fn9HfN8QPvDl5F6zqqM0G2Lq14LyPvA/fg1va/hYNrFsdIVdTcMJJW2bBM4BH+jK
JQbzkUoS30AGtgrwfgL6GqvDaFQCk1CbumGC0x85AgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUw/9taOmtBC8MVN75nmYgphbUmA4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzk0MGQ0ZGIxLTg0MzUtNGIxNC05ZjY1LTQwMzg0OTU2ZjNjZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAjMzANBgkqhkiG9w0BAQsFAAOCAQEAbWG1mVFKKZ9U/bl3x26/YnuZ8Xd4
5dUk/vNgtwmfvpTKU32oKcI2l18MKx4SICgJCMlBRvNeShjXuL0EG0XHMbin5MIo
BDjBjIK8V4qkzXHs4OY/C05H6yVImt7wF5LNstrUpCkd6/IGLtjfOwGHXGtu03Kx
EoqeHCQasx8tW5Azb6KlDQfIUp5+bW9uBEGZo8VuTHF+h4XgWtyc0Wn2ee0nJ5W1
AD4somkhKD9i1HTiKx8Eppvnp3jJ2TEmYWzvMpVXQWwn2UvUau2G0SCmsVjvOshz
PWddsElNBKJPAPF5q0Cf1YTqV2sUDyNweWT7x2St68TlBXund2zyf7Nvpw==
-----END CERTIFICATE-----
Generated at Thu Sep 17 17:09:09 2026 by rpki-client