Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/592229fc-0992-48a6-b4d6-3aa5c5bede73.roa
File:                     592229fc-0992-48a6-b4d6-3aa5c5bede73.roa (raw, json)
Hash identifier:          iZx/0dtsXunk23iTngBQ1EQ2hTgjjx1NX2n3TGrvdco=
Subject key identifier:   B2:41:90:D8:BF:9A:5C:6C:BF:E3:0F:BE:3B:28:F5:53:0C:44:AE:05
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       6E1F4098390FBEC0E7FAD6B44DCE19E42379B653
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/592229fc-0992-48a6-b4d6-3aa5c5bede73.roa
Signing time:             Fri 07 Aug 2026 02:21:22 +0000
ROA not before:           Fri 07 Aug 2026 02:21:22 +0000
ROA not after:            Thu 05 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        54.89.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:1f:40:98:39:0f:be:c0:e7:fa:d6:b4:4d:ce:19:e4:23:79:b6:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Aug  7 02:21:22 2026 GMT
            Not After : Nov  5 23:59:59 2026 GMT
        Subject: serialNumber=f397e105ce9fe13198a08b0c056432b2da05977889504ed2f4be170b99b1b248, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ee:ca:f3:52:f8:2e:1f:a9:8e:1f:df:b1:b6:
                    f4:f8:1d:f0:56:d9:63:72:cc:c4:21:87:ca:73:67:
                    9c:4c:54:54:ed:01:bc:09:39:92:26:06:16:1f:9b:
                    63:56:9e:5a:97:03:3c:95:ae:a9:c5:51:1c:6c:88:
                    9d:6d:dd:67:7e:f2:23:30:25:6a:4b:4a:2a:9b:97:
                    6e:85:c9:71:22:3e:b1:90:8e:ee:6f:cb:0e:10:81:
                    db:40:ce:4b:26:84:e0:0a:57:77:66:f2:59:88:53:
                    b0:be:1d:98:0b:9f:e5:0d:71:4e:bc:11:d2:49:76:
                    62:c0:57:7f:05:9f:57:c1:ba:ab:4e:27:5a:41:da:
                    49:cb:bd:6f:f0:ef:8d:ef:a1:3f:57:22:1c:61:0c:
                    b6:fb:a5:61:3b:40:eb:fb:e2:2a:b7:06:01:5e:6a:
                    b2:90:13:0b:b1:a1:60:59:52:d2:b4:69:0b:c8:db:
                    16:1e:38:09:4e:a4:3b:37:fe:9e:2b:61:1c:9f:00:
                    b5:a0:4e:a7:ec:c2:e4:ec:33:01:4f:b9:aa:44:a7:
                    76:b8:f8:6f:45:93:11:71:31:89:6f:58:33:7f:6f:
                    03:7a:82:1a:1b:06:3d:31:98:b1:97:85:13:fc:73:
                    91:b6:7a:76:31:c0:01:b2:b6:b0:9e:af:08:28:b3:
                    da:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:41:90:D8:BF:9A:5C:6C:BF:E3:0F:BE:3B:28:F5:53:0C:44:AE:05
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/592229fc-0992-48a6-b4d6-3aa5c5bede73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.89.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         32:28:57:54:bf:f3:fe:4d:95:52:7b:37:c6:ae:ce:c0:22:3b:
         8d:76:22:aa:2c:93:28:bc:7d:fc:ef:57:59:7a:e7:b8:1c:d6:
         8d:f8:c2:db:ae:cd:c1:96:c7:d5:e4:7e:91:45:40:0f:b0:02:
         65:c1:92:b9:4d:df:42:8e:cc:c8:92:0d:64:12:3e:7e:0e:78:
         fd:ff:8c:05:7c:bf:be:a2:f3:98:66:ad:d0:0d:6d:bf:a9:61:
         a6:8b:2f:78:19:53:5d:31:46:75:03:7b:59:93:a3:66:90:a4:
         b9:cb:59:1c:f7:81:bc:9c:8c:65:2c:6b:9b:be:73:28:e8:1e:
         d8:ec:91:16:52:8c:76:56:28:e4:42:dd:ec:22:31:4b:f6:7d:
         3c:c0:e9:20:7f:0b:3c:b3:46:ba:be:a7:f7:73:4f:dc:12:7a:
         0c:f3:64:96:61:6e:07:1c:3d:ab:bb:47:8f:3d:95:2e:3b:09:
         f0:05:d0:b9:01:3c:74:ac:28:c1:9d:49:5c:96:fd:a9:14:fd:
         cd:99:95:7a:a6:a6:0a:bf:4a:70:b4:52:bc:81:8f:35:48:b3:
         1a:72:77:5b:9e:81:32:39:3c:29:40:d3:c3:a7:e8:1c:37:7a:
         e6:a9:d0:a5:3a:db:5f:5d:3c:39:8b:76:26:dd:34:33:61:6f:
         6a:ac:2e:73
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUbh9AmDkPvsDn+ta0Tc4Z5CN5tlMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwODA3MDIyMTIyWhcNMjYxMTA1MjM1OTU5
WjB6MUkwRwYDVQQFE0BmMzk3ZTEwNWNlOWZlMTMxOThhMDhiMGMwNTY0MzJiMmRh
MDU5Nzc4ODk1MDRlZDJmNGJlMTcwYjk5YjFiMjQ4MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCI7srzUvguH6mOH9+xtvT4HfBW2WNyzMQhh8pzZ5xMVFTt
AbwJOZImBhYfm2NWnlqXAzyVrqnFURxsiJ1t3Wd+8iMwJWpLSiqbl26FyXEiPrGQ
ju5vyw4QgdtAzksmhOAKV3dm8lmIU7C+HZgLn+UNcU68EdJJdmLAV38Fn1fBuqtO
J1pB2knLvW/w743voT9XIhxhDLb7pWE7QOv74iq3BgFearKQEwuxoWBZUtK0aQvI
2xYeOAlOpDs3/p4rYRyfALWgTqfswuTsMwFPuapEp3a4+G9FkxFxMYlvWDN/bwN6
ghobBj0xmLGXhRP8c5G2enYxwAGytrCerwgos9r5AgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUskGQ2L+aXGy/4w++Oyj1UwxErgUwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzU5MjIyOWZjLTA5OTItNDhhNi1iNGQ2LTNhYTVjNWJlZGU3My5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA2WTANBgkqhkiG9w0BAQsFAAOCAQEAMihXVL/z/k2VUns3xq7OwCI7jXYi
qiyTKLx9/O9XWXrnuBzWjfjC267NwZbH1eR+kUVAD7ACZcGSuU3fQo7MyJINZBI+
fg54/f+MBXy/vqLzmGat0A1tv6lhposveBlTXTFGdQN7WZOjZpCkuctZHPeBvJyM
ZSxrm75zKOge2OyRFlKMdlYo5ELd7CIxS/Z9PMDpIH8LPLNGur6n93NP3BJ6DPNk
lmFuBxw9q7tHjz2VLjsJ8AXQuQE8dKwowZ1JXJb9qRT9zZmVeqamCr9KcLRSvIGP
NUizGnJ3W56BMjk8KUDTw6foHDd65qnQpTrbX108OYt2Jt00M2Fvaqwucw==
-----END CERTIFICATE-----
Generated at Sat Aug 22 08:42:45 2026 by rpki-client