Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/41f6bb6b-198c-4c84-8784-c98ec85e8ae6.roa
File:                     41f6bb6b-198c-4c84-8784-c98ec85e8ae6.roa (raw, json)
Hash identifier:          RGGbd6sphx4a0cCse2eTb1D2oyOmEhwboINz44YgSLU=
Subject key identifier:   E8:BB:B1:60:94:E8:BC:72:43:C5:D2:F4:33:7B:8C:19:9B:7B:82:38
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       0270BC14EB59912D7F8A06DB75EB08AFD3D77C51
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/41f6bb6b-198c-4c84-8784-c98ec85e8ae6.roa
Signing time:             Fri 08 May 2026 00:40:12 +0000
ROA not before:           Fri 08 May 2026 00:40:12 +0000
ROA not after:            Thu 06 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        54.160.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:70:bc:14:eb:59:91:2d:7f:8a:06:db:75:eb:08:af:d3:d7:7c:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: May  8 00:40:12 2026 GMT
            Not After : Aug  6 23:59:59 2026 GMT
        Subject: serialNumber=48683eaf79d0db1daec541fb01b553d00e15717fd410eaa690455e97972c3c29, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2c:9d:15:1c:4e:df:68:c7:30:aa:ee:f9:3b:
                    64:93:f9:a2:be:0e:3f:c5:47:54:58:e4:78:58:69:
                    77:e4:aa:4f:1e:64:2d:ac:82:c0:7c:c4:3e:f8:a4:
                    e0:f3:83:2f:37:29:5b:d0:0d:76:98:86:09:1b:bf:
                    c0:fa:6f:b2:bb:97:8c:b8:4d:fd:08:ab:ce:8e:70:
                    77:d3:87:7b:9d:5e:a5:41:46:12:8b:47:a4:7e:f9:
                    54:0b:f8:d9:56:1c:b1:d3:5c:2f:32:9d:39:bd:3b:
                    c0:18:92:f6:2e:64:b8:77:6d:db:73:18:87:e7:7a:
                    95:45:da:f6:ef:30:99:ce:65:4d:4c:b9:0a:7d:3d:
                    52:56:de:aa:f6:89:27:3b:8a:67:fb:26:84:a1:26:
                    55:40:09:cd:54:f8:3f:b7:8f:1e:bc:61:75:09:d6:
                    33:e0:69:ed:96:3c:f2:e5:9d:f8:f9:1a:17:6e:33:
                    bf:ab:c6:ad:a2:c5:d1:d5:26:5e:79:82:0b:fa:26:
                    4f:f2:a6:bd:f1:38:ee:5c:5e:c4:88:60:b3:91:ce:
                    91:da:15:b2:59:52:b4:af:41:5f:fb:99:a9:2f:0a:
                    fb:13:81:85:7e:67:04:09:81:2a:54:8d:cc:6b:ca:
                    47:8e:07:ec:f3:ed:da:24:c7:46:ed:7b:99:a6:92:
                    54:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:BB:B1:60:94:E8:BC:72:43:C5:D2:F4:33:7B:8C:19:9B:7B:82:38
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/41f6bb6b-198c-4c84-8784-c98ec85e8ae6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.160.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         3d:3c:ae:ee:b3:e7:00:68:13:78:f5:70:42:d5:d2:1f:ec:dd:
         0e:e4:6e:4d:e6:83:41:62:01:97:b2:55:53:a4:19:ca:15:1a:
         b1:ed:3b:88:c6:d6:30:99:7c:9a:5f:fb:56:de:57:30:1d:b2:
         b1:96:ea:4f:be:04:2b:b1:df:d8:81:46:c7:60:3d:41:31:ed:
         99:51:13:47:31:3f:8f:28:b5:ed:66:35:53:07:39:11:a5:c3:
         02:21:fb:88:3c:ed:41:23:f4:89:e9:72:31:26:0e:48:f2:26:
         4a:c1:32:d2:50:1f:43:49:f3:f6:26:20:1a:ee:1e:aa:95:2d:
         6b:5b:b9:d7:54:1e:00:5f:d4:e8:f9:b4:28:04:1a:3c:1c:af:
         cc:35:18:df:4d:d1:14:80:85:51:39:f6:dc:6e:9b:1f:05:35:
         e9:58:17:4a:22:4d:92:ad:71:8f:3d:a7:ad:15:ff:96:0e:7f:
         35:45:5e:c0:73:73:cc:c9:4d:2f:3f:a2:25:18:3f:a8:69:21:
         c6:2a:ce:6e:ab:24:4b:a4:ed:95:6e:3d:75:5b:24:7c:de:b5:
         e8:67:57:44:d8:70:a1:e5:a7:95:47:7d:0a:d7:35:c4:d2:20:
         b1:c9:22:d6:6e:aa:91:14:42:cd:5b:f0:83:1a:4b:69:00:5b:
         c8:70:18:4a
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUAnC8FOtZkS1/igbbdesIr9PXfFEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNTA4MDA0MDEyWhcNMjYwODA2MjM1OTU5
WjB6MUkwRwYDVQQFE0A0ODY4M2VhZjc5ZDBkYjFkYWVjNTQxZmIwMWI1NTNkMDBl
MTU3MTdmZDQxMGVhYTY5MDQ1NWU5Nzk3MmMzYzI5MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC7LJ0VHE7faMcwqu75O2ST+aK+Dj/FR1RY5HhYaXfkqk8e
ZC2sgsB8xD74pODzgy83KVvQDXaYhgkbv8D6b7K7l4y4Tf0Iq86OcHfTh3udXqVB
RhKLR6R++VQL+NlWHLHTXC8ynTm9O8AYkvYuZLh3bdtzGIfnepVF2vbvMJnOZU1M
uQp9PVJW3qr2iSc7imf7JoShJlVACc1U+D+3jx68YXUJ1jPgae2WPPLlnfj5Ghdu
M7+rxq2ixdHVJl55ggv6Jk/ypr3xOO5cXsSIYLORzpHaFbJZUrSvQV/7makvCvsT
gYV+ZwQJgSpUjcxrykeOB+zz7dokx0bte5mmklR5AgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQU6LuxYJTovHJDxdL0M3uMGZt7gjgwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzQxZjZiYjZiLTE5OGMtNGM4NC04Nzg0LWM5OGVjODVlOGFlNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwI2oDANBgkqhkiG9w0BAQsFAAOCAQEAPTyu7rPnAGgTePVwQtXSH+zdDuRu
TeaDQWIBl7JVU6QZyhUase07iMbWMJl8ml/7Vt5XMB2ysZbqT74EK7Hf2IFGx2A9
QTHtmVETRzE/jyi17WY1Uwc5EaXDAiH7iDztQSP0ielyMSYOSPImSsEy0lAfQ0nz
9iYgGu4eqpUta1u511QeAF/U6Pm0KAQaPByvzDUY303RFICFUTn23G6bHwU16VgX
SiJNkq1xjz2nrRX/lg5/NUVewHNzzMlNLz+iJRg/qGkhxirObqskS6TtlW49dVsk
fN616GdXRNhwoeWnlUd9Ctc1xNIgscki1m6qkRRCzVvwgxpLaQBbyHAYSg==
-----END CERTIFICATE-----
Generated at Tue May 12 22:34:41 2026 by rpki-client