Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb0b4163-ebcd-451a-a878-229c70d7c9df.roa
File:                     cb0b4163-ebcd-451a-a878-229c70d7c9df.roa (raw, json)
Hash identifier:          bqN5bTiaYpzofBLdR66t1BT/ACF12A2LLXxl9elvFvo=
Subject key identifier:   98:86:CC:95:1D:53:47:AC:A7:8B:F8:5C:CE:3C:B8:9C:8E:CC:4F:2A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       72FCA30DC61109532D73F71713A28C26503ACD83
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb0b4163-ebcd-451a-a878-229c70d7c9df.roa
Signing time:             Tue 11 Aug 2026 20:17:57 +0000
ROA not before:           Tue 11 Aug 2026 20:17:57 +0000
ROA not after:            Mon 09 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        99.200.0.0/13 maxlen: 13
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:fc:a3:0d:c6:11:09:53:2d:73:f7:17:13:a2:8c:26:50:3a:cd:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 11 20:17:57 2026 GMT
            Not After : Nov  9 23:59:59 2026 GMT
        Subject: serialNumber=823d3d04bbb626453fa46447969f23f80cd6e6ea59d620e55f23bd8c18262007, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6a:e0:88:c9:0d:40:c3:0e:d8:fa:cb:46:68:
                    8b:4f:b7:db:42:39:84:b7:de:b1:bc:b9:e5:8f:06:
                    b6:0a:ee:4c:ae:17:61:51:43:14:31:6e:77:96:af:
                    f2:41:f8:17:11:99:20:22:f4:52:51:ef:28:7a:58:
                    00:5e:a1:ab:50:25:51:0a:c6:c9:e1:7a:f7:21:f2:
                    ab:84:d7:96:41:39:1d:55:ec:45:0f:bd:f1:56:fc:
                    ad:a0:f2:89:9f:99:f0:8a:3b:a9:b8:43:15:f6:04:
                    40:70:22:6d:65:5c:c6:78:c1:f3:c5:97:e3:d7:44:
                    62:c9:89:11:70:37:8e:95:8b:6d:75:60:45:c1:44:
                    2f:35:31:f9:29:29:c6:bc:12:fa:33:40:1b:6d:e9:
                    ed:b1:3e:2c:57:5a:b1:d2:a4:28:58:bc:39:4a:84:
                    9b:28:0e:28:3e:53:42:b3:46:ee:c7:bb:ef:0f:1e:
                    33:8e:fa:3b:ef:32:60:7d:75:c5:04:be:34:a6:56:
                    6c:2e:dd:21:16:2f:2a:ee:29:50:74:c1:a7:11:ce:
                    e8:2d:28:16:95:f5:f9:64:a0:47:ba:b0:db:71:13:
                    e6:38:9a:b0:fa:17:a2:ab:60:2b:42:30:df:72:41:
                    37:dd:35:2b:b4:10:fe:99:d8:79:8a:8d:54:f0:ee:
                    1d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:86:CC:95:1D:53:47:AC:A7:8B:F8:5C:CE:3C:B8:9C:8E:CC:4F:2A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb0b4163-ebcd-451a-a878-229c70d7c9df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.200.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         49:01:36:7a:d7:e7:38:d4:28:dd:ec:64:25:26:b8:36:f2:38:
         fb:8c:c5:3e:a6:f7:0b:9d:4b:48:13:00:91:db:e6:bb:b7:9c:
         c6:99:d9:a5:8a:26:9d:83:38:ea:d7:0b:24:3e:1e:cc:a4:a5:
         d4:51:e9:5f:b2:04:a6:99:b3:31:7e:df:1c:69:2e:53:88:98:
         f9:ce:b5:76:f9:80:ea:d6:00:8a:b3:5a:18:7e:25:14:5d:1e:
         e0:82:e9:88:d3:10:86:73:f5:ce:31:4c:25:69:f7:7b:d5:fc:
         2d:96:b6:78:17:3c:b8:d1:67:d5:fe:78:37:a7:d6:2d:c4:04:
         3e:5c:83:f8:87:1e:cd:6f:78:6b:87:88:d5:7e:58:81:6a:10:
         e5:0c:07:74:3e:37:2f:f2:97:fe:4b:14:83:10:48:84:f9:5b:
         14:2c:ab:47:a4:9a:55:70:32:1a:73:d8:4f:f5:ba:6f:b9:8b:
         3b:dc:6c:be:17:4d:ae:6d:46:1e:8f:e9:d0:cc:6f:45:a5:71:
         ae:0c:2c:54:2c:9e:16:eb:43:c5:c8:74:f3:e9:91:d3:4f:61:
         1d:79:3a:85:25:c7:75:51:b1:78:fa:84:b6:54:54:b9:31:0e:
         97:7e:87:64:87:d8:a1:19:72:36:5e:dc:49:f0:48:da:e9:b6:
         ad:be:47:0b
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUcvyjDcYRCVMtc/cXE6KMJlA6zYMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODExMjAxNzU3WhcNMjYxMTA5MjM1OTU5
WjB6MUkwRwYDVQQFE0A4MjNkM2QwNGJiYjYyNjQ1M2ZhNDY0NDc5NjlmMjNmODBj
ZDZlNmVhNTlkNjIwZTU1ZjIzYmQ4YzE4MjYyMDA3MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDMauCIyQ1Aww7Y+stGaItPt9tCOYS33rG8ueWPBrYK7kyu
F2FRQxQxbneWr/JB+BcRmSAi9FJR7yh6WABeoatQJVEKxsnhevch8quE15ZBOR1V
7EUPvfFW/K2g8omfmfCKO6m4QxX2BEBwIm1lXMZ4wfPFl+PXRGLJiRFwN46Vi211
YEXBRC81MfkpKca8EvozQBtt6e2xPixXWrHSpChYvDlKhJsoDig+U0KzRu7Hu+8P
HjOO+jvvMmB9dcUEvjSmVmwu3SEWLyruKVB0wacRzugtKBaV9flkoEe6sNtxE+Y4
mrD6F6KrYCtCMN9yQTfdNSu0EP6Z2HmKjVTw7h3ZAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUmIbMlR1TR6yni/hczjy4nI7MTyowHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2NiMGI0MTYzLWViY2QtNDUxYS1hODc4LTIyOWM3MGQ3YzlkZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwNjyDANBgkqhkiG9w0BAQsFAAOCAQEASQE2etfnONQo3exkJSa4NvI4+4zF
Pqb3C51LSBMAkdvmu7ecxpnZpYomnYM46tcLJD4ezKSl1FHpX7IEppmzMX7fHGku
U4iY+c61dvmA6tYAirNaGH4lFF0e4ILpiNMQhnP1zjFMJWn3e9X8LZa2eBc8uNFn
1f54N6fWLcQEPlyD+IcezW94a4eI1X5YgWoQ5QwHdD43L/KX/ksUgxBIhPlbFCyr
R6SaVXAyGnPYT/W6b7mLO9xsvhdNrm1GHo/p0MxvRaVxrgwsVCyeFutDxch08+mR
009hHXk6hSXHdVGxePqEtlRUuTEOl36HZIfYoRlyNl7cSfBI2um2rb5HCw==
-----END CERTIFICATE-----
Generated at Tue Sep 15 13:54:25 2026 by rpki-client