Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f74ead99-6790-4721-955a-632492193a35.roa
File:                     f74ead99-6790-4721-955a-632492193a35.roa (raw, json)
Hash identifier:          hea2FRIo2HrtQabCiqxcxTtTey4BfZbB8T6iC0u8a+M=
Subject key identifier:   2A:F1:C4:BB:33:36:0E:D5:9F:D8:9B:E1:E9:79:62:76:AB:00:61:43
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       422DC8E93798F54AE1A21C1CC89D0407F116AB2D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f74ead99-6790-4721-955a-632492193a35.roa
Signing time:             Mon 20 Jul 2026 00:50:11 +0000
ROA not before:           Mon 20 Jul 2026 00:50:11 +0000
ROA not after:            Sun 18 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        206.131.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:2d:c8:e9:37:98:f5:4a:e1:a2:1c:1c:c8:9d:04:07:f1:16:ab:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 20 00:50:11 2026 GMT
            Not After : Oct 18 23:59:59 2026 GMT
        Subject: serialNumber=a85e256b73291c435566795d814d7d4086042ba4756da070bb74d3cc4d41ab4d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ab:be:1d:81:42:9d:81:c8:e6:88:c5:94:8e:
                    34:68:08:6d:0b:81:12:6e:2f:28:83:11:15:54:cd:
                    c5:50:d9:b5:85:f7:78:52:35:b1:88:4d:cd:0f:a9:
                    55:dc:eb:6d:ec:f0:1a:41:fc:77:c2:1d:9c:22:a6:
                    45:ed:96:64:a1:da:54:da:37:23:2f:43:bf:5b:96:
                    29:d5:47:fe:b8:6d:6a:ce:2b:20:cf:ef:58:76:da:
                    07:94:22:c0:27:9c:42:ee:f6:1d:e7:1c:e9:65:24:
                    e3:c5:42:7b:71:f5:14:d7:90:b0:ca:7e:9c:d2:47:
                    e0:d9:e1:1b:70:c3:cf:8b:a8:8a:8d:1b:26:aa:14:
                    78:9a:d0:62:6d:f9:5c:9f:d0:4c:62:dd:f2:e8:9e:
                    fe:62:7d:8c:df:dc:32:28:3d:c5:1e:d9:ff:67:62:
                    57:66:64:e2:b5:92:6b:56:37:45:85:eb:ea:24:16:
                    b4:76:55:c1:ff:b9:0c:f7:c7:7b:83:db:b3:cc:72:
                    77:3e:80:76:78:82:9c:8a:86:02:1a:7f:56:52:d7:
                    b0:1f:8d:b5:5a:54:7b:5c:f1:4f:23:50:66:ee:4f:
                    9e:97:a2:1e:e1:82:fc:19:58:1a:b4:c2:4b:42:36:
                    f3:76:ad:20:89:80:31:a4:35:2d:23:3d:2b:c6:1d:
                    2d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:F1:C4:BB:33:36:0E:D5:9F:D8:9B:E1:E9:79:62:76:AB:00:61:43
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f74ead99-6790-4721-955a-632492193a35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.131.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         78:a1:5b:5f:3d:b4:68:42:1d:5f:64:62:1f:6e:ba:b5:36:90:
         ee:a7:76:d1:51:90:87:03:50:65:56:b2:4b:f5:c3:23:d0:fd:
         f0:1c:14:fd:11:93:38:da:48:06:b5:2b:93:ba:a6:7c:0d:52:
         12:4f:6f:83:eb:47:29:75:1a:ef:b7:0c:8d:11:15:5e:0f:30:
         8f:9f:4d:b0:5c:48:de:c2:88:c3:38:d2:65:ed:e7:90:b3:45:
         85:21:30:09:77:ef:8d:c6:02:7c:2c:9e:61:d1:ff:c0:ba:ed:
         0d:06:56:be:0d:da:d9:53:9a:09:4c:5b:e7:2a:3c:23:3d:3d:
         04:85:19:5b:de:55:59:57:92:d1:55:97:14:c3:b3:4a:16:5b:
         dd:31:34:d9:5c:9a:d8:43:46:ad:10:da:53:95:9d:a6:03:b7:
         c6:f8:36:7d:0b:19:07:91:bc:73:ec:41:42:7c:4c:5d:5b:8f:
         36:b0:f7:5d:8c:91:43:3e:30:ac:41:17:1a:d6:2b:a4:f8:a1:
         9c:fe:3f:80:f5:72:3a:89:4d:6b:06:40:d2:c0:3c:2d:dc:dd:
         ec:77:8e:ef:8c:c1:d2:d9:c1:96:d5:77:7a:1c:a3:43:bf:4c:
         a0:cb:39:f5:0b:2a:f9:2a:a4:0d:23:c0:4a:7b:1e:21:e9:ba:
         d0:b9:63:d5
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUQi3I6TeY9UrhohwcyJ0EB/EWqy0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzIwMDA1MDExWhcNMjYxMDE4MjM1OTU5
WjB6MUkwRwYDVQQFE0BhODVlMjU2YjczMjkxYzQzNTU2Njc5NWQ4MTRkN2Q0MDg2
MDQyYmE0NzU2ZGEwNzBiYjc0ZDNjYzRkNDFhYjRkMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCPq74dgUKdgcjmiMWUjjRoCG0LgRJuLyiDERVUzcVQ2bWF
93hSNbGITc0PqVXc623s8BpB/HfCHZwipkXtlmSh2lTaNyMvQ79blinVR/64bWrO
KyDP71h22geUIsAnnELu9h3nHOllJOPFQntx9RTXkLDKfpzSR+DZ4Rtww8+LqIqN
GyaqFHia0GJt+Vyf0Exi3fLonv5ifYzf3DIoPcUe2f9nYldmZOK1kmtWN0WF6+ok
FrR2VcH/uQz3x3uD27PMcnc+gHZ4gpyKhgIaf1ZS17AfjbVaVHtc8U8jUGbuT56X
oh7hgvwZWBq0wktCNvN2rSCJgDGkNS0jPSvGHS3fAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUKvHEuzM2DtWf2Jvh6XlidqsAYUMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2Y3NGVhZDk5LTY3OTAtNDcyMS05NTVhLTYzMjQ5MjE5M2EzNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAfOgwAwDQYJKoZIhvcNAQELBQADggEBAHihW189tGhCHV9kYh9uurU2kO6n
dtFRkIcDUGVWskv1wyPQ/fAcFP0RkzjaSAa1K5O6pnwNUhJPb4PrRyl1Gu+3DI0R
FV4PMI+fTbBcSN7CiMM40mXt55CzRYUhMAl3743GAnwsnmHR/8C67Q0GVr4N2tlT
mglMW+cqPCM9PQSFGVveVVlXktFVlxTDs0oWW90xNNlcmthDRq0Q2lOVnaYDt8b4
Nn0LGQeRvHPsQUJ8TF1bjzaw912MkUM+MKxBFxrWK6T4oZz+P4D1cjqJTWsGQNLA
PC3c3ex3ju+MwdLZwZbVd3oco0O/TKDLOfULKvkqpA0jwEp7HiHputC5Y9U=
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:49:27 2026 by rpki-client