Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f7e4cefa-9a64-4050-bd83-928b5b755e0c.roa
File:                     f7e4cefa-9a64-4050-bd83-928b5b755e0c.roa (raw, json)
Hash identifier:          C7o0HM0A7bEXm8aXgarQ4h0AF2jhyzWdBrfj5j4Ch/Y=
Subject key identifier:   C7:69:A5:31:E8:56:EB:FC:D9:7B:42:65:25:6C:9A:30:EC:C4:40:8F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2812600EADBF923203F065980205F43D24B5CC30
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f7e4cefa-9a64-4050-bd83-928b5b755e0c.roa
Signing time:             Wed 05 Aug 2026 00:40:35 +0000
ROA not before:           Wed 05 Aug 2026 00:40:35 +0000
ROA not after:            Tue 03 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        69.0.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:12:60:0e:ad:bf:92:32:03:f0:65:98:02:05:f4:3d:24:b5:cc:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  5 00:40:35 2026 GMT
            Not After : Nov  3 23:59:59 2026 GMT
        Subject: serialNumber=008c0ad2c5d5a280cceb2e34a41b0c927ad110aed4c20e2e9739c64f734d8d48, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:a4:a8:59:ed:ce:80:52:a9:35:53:1d:ff:51:
                    7f:cd:3c:a5:c2:93:82:d0:42:41:88:49:be:7e:dd:
                    34:a6:96:97:05:1e:fe:5a:3f:d1:a5:46:48:cf:83:
                    0a:b8:b4:e4:ef:13:90:b9:30:b8:19:01:9c:23:30:
                    b9:c1:93:76:56:44:57:48:01:f7:c5:9b:c1:3e:d4:
                    99:14:9d:55:f7:9e:cc:b3:0a:0c:76:79:31:a6:eb:
                    19:76:b1:9b:dd:1f:77:d6:f6:ce:48:a7:28:3f:d5:
                    e0:48:f9:13:2d:ed:2f:16:8d:0c:02:a2:a0:63:44:
                    1c:b2:89:bb:74:e5:1d:54:5e:9e:e2:88:14:61:70:
                    b3:b7:81:85:21:b7:3d:2c:40:cb:16:90:ef:fb:46:
                    4b:42:ef:ab:63:93:59:4d:b3:b5:21:4b:07:15:37:
                    a7:64:f3:a2:84:49:c6:90:d9:8b:db:62:4b:08:17:
                    3e:b6:43:5b:dc:46:83:3c:f1:69:c8:a3:50:fc:e0:
                    fd:b6:a2:f4:f2:4c:60:45:b2:de:8e:27:cf:59:49:
                    4f:ca:52:ae:38:fd:19:ec:9f:63:fc:ab:4c:52:d3:
                    6c:ff:6a:1b:10:8d:a4:24:a0:9d:fd:f7:01:3d:78:
                    9d:86:6b:c7:e3:bb:a5:9d:6c:85:52:ba:0d:fa:71:
                    9c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:69:A5:31:E8:56:EB:FC:D9:7B:42:65:25:6C:9A:30:EC:C4:40:8F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f7e4cefa-9a64-4050-bd83-928b5b755e0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.0.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:3c:e0:73:07:47:b5:98:4e:fb:63:40:dd:83:3d:d9:a4:b5:
         2d:7c:cd:b8:c9:8e:d5:bb:23:e4:0a:d9:52:6b:80:68:19:6c:
         b9:08:62:f4:02:dc:dd:01:10:4c:a9:d3:87:85:bd:7f:05:3f:
         b5:ae:5d:be:2b:e8:c3:a0:27:59:f0:ef:ff:74:2c:60:38:9d:
         90:23:30:ab:e2:63:65:54:40:4d:01:eb:dc:20:b0:1a:af:ad:
         d3:62:54:47:01:ff:c8:0c:30:ec:a3:2b:32:7d:f3:00:52:09:
         80:d9:49:7a:17:0b:21:28:cc:22:a8:be:c4:71:4d:ff:b2:16:
         d1:9e:3e:4d:f3:82:86:59:df:1a:54:d9:34:81:eb:70:f6:49:
         5b:22:e0:11:0f:f8:74:1a:fc:84:39:75:3f:95:3b:59:5c:ac:
         ba:f3:50:2a:a9:c2:94:55:da:98:83:3d:cf:a4:f8:13:40:12:
         ef:b8:d6:37:47:8b:8e:3e:4c:75:40:be:43:7b:8f:8d:60:8c:
         8f:11:0b:e5:77:50:c0:7b:3f:be:e5:92:77:32:de:01:7d:d7:
         1d:7c:c9:2e:f9:8b:87:f3:49:56:62:38:60:73:8a:d7:5d:9e:
         e7:cb:9f:9a:24:96:75:52:a9:d1:fc:a3:2f:04:6e:80:4e:1b:
         cf:ee:67:77
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUKBJgDq2/kjID8GWYAgX0PSS1zDAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA1MDA0MDM1WhcNMjYxMTAzMjM1OTU5
WjB6MUkwRwYDVQQFE0AwMDhjMGFkMmM1ZDVhMjgwY2NlYjJlMzRhNDFiMGM5Mjdh
ZDExMGFlZDRjMjBlMmU5NzM5YzY0ZjczNGQ4ZDQ4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQD4pKhZ7c6AUqk1Ux3/UX/NPKXCk4LQQkGISb5+3TSmlpcF
Hv5aP9GlRkjPgwq4tOTvE5C5MLgZAZwjMLnBk3ZWRFdIAffFm8E+1JkUnVX3nsyz
Cgx2eTGm6xl2sZvdH3fW9s5Ipyg/1eBI+RMt7S8WjQwCoqBjRByyibt05R1UXp7i
iBRhcLO3gYUhtz0sQMsWkO/7RktC76tjk1lNs7UhSwcVN6dk86KEScaQ2YvbYksI
Fz62Q1vcRoM88WnIo1D84P22ovTyTGBFst6OJ89ZSU/KUq44/Rnsn2P8q0xS02z/
ahsQjaQkoJ399wE9eJ2Ga8fju6WdbIVSug36cZydAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUx2mlMehW6/zZe0JlJWyaMOzEQI8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2Y3ZTRjZWZhLTlhNjQtNDA1MC1iZDgzLTkyOGI1Yjc1NWUwYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABFAPIwDQYJKoZIhvcNAQELBQADggEBAEU84HMHR7WYTvtjQN2DPdmktS18
zbjJjtW7I+QK2VJrgGgZbLkIYvQC3N0BEEyp04eFvX8FP7WuXb4r6MOgJ1nw7/90
LGA4nZAjMKviY2VUQE0B69wgsBqvrdNiVEcB/8gMMOyjKzJ98wBSCYDZSXoXCyEo
zCKovsRxTf+yFtGePk3zgoZZ3xpU2TSB63D2SVsi4BEP+HQa/IQ5dT+VO1lcrLrz
UCqpwpRV2piDPc+k+BNAEu+41jdHi44+THVAvkN7j41gjI8RC+V3UMB7P77lkncy
3gF91x18yS75i4fzSVZiOGBzitddnufLn5oklnVSqdH8oy8EboBOG8/uZ3c=
-----END CERTIFICATE-----
Generated at Tue Sep 15 14:09:11 2026 by rpki-client