Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ecc3df1-ecf6-4f08-bedf-5f4f9b00a9a9.roa
File:                     9ecc3df1-ecf6-4f08-bedf-5f4f9b00a9a9.roa (raw, json)
Hash identifier:          jzPMj6/Nu3tvPL6UG6mantN3cviScgxvio3eHlHa4zk=
Subject key identifier:   B2:51:B5:3E:CA:21:B3:FD:8E:F9:97:E5:14:62:DF:05:A4:6F:8C:18
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       013FA9B0863BE05EFE7DCEDDE4B46AC4457F6831
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ecc3df1-ecf6-4f08-bedf-5f4f9b00a9a9.roa
Signing time:             Sat 30 Aug 2025 00:11:20 +0000
ROA not before:           Sat 30 Aug 2025 00:11:20 +0000
ROA not after:            Sat 04 Oct 2025 23:59:59 +0000
asID:                     26982
IP address blocks:        192.31.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:3f:a9:b0:86:3b:e0:5e:fe:7d:ce:dd:e4:b4:6a:c4:45:7f:68:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 30 00:11:20 2025 GMT
            Not After : Oct  4 23:59:59 2025 GMT
        Subject: serialNumber=fd5e87886fa803af14773d77bbfd1c7feedaa183fb22a8fd8388405c13cc2019, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:7c:ad:87:fd:ae:44:f3:51:e0:82:cb:2a:fa:
                    9b:51:8a:a1:84:e3:41:73:cd:bc:e1:50:1f:77:cd:
                    87:99:9c:5b:6a:5a:4c:0d:21:38:4b:4d:3d:8d:cb:
                    43:65:12:31:80:11:35:8d:30:80:b0:da:72:01:ba:
                    03:61:72:3c:1d:11:ee:6f:17:40:5d:08:85:89:56:
                    1a:b7:7d:41:06:bc:d6:b6:4b:ac:a9:51:c3:c4:51:
                    d7:15:6c:e4:f4:85:f3:a8:68:b7:9e:d0:c2:b2:49:
                    3f:2b:8f:51:0a:e3:93:3e:67:1c:bf:99:10:17:a9:
                    6d:d9:68:02:81:f3:a9:c5:b3:1e:74:59:d5:7b:18:
                    b0:5f:54:42:be:c5:9d:5d:42:32:a3:a2:7f:7b:ed:
                    09:df:13:9c:17:2d:31:da:89:94:a8:f0:67:f2:6a:
                    4c:71:b8:6a:0e:7b:44:43:54:f3:da:ad:27:1c:14:
                    e1:34:a9:00:52:75:19:91:45:d5:28:71:b6:1b:0e:
                    6e:ff:b7:c2:ff:53:fe:5c:9f:61:8b:b7:30:3e:d6:
                    bd:14:ea:8e:e6:e2:50:07:45:03:a1:10:b6:8c:79:
                    60:a4:11:8e:55:c9:1d:c1:0a:cb:4d:e5:a4:e3:26:
                    a5:29:c8:e1:8c:fe:b6:f7:8c:a2:ef:18:09:9b:e0:
                    d4:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:51:B5:3E:CA:21:B3:FD:8E:F9:97:E5:14:62:DF:05:A4:6F:8C:18
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ecc3df1-ecf6-4f08-bedf-5f4f9b00a9a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.31.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:9d:d2:cb:5c:c2:27:d2:7f:da:be:ed:f2:bc:04:f9:b8:d5:
         6b:28:a2:a0:8d:99:8c:bd:43:42:9c:41:52:16:f4:e3:1b:b4:
         4c:61:31:d9:fd:bf:4b:e4:52:f6:de:17:21:6d:6d:e9:34:16:
         f8:0c:02:32:f7:e6:33:88:47:ce:44:a5:0c:c6:f1:ac:7e:4e:
         64:b5:88:43:f3:ac:61:61:68:7c:85:2d:60:5e:9e:38:e3:3b:
         18:78:64:6a:56:1e:35:4d:ae:5f:81:11:d8:74:62:c7:9d:b8:
         a0:1f:a1:0e:bf:45:8f:5e:a9:27:8d:7b:7b:3f:db:bc:5c:d0:
         dd:78:83:78:9c:a2:72:a6:bb:a3:4f:62:5a:e6:3f:11:dc:0c:
         02:48:b1:58:24:c3:c4:25:47:7a:bb:f0:98:5c:24:b5:43:a1:
         fa:83:35:9c:13:93:ce:e2:03:e3:fd:12:4c:9c:ee:68:20:5e:
         84:1e:da:a4:ba:32:ed:d1:e1:99:3d:ae:c5:05:fa:b1:19:08:
         59:da:bb:98:36:96:11:44:b2:f9:2b:0a:44:2b:40:10:4a:da:
         e0:48:d6:87:cc:a4:73:bb:f1:ca:64:b7:b8:23:90:0e:b4:c4:
         61:0b:7e:a2:6b:08:41:e9:b1:87:88:0f:fe:23:6b:6a:00:29:
         b9:77:f6:ed
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUAT+psIY74F7+fc7d5LRqxEV/aDEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODMwMDAxMTIwWhcNMjUxMDA0MjM1OTU5
WjB6MUkwRwYDVQQFE0BmZDVlODc4ODZmYTgwM2FmMTQ3NzNkNzdiYmZkMWM3ZmVl
ZGFhMTgzZmIyMmE4ZmQ4Mzg4NDA1YzEzY2MyMDE5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCWfK2H/a5E81Hggssq+ptRiqGE40FzzbzhUB93zYeZnFtq
WkwNIThLTT2Ny0NlEjGAETWNMICw2nIBugNhcjwdEe5vF0BdCIWJVhq3fUEGvNa2
S6ypUcPEUdcVbOT0hfOoaLee0MKyST8rj1EK45M+Zxy/mRAXqW3ZaAKB86nFsx50
WdV7GLBfVEK+xZ1dQjKjon977QnfE5wXLTHaiZSo8GfyakxxuGoOe0RDVPParScc
FOE0qQBSdRmRRdUocbYbDm7/t8L/U/5cn2GLtzA+1r0U6o7m4lAHRQOhELaMeWCk
EY5VyR3BCstN5aTjJqUpyOGM/rb3jKLvGAmb4NQfAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUslG1Psohs/2O+ZflFGLfBaRvjBgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzllY2MzZGYxLWVjZjYtNGYwOC1iZWRmLTVmNGY5YjAwYTlhOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADAH9UwDQYJKoZIhvcNAQELBQADggEBAKed0stcwifSf9q+7fK8BPm41Wso
oqCNmYy9Q0KcQVIW9OMbtExhMdn9v0vkUvbeFyFtbek0FvgMAjL35jOIR85EpQzG
8ax+TmS1iEPzrGFhaHyFLWBenjjjOxh4ZGpWHjVNrl+BEdh0YseduKAfoQ6/RY9e
qSeNe3s/27xc0N14g3iconKmu6NPYlrmPxHcDAJIsVgkw8QlR3q78JhcJLVDofqD
NZwTk87iA+P9Ekyc7mggXoQe2qS6Mu3R4Zk9rsUF+rEZCFnau5g2lhFEsvkrCkQr
QBBK2uBI1ofMpHO78cpkt7gjkA60xGELfqJrCEHpsYeID/4ja2oAKbl39u0=
-----END CERTIFICATE-----
Generated at Sat Sep 6 14:18:50 2025 by rpki-client