Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a94972a-5622-44f7-85a8-f166881512cb.roa
File:                     6a94972a-5622-44f7-85a8-f166881512cb.roa (raw, json)
Hash identifier:          o7ODvfm/N+F+xObLKCKYPfmpnSgKXPm+WaP0iTdippQ=
Subject key identifier:   CD:D9:2D:75:C4:BF:FE:AE:02:11:6D:44:DE:C8:EF:D8:76:80:7B:99
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       17403DBF606C180338728842A97C35EDD6946A67
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a94972a-5622-44f7-85a8-f166881512cb.roa
Signing time:             Wed 29 Apr 2026 00:11:36 +0000
ROA not before:           Wed 29 Apr 2026 00:11:36 +0000
ROA not after:            Tue 28 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        99.77.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:40:3d:bf:60:6c:18:03:38:72:88:42:a9:7c:35:ed:d6:94:6a:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 29 00:11:36 2026 GMT
            Not After : Jul 28 23:59:59 2026 GMT
        Subject: serialNumber=2758d24a418486fa1006c34c10d934e85b6498b03554ac119cd49010ad9dd960, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a6:03:8f:72:8c:ef:51:c0:84:ac:6a:7d:e0:
                    1c:38:7d:02:d7:f0:7b:27:23:bb:22:6a:90:6c:7e:
                    fe:9a:53:36:8c:c8:60:f9:d4:03:ab:b2:b0:2f:e4:
                    5f:39:eb:2a:0d:dc:4d:20:2c:72:0b:1a:37:35:fa:
                    3e:5a:f1:e0:29:6e:54:8c:72:8d:2d:b7:f3:a9:7f:
                    62:0a:d8:ed:ee:ac:26:ef:3d:2b:39:d0:47:7c:79:
                    c8:a7:ac:80:3b:fa:3c:d2:55:6d:1a:4a:31:b3:d0:
                    43:fb:b7:b1:e4:39:34:6c:63:22:0b:7f:4e:c2:26:
                    86:19:3c:25:93:c2:c8:d5:60:65:f1:37:c0:d2:1a:
                    1b:67:38:95:51:7f:eb:8f:e3:03:91:d8:26:23:03:
                    73:f3:de:55:ca:28:3a:1e:5c:ed:ff:09:37:f9:15:
                    46:43:b8:4d:79:2e:3a:c0:2c:db:0b:c6:51:1e:29:
                    f2:0c:58:8b:e9:58:08:ec:ee:a3:f5:5f:97:05:37:
                    ae:5d:19:1b:87:44:dc:a6:0a:21:9c:b5:ea:1d:1e:
                    11:98:72:f4:66:99:26:2a:e7:20:72:2b:c6:fa:d2:
                    85:0b:aa:22:c5:7a:21:cb:08:86:2a:ac:f6:69:db:
                    4c:65:ec:b1:70:1d:8e:9d:04:3c:31:8f:85:9d:d2:
                    80:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:D9:2D:75:C4:BF:FE:AE:02:11:6D:44:DE:C8:EF:D8:76:80:7B:99
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a94972a-5622-44f7-85a8-f166881512cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.77.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:15:31:86:09:49:b6:c0:1d:cf:ad:26:c8:35:d0:1c:9c:c6:
         66:dd:c0:43:01:6c:78:75:15:cc:ed:43:1c:f2:5f:e0:80:2c:
         b8:15:a8:41:d5:b8:6a:d3:39:f7:82:de:42:24:54:c3:af:c2:
         d7:27:dc:06:91:46:d0:8c:96:b3:4d:aa:42:9b:d2:2c:ca:ad:
         a5:81:f3:39:2a:05:56:07:c7:44:29:ff:9f:e3:c5:f3:dc:ff:
         ae:04:c9:91:a4:dc:d1:88:8b:43:2b:12:c8:46:e3:9d:10:27:
         96:a2:92:23:93:3d:e7:c0:aa:5b:67:25:40:ee:78:d5:e5:84:
         cc:47:90:15:0e:f2:af:05:9d:58:b3:b3:4e:34:ef:2a:2b:21:
         0f:0d:c6:41:0e:d6:4f:10:3c:f9:29:d1:40:9d:ef:69:36:54:
         c6:19:3b:40:ea:e9:69:4c:4f:a2:49:37:6e:49:29:7b:f1:8b:
         0b:d9:c7:52:1e:0a:fd:97:4f:30:82:46:66:91:66:aa:36:0e:
         61:2a:ee:62:c5:a8:51:6d:40:ff:43:94:05:10:03:c9:1e:8d:
         b4:55:05:08:a0:82:52:56:14:74:c5:38:50:be:23:b2:d0:56:
         cc:6c:95:84:05:12:fb:3f:4a:6a:0d:c8:f6:fc:d0:9e:a8:5b:
         3d:0f:37:d2
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUF0A9v2BsGAM4cohCqXw17daUamcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNDI5MDAxMTM2WhcNMjYwNzI4MjM1OTU5
WjB6MUkwRwYDVQQFE0AyNzU4ZDI0YTQxODQ4NmZhMTAwNmMzNGMxMGQ5MzRlODVi
NjQ5OGIwMzU1NGFjMTE5Y2Q0OTAxMGFkOWRkOTYwMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCTpgOPcozvUcCErGp94Bw4fQLX8HsnI7siapBsfv6aUzaM
yGD51AOrsrAv5F856yoN3E0gLHILGjc1+j5a8eApblSMco0tt/Opf2IK2O3urCbv
PSs50Ed8ecinrIA7+jzSVW0aSjGz0EP7t7HkOTRsYyILf07CJoYZPCWTwsjVYGXx
N8DSGhtnOJVRf+uP4wOR2CYjA3Pz3lXKKDoeXO3/CTf5FUZDuE15LjrALNsLxlEe
KfIMWIvpWAjs7qP1X5cFN65dGRuHRNymCiGcteodHhGYcvRmmSYq5yByK8b60oUL
qiLFeiHLCIYqrPZp20xl7LFwHY6dBDwxj4Wd0oB9AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUzdktdcS//q4CEW1E3sjv2HaAe5kwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzZhOTQ5NzJhLTU2MjItNDRmNy04NWE4LWYxNjY4ODE1MTJjYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABjTYYwDQYJKoZIhvcNAQELBQADggEBAH8VMYYJSbbAHc+tJsg10Bycxmbd
wEMBbHh1FcztQxzyX+CALLgVqEHVuGrTOfeC3kIkVMOvwtcn3AaRRtCMlrNNqkKb
0izKraWB8zkqBVYHx0Qp/5/jxfPc/64EyZGk3NGIi0MrEshG450QJ5aikiOTPefA
qltnJUDueNXlhMxHkBUO8q8FnVizs0407yorIQ8NxkEO1k8QPPkp0UCd72k2VMYZ
O0Dq6WlMT6JJN25JKXvxiwvZx1IeCv2XTzCCRmaRZqo2DmEq7mLFqFFtQP9DlAUQ
A8kejbRVBQigglJWFHTFOFC+I7LQVsxslYQFEvs/SmoNyPb80J6oWz0PN9I=
-----END CERTIFICATE-----
Generated at Wed May 13 08:14:04 2026 by rpki-client