Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe4dae27-bd0b-4693-9fd3-05309ef5d4ee.roa
File:                     fe4dae27-bd0b-4693-9fd3-05309ef5d4ee.roa (raw, json)
Hash identifier:          ymncFZ5ft4EHMP5XzMa/zY4OH0hQMEZePWN4GNGNyNc=
Subject key identifier:   05:88:EC:5C:67:15:B8:EB:A1:6E:5C:C1:61:5F:B9:D9:FF:BA:9A:7C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       646D18DB98D5FD1B7DE8E71EC8B3623E2D6648F5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe4dae27-bd0b-4693-9fd3-05309ef5d4ee.roa
Signing time:             Fri 05 Sep 2025 00:11:48 +0000
ROA not before:           Fri 05 Sep 2025 00:11:48 +0000
ROA not after:            Fri 10 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        16.181.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:6d:18:db:98:d5:fd:1b:7d:e8:e7:1e:c8:b3:62:3e:2d:66:48:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep  5 00:11:48 2025 GMT
            Not After : Oct 10 23:59:59 2025 GMT
        Subject: serialNumber=1949f9689337f89dc250d606551c88dd710e0274dca61533eca81a3e5e0019b0, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2a:1f:a0:a2:13:9f:55:2f:6e:f7:1e:06:fb:
                    1c:c6:02:6d:e9:63:7d:52:a5:ad:0b:c8:46:34:92:
                    6a:79:e1:f9:75:b2:53:93:2b:fd:a5:98:8f:2e:f0:
                    f9:3d:d2:8b:dd:bd:49:3b:9c:70:b7:6f:d0:4b:73:
                    d1:cd:a2:06:76:cd:ef:dc:60:1c:3c:f4:47:c7:84:
                    f3:78:5b:c6:b6:5b:18:d4:a4:b6:fe:4e:5f:39:85:
                    42:02:2e:e3:9b:6e:6e:28:2a:64:8e:f2:8b:f2:35:
                    03:d4:b4:3d:6d:18:87:6e:93:7e:86:10:4e:8c:c6:
                    53:8d:df:b9:8f:5d:dd:b2:96:a4:24:ec:b6:ff:4e:
                    70:25:d6:45:b9:f8:85:a0:f5:39:5d:3f:2a:cd:c8:
                    28:b7:be:43:d3:2a:0a:4e:04:a8:05:af:49:3e:4b:
                    59:85:12:a7:d1:36:c3:0c:35:39:d2:de:d6:7b:c9:
                    2f:a8:ae:cb:ca:ee:b6:20:37:4c:83:a5:c4:f5:cc:
                    5a:13:9c:0c:84:7a:18:0e:3e:c5:c2:5e:62:17:14:
                    ea:7e:2b:61:a9:31:dc:57:8d:bf:8b:8c:fd:08:b2:
                    9f:1f:ca:6c:0d:73:f1:f3:65:05:1a:7c:f7:37:d1:
                    92:08:e9:19:2b:67:a5:4d:56:02:e4:2e:b0:c3:7b:
                    e4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:88:EC:5C:67:15:B8:EB:A1:6E:5C:C1:61:5F:B9:D9:FF:BA:9A:7C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe4dae27-bd0b-4693-9fd3-05309ef5d4ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.181.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         86:18:e0:98:e6:26:13:7b:73:5c:92:a6:d1:06:16:6f:5b:f4:
         9d:09:ef:31:28:7b:f6:08:52:96:e8:ba:b2:4b:22:52:3d:ed:
         f1:d4:85:b1:10:ab:82:b6:c3:75:3e:dc:6c:7c:11:f9:12:c2:
         29:8e:93:9c:3f:7e:49:33:b7:52:41:91:2d:37:9f:2d:78:2c:
         4d:fa:4d:4b:e0:b8:65:34:ce:60:be:e2:bb:20:a3:22:6b:1b:
         03:ab:42:6e:16:88:26:56:e4:5a:04:13:15:05:f0:a5:6c:f5:
         12:45:26:e0:1c:42:24:7b:23:ec:0c:75:95:76:1f:a8:0e:47:
         db:c7:8b:b2:22:6a:7e:5e:ad:4c:67:91:79:36:49:4b:73:55:
         c7:9d:3e:3b:12:c4:72:ac:9a:20:15:02:58:7b:e8:9b:8a:a1:
         14:b9:65:92:31:b0:0f:4d:1c:18:a1:71:43:50:b7:49:c1:4c:
         a9:fa:fb:45:da:ca:b2:ea:49:fd:1d:5a:24:d0:80:fc:c4:03:
         38:99:0f:f3:cf:7b:57:b1:af:81:1b:82:1a:21:d5:56:76:78:
         76:8f:07:91:cb:03:be:33:f0:21:77:10:21:b9:5b:8e:ac:ca:
         06:f7:13:89:1f:b4:c0:fa:bd:ec:98:cc:2a:2a:38:82:e4:27:
         04:66:35:76
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUZG0Y25jV/Rt96OceyLNiPi1mSPUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwOTA1MDAxMTQ4WhcNMjUxMDEwMjM1OTU5
WjB6MUkwRwYDVQQFE0AxOTQ5Zjk2ODkzMzdmODlkYzI1MGQ2MDY1NTFjODhkZDcx
MGUwMjc0ZGNhNjE1MzNlY2E4MWEzZTVlMDAxOWIwMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCjKh+gohOfVS9u9x4G+xzGAm3pY31Spa0LyEY0kmp54fl1
slOTK/2lmI8u8Pk90ovdvUk7nHC3b9BLc9HNogZ2ze/cYBw89EfHhPN4W8a2WxjU
pLb+Tl85hUICLuObbm4oKmSO8ovyNQPUtD1tGIduk36GEE6MxlON37mPXd2ylqQk
7Lb/TnAl1kW5+IWg9TldPyrNyCi3vkPTKgpOBKgFr0k+S1mFEqfRNsMMNTnS3tZ7
yS+orsvK7rYgN0yDpcT1zFoTnAyEehgOPsXCXmIXFOp+K2GpMdxXjb+LjP0Isp8f
ymwNc/HzZQUafPc30ZII6RkrZ6VNVgLkLrDDe+TLAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUBYjsXGcVuOuhblzBYV+52f+6mnwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2ZlNGRhZTI3LWJkMGItNDY5My05ZmQzLTA1MzA5ZWY1ZDRlZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAQtTANBgkqhkiG9w0BAQsFAAOCAQEAhhjgmOYmE3tzXJKm0QYWb1v0nQnv
MSh79ghSlui6sksiUj3t8dSFsRCrgrbDdT7cbHwR+RLCKY6TnD9+STO3UkGRLTef
LXgsTfpNS+C4ZTTOYL7iuyCjImsbA6tCbhaIJlbkWgQTFQXwpWz1EkUm4BxCJHsj
7Ax1lXYfqA5H28eLsiJqfl6tTGeReTZJS3NVx50+OxLEcqyaIBUCWHvom4qhFLll
kjGwD00cGKFxQ1C3ScFMqfr7RdrKsupJ/R1aJNCA/MQDOJkP8897V7GvgRuCGiHV
VnZ4do8HkcsDvjPwIXcQIblbjqzKBvcTiR+0wPq97JjMKio4guQnBGY1dg==
-----END CERTIFICATE-----
Generated at Thu Sep 18 23:38:20 2025 by rpki-client