Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6bb49903-57ef-4cd7-ad1f-0822c4cb7e63.roa
File:                     6bb49903-57ef-4cd7-ad1f-0822c4cb7e63.roa (raw, json)
Hash identifier:          kNFB9qvbAu9Ivl+gxP4UGDBL0pBS8vvrhV00nsM5YXo=
Subject key identifier:   6F:12:91:5D:34:15:F2:A0:8D:4E:F1:03:74:9E:BC:5A:7E:01:EC:AE
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       09A36AF9EC356BB2F1EA5B75A4CE43464856EEAD
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6bb49903-57ef-4cd7-ad1f-0822c4cb7e63.roa
Signing time:             Sun 19 Oct 2025 09:13:42 +0000
ROA not before:           Sun 19 Oct 2025 09:13:42 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        13.226.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:a3:6a:f9:ec:35:6b:b2:f1:ea:5b:75:a4:ce:43:46:48:56:ee:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 19 09:13:42 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=0097ae3f4ff2a695603d304e7099b16aa3c9be208e922ff600492481766587a6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:75:9b:52:4a:91:79:ba:bf:31:b1:eb:90:4e:
                    b2:05:c1:87:45:25:69:89:51:de:9f:dd:32:a2:cb:
                    08:d8:3b:ab:00:e3:3d:d1:2e:14:4d:80:cd:7c:56:
                    d1:1f:8e:8f:14:5d:0b:c8:84:4d:ab:40:36:9a:12:
                    b5:c6:37:dd:55:8f:43:88:0e:b8:5f:6a:8b:6e:e3:
                    54:54:9f:b4:39:ba:18:48:f7:53:c7:fe:25:13:31:
                    7b:8d:86:4c:8f:f0:83:6f:b0:f3:26:9f:e7:09:d4:
                    33:fd:24:84:d0:07:0f:c1:b4:65:c7:b8:0b:3a:0c:
                    a3:0f:c7:31:00:90:10:b4:27:29:7c:13:cc:aa:ff:
                    52:95:08:43:6d:e4:5e:99:41:fa:78:af:b7:56:cb:
                    52:6d:35:38:a8:88:34:d4:34:ba:3b:f3:4a:8c:5d:
                    93:11:20:4a:5c:b0:8d:86:57:73:10:d2:6e:29:90:
                    31:b9:d8:9d:90:59:42:94:91:f9:27:06:42:f7:b0:
                    9c:f5:d3:ec:fe:e3:03:e7:a0:80:65:e5:db:c8:5d:
                    48:23:37:e5:4e:08:ff:7e:13:53:c5:1b:ea:26:51:
                    fd:21:a0:45:2a:89:95:08:7e:96:ca:0c:82:ee:79:
                    99:3d:be:be:9d:68:c4:9d:38:18:76:76:38:da:10:
                    4c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:12:91:5D:34:15:F2:A0:8D:4E:F1:03:74:9E:BC:5A:7E:01:EC:AE
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6bb49903-57ef-4cd7-ad1f-0822c4cb7e63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.226.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:80:19:ca:65:98:f7:ab:38:06:0a:1d:f6:2c:60:46:7b:8f:
         70:47:e6:7e:5a:46:01:e5:00:dc:a8:af:1d:1d:60:e9:43:fa:
         cc:53:f6:20:15:49:61:38:62:f4:3c:bd:0c:a0:2b:71:1b:42:
         7c:e8:07:08:02:be:d5:c6:52:60:92:4d:2d:b6:65:33:d2:35:
         31:54:3b:ef:fb:52:c7:0f:72:01:2e:44:ac:94:ee:28:ca:8d:
         cb:16:4e:da:f1:2f:7c:32:66:b2:e6:e4:b3:e2:81:c7:ec:44:
         56:93:d7:70:c8:1f:62:57:bc:ec:36:55:36:00:ac:ca:34:6d:
         58:a0:01:cb:6f:b1:1d:80:73:45:94:7b:08:41:fa:1b:42:3d:
         4a:ff:64:67:69:2c:36:1e:5c:98:6b:ad:1f:d4:8c:0f:0e:16:
         36:ae:d5:b0:3e:67:58:ad:bf:0a:b2:d0:ca:c5:a2:76:2c:91:
         9f:e1:87:21:3e:60:88:f9:fe:e3:e8:b9:b7:c4:35:52:c0:a1:
         39:2a:d2:45:af:74:94:d1:2b:fc:c9:aa:8b:c5:0e:74:fc:30:
         67:d3:7d:35:eb:1f:8d:71:7f:41:fb:80:08:96:d0:27:fa:ee:
         ee:e9:1a:b1:a7:3d:e9:1b:e1:7a:63:34:53:05:15:96:14:5b:
         27:f9:c5:7d
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUCaNq+ew1a7Lx6lt1pM5DRkhW7q0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MDkxMzQyWhcNMjUxMTIzMjM1OTU5
WjB6MUkwRwYDVQQFE0AwMDk3YWUzZjRmZjJhNjk1NjAzZDMwNGU3MDk5YjE2YWEz
YzliZTIwOGU5MjJmZjYwMDQ5MjQ4MTc2NjU4N2E2MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDkdZtSSpF5ur8xseuQTrIFwYdFJWmJUd6f3TKiywjYO6sA
4z3RLhRNgM18VtEfjo8UXQvIhE2rQDaaErXGN91Vj0OIDrhfaotu41RUn7Q5uhhI
91PH/iUTMXuNhkyP8INvsPMmn+cJ1DP9JITQBw/BtGXHuAs6DKMPxzEAkBC0Jyl8
E8yq/1KVCENt5F6ZQfp4r7dWy1JtNTioiDTUNLo780qMXZMRIEpcsI2GV3MQ0m4p
kDG52J2QWUKUkfknBkL3sJz10+z+4wPnoIBl5dvIXUgjN+VOCP9+E1PFG+omUf0h
oEUqiZUIfpbKDILueZk9vr6daMSdOBh2djjaEExRAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUbxKRXTQV8qCNTvEDdJ68Wn4B7K4wHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzZiYjQ5OTAzLTU3ZWYtNGNkNy1hZDFmLTA4MjJjNGNiN2U2My5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAN4lYwDQYJKoZIhvcNAQELBQADggEBAFuAGcplmPerOAYKHfYsYEZ7j3BH
5n5aRgHlANyorx0dYOlD+sxT9iAVSWE4YvQ8vQygK3EbQnzoBwgCvtXGUmCSTS22
ZTPSNTFUO+/7UscPcgEuRKyU7ijKjcsWTtrxL3wyZrLm5LPigcfsRFaT13DIH2JX
vOw2VTYArMo0bVigActvsR2Ac0WUewhB+htCPUr/ZGdpLDYeXJhrrR/UjA8OFjau
1bA+Z1itvwqy0MrFonYskZ/hhyE+YIj5/uPoubfENVLAoTkq0kWvdJTRK/zJqovF
DnT8MGfTfTXrH41xf0H7gAiW0Cf67u7pGrGnPekb4XpjNFMFFZYUWyf5xX0=
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:48:26 2025 by rpki-client