Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/183b2359-812f-4db8-b13a-b849330f3651.roa
File:                     183b2359-812f-4db8-b13a-b849330f3651.roa (raw, json)
Hash identifier:          TZRJ3+/NMKKf1KEs5eVhBEK3Lql/cwSQVJf5BbfJKpk=
Subject key identifier:   F6:06:F6:23:C2:BD:6C:B2:D5:92:4A:FC:42:FF:CA:78:A2:F1:4B:3E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5DED49CFBB7C2EC623AD4977A4EE808FB7D222F4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/183b2359-812f-4db8-b13a-b849330f3651.roa
Signing time:             Mon 20 Jul 2026 00:20:32 +0000
ROA not before:           Mon 20 Jul 2026 00:20:32 +0000
ROA not after:            Sun 18 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        23.254.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:ed:49:cf:bb:7c:2e:c6:23:ad:49:77:a4:ee:80:8f:b7:d2:22:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 20 00:20:32 2026 GMT
            Not After : Oct 18 23:59:59 2026 GMT
        Subject: serialNumber=501dcabfa17f06f7cc685dcea14a1f2dda61cc6bfc15902ed5dc3f9d1225e2c0, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:27:ec:49:8c:0b:89:26:a7:10:8b:db:14:7f:
                    22:6f:5f:de:4e:0f:0a:4b:7d:0c:e8:f7:66:92:7c:
                    d2:b8:7a:8b:54:2f:ef:01:64:37:51:4f:d3:c9:88:
                    64:72:fa:4a:36:c6:4d:fa:5a:1e:b3:b9:46:f5:71:
                    80:41:7e:4a:5d:e5:5a:1f:2f:d6:45:e1:5f:98:86:
                    c0:be:2e:e8:a3:5c:1b:21:58:54:3e:24:da:f7:31:
                    24:d0:16:22:e0:96:ff:b3:31:c5:a0:91:1d:64:af:
                    d4:89:31:8d:7e:20:ea:b8:e5:cb:f5:83:cf:8a:4e:
                    63:55:75:f6:ff:85:55:53:cb:b5:da:5d:f6:dd:55:
                    3b:86:fb:9d:fa:be:83:e0:53:1b:0d:de:75:79:65:
                    7e:09:27:a8:0a:1d:0f:87:f1:1f:29:d2:10:8d:d5:
                    43:1b:98:cf:86:52:3f:cd:ce:42:56:77:b9:f2:02:
                    6b:e7:e9:4a:58:3e:bd:d1:b6:3f:67:03:70:aa:b7:
                    4a:69:45:8c:a7:bd:22:4c:47:8f:84:59:d5:f8:2e:
                    0e:cb:87:36:eb:45:af:5e:4b:68:3c:0e:2e:87:1e:
                    29:11:d3:be:42:17:4f:f7:13:a0:16:92:d6:9b:9f:
                    86:3d:0d:9b:85:0f:55:fc:92:6b:08:6b:33:4c:f5:
                    11:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:06:F6:23:C2:BD:6C:B2:D5:92:4A:FC:42:FF:CA:78:A2:F1:4B:3E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/183b2359-812f-4db8-b13a-b849330f3651.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.254.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         73:71:5a:f3:ef:f0:f1:98:6a:8c:45:71:72:b5:48:7f:5d:aa:
         ec:0d:e6:ae:49:27:c8:13:0a:e5:a4:68:a9:a7:76:4b:f6:03:
         8f:76:a7:0d:21:23:b8:1f:60:d2:ac:71:06:f3:b1:f2:86:d1:
         b6:73:be:ca:fa:9c:42:23:f8:a8:6d:5f:20:f5:a4:8c:08:11:
         9a:cd:13:d3:2f:55:94:ed:47:1c:f9:31:fc:1e:2e:31:a2:65:
         a5:90:89:d8:0b:92:3c:01:3e:7c:92:c5:ba:20:b6:26:87:6f:
         e1:05:35:cb:fc:be:08:f7:4a:b7:e8:c1:7e:39:d1:15:5b:90:
         03:c2:6b:0e:59:c9:6a:f1:19:8b:21:97:30:b9:a2:d7:c9:10:
         0c:8b:4c:25:7a:eb:70:55:42:a2:60:da:2b:de:4c:3c:65:66:
         84:37:3b:76:02:cb:f0:9d:70:20:3b:48:07:2f:83:fb:c3:82:
         91:14:96:f7:c5:51:bb:bf:ba:71:ff:02:cf:d3:ee:1a:98:ca:
         f4:ad:f9:25:76:5b:69:ec:0c:f4:51:5c:03:06:05:03:f9:23:
         af:6a:d7:9c:62:37:85:f0:4d:17:36:1e:19:70:3a:f7:2f:39:
         61:af:cf:71:bb:fa:90:3e:0d:88:13:ce:a3:56:cd:21:ac:8e:
         ad:ff:ac:38
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUXe1Jz7t8LsYjrUl3pO6Aj7fSIvQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzIwMDAyMDMyWhcNMjYxMDE4MjM1OTU5
WjB6MUkwRwYDVQQFE0A1MDFkY2FiZmExN2YwNmY3Y2M2ODVkY2VhMTRhMWYyZGRh
NjFjYzZiZmMxNTkwMmVkNWRjM2Y5ZDEyMjVlMmMwMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDTJ+xJjAuJJqcQi9sUfyJvX95ODwpLfQzo92aSfNK4eotU
L+8BZDdRT9PJiGRy+ko2xk36Wh6zuUb1cYBBfkpd5VofL9ZF4V+YhsC+LuijXBsh
WFQ+JNr3MSTQFiLglv+zMcWgkR1kr9SJMY1+IOq45cv1g8+KTmNVdfb/hVVTy7Xa
XfbdVTuG+536voPgUxsN3nV5ZX4JJ6gKHQ+H8R8p0hCN1UMbmM+GUj/NzkJWd7ny
Amvn6UpYPr3Rtj9nA3Cqt0ppRYynvSJMR4+EWdX4Lg7LhzbrRa9eS2g8Di6HHikR
075CF0/3E6AWktabn4Y9DZuFD1X8kmsIazNM9RH/AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU9gb2I8K9bLLVkkr8Qv/KeKLxSz4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzE4M2IyMzU5LTgxMmYtNGRiOC1iMTNhLWI4NDkzMzBmMzY1MS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAcX/gAwDQYJKoZIhvcNAQELBQADggEBAHNxWvPv8PGYaoxFcXK1SH9dquwN
5q5JJ8gTCuWkaKmndkv2A492pw0hI7gfYNKscQbzsfKG0bZzvsr6nEIj+KhtXyD1
pIwIEZrNE9MvVZTtRxz5MfweLjGiZaWQidgLkjwBPnySxbogtiaHb+EFNcv8vgj3
SrfowX450RVbkAPCaw5ZyWrxGYshlzC5otfJEAyLTCV663BVQqJg2iveTDxlZoQ3
O3YCy/CdcCA7SAcvg/vDgpEUlvfFUbu/unH/As/T7hqYyvSt+SV2W2nsDPRRXAMG
BQP5I69q15xiN4XwTRc2HhlwOvcvOWGvz3G7+pA+DYgTzqNWzSGsjq3/rDg=
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:12:09 2026 by rpki-client