Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e5dee519-69aa-4bf0-bdb1-4bfe160bae08.roa
File:                     e5dee519-69aa-4bf0-bdb1-4bfe160bae08.roa (raw, json)
Hash identifier:          oWXemtdNhiShsvWSo22uIp/cq0x9VdCjz6DE7ZATlxg=
Subject key identifier:   00:2B:7B:E1:3A:03:A8:24:BB:26:59:DC:61:F5:B9:13:C4:FD:F6:59
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3BA377A4B50CA38A9BB1162805532B93C60436D0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e5dee519-69aa-4bf0-bdb1-4bfe160bae08.roa
Signing time:             Sat 25 Jul 2026 00:11:21 +0000
ROA not before:           Sat 25 Jul 2026 00:11:21 +0000
ROA not after:            Fri 23 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        99.150.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:a3:77:a4:b5:0c:a3:8a:9b:b1:16:28:05:53:2b:93:c6:04:36:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 25 00:11:21 2026 GMT
            Not After : Oct 23 23:59:59 2026 GMT
        Subject: serialNumber=2cc08eec863e510859500d1e7109e35b3fdd5b81ceb72651bdb6e03bc783e683, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4d:f3:bb:30:66:2d:76:0a:5b:c9:f9:75:f8:
                    16:af:53:94:95:82:b7:e8:ad:8b:4c:32:94:ba:db:
                    05:b0:9c:21:4c:38:54:c5:46:3c:ff:91:31:fc:2d:
                    ad:f3:57:a5:a7:79:3d:43:ab:2b:9f:f7:7c:88:88:
                    94:14:8f:77:55:c2:71:e8:69:66:b8:b6:e3:7d:5e:
                    a9:59:8a:94:6d:59:4b:05:d4:b8:79:30:c0:24:9d:
                    6c:73:2c:80:fd:5e:0f:0a:6c:c0:0d:bb:b0:8a:a2:
                    27:02:74:4d:1a:05:c5:eb:21:d9:9f:7a:fc:d8:2b:
                    c5:22:73:1f:ab:5f:eb:fc:ae:3f:97:61:11:61:fa:
                    4a:4a:c3:e8:7c:07:b9:71:fa:fb:7a:9d:2e:9a:6a:
                    82:9a:40:83:49:86:e4:1c:80:b1:87:c3:88:da:27:
                    ff:e5:49:2a:6e:85:61:c0:df:79:ee:7d:3d:c3:d0:
                    dd:8b:3c:7f:a2:d6:92:e2:49:86:f6:f0:2b:42:ff:
                    a9:0e:e0:93:f8:67:bb:be:b1:21:fc:b4:81:4d:1a:
                    f0:f8:82:fd:53:e4:22:cf:b4:92:53:eb:d9:23:20:
                    30:70:b3:ff:1e:a8:56:0e:f4:c0:9f:42:cc:00:48:
                    35:20:d0:29:e6:e3:66:dc:7e:e6:79:47:4d:92:b1:
                    68:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:2B:7B:E1:3A:03:A8:24:BB:26:59:DC:61:F5:B9:13:C4:FD:F6:59
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e5dee519-69aa-4bf0-bdb1-4bfe160bae08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.150.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:fa:b6:23:e2:11:78:53:e8:9e:a4:13:b4:97:7a:8a:a4:45:
         20:66:33:8f:ac:31:84:79:af:7a:a8:88:f7:b3:9f:45:3b:45:
         0d:40:6d:54:6d:7e:5d:a8:e9:ef:6c:3c:d6:68:6b:62:a5:9f:
         75:93:ed:c7:51:3c:4c:01:1e:0e:3d:71:79:2a:25:35:87:0c:
         93:17:34:b0:7d:b7:4c:0f:13:b0:92:87:e5:c2:da:b6:8d:87:
         24:9b:f6:66:88:d2:58:0b:98:85:db:08:78:b0:57:5b:a8:e9:
         e3:8a:0b:36:68:9b:89:60:1c:c3:4a:4f:e8:1f:23:3c:01:21:
         69:d1:23:ea:69:0f:14:d9:5a:62:2d:db:14:21:ab:97:56:7a:
         4f:71:cc:0e:65:3f:df:ec:07:f1:a5:93:10:57:c0:00:16:3f:
         15:89:58:f0:94:5b:75:ef:76:c2:bd:a7:4d:e6:44:b1:ad:6e:
         69:fb:80:b7:79:df:8e:20:94:d4:d0:c0:25:e9:e6:6d:97:0d:
         8e:5b:e7:37:fd:05:3d:0e:23:0c:c0:f4:b6:db:99:05:87:77:
         94:4c:86:74:86:53:26:b0:65:60:12:fd:f8:ff:7c:f5:c8:07:
         66:c5:39:1c:73:24:f7:2c:f5:88:3e:52:e0:42:a1:a6:35:3b:
         f4:7a:ec:bc
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUO6N3pLUMo4qbsRYoBVMrk8YENtAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzI1MDAxMTIxWhcNMjYxMDIzMjM1OTU5
WjB6MUkwRwYDVQQFE0AyY2MwOGVlYzg2M2U1MTA4NTk1MDBkMWU3MTA5ZTM1YjNm
ZGQ1YjgxY2ViNzI2NTFiZGI2ZTAzYmM3ODNlNjgzMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC6TfO7MGYtdgpbyfl1+BavU5SVgrforYtMMpS62wWwnCFM
OFTFRjz/kTH8La3zV6WneT1Dqyuf93yIiJQUj3dVwnHoaWa4tuN9XqlZipRtWUsF
1Lh5MMAknWxzLID9Xg8KbMANu7CKoicCdE0aBcXrIdmfevzYK8Uicx+rX+v8rj+X
YRFh+kpKw+h8B7lx+vt6nS6aaoKaQINJhuQcgLGHw4jaJ//lSSpuhWHA33nufT3D
0N2LPH+i1pLiSYb28CtC/6kO4JP4Z7u+sSH8tIFNGvD4gv1T5CLPtJJT69kjIDBw
s/8eqFYO9MCfQswASDUg0Cnm42bcfuZ5R02SsWhnAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUACt74ToDqCS7JlncYfW5E8T99lkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2U1ZGVlNTE5LTY5YWEtNGJmMC1iZGIxLTRiZmUxNjBiYWUwOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAJjlggwDQYJKoZIhvcNAQELBQADggEBAGH6tiPiEXhT6J6kE7SXeoqkRSBm
M4+sMYR5r3qoiPezn0U7RQ1AbVRtfl2o6e9sPNZoa2Kln3WT7cdRPEwBHg49cXkq
JTWHDJMXNLB9t0wPE7CSh+XC2raNhySb9maI0lgLmIXbCHiwV1uo6eOKCzZom4lg
HMNKT+gfIzwBIWnRI+ppDxTZWmIt2xQhq5dWek9xzA5lP9/sB/GlkxBXwAAWPxWJ
WPCUW3XvdsK9p03mRLGtbmn7gLd5344glNTQwCXp5m2XDY5b5zf9BT0OIwzA9Lbb
mQWHd5RMhnSGUyawZWAS/fj/fPXIB2bFORxzJPcs9Yg+UuBCoaY1O/R67Lw=
-----END CERTIFICATE-----
Generated at Tue Sep 15 13:19:45 2026 by rpki-client