Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/91910661-4e01-4954-945c-027bff21beb5.roa
File:                     91910661-4e01-4954-945c-027bff21beb5.roa (raw, json)
Hash identifier:          x1bu+STGPw/cXMcwrmL+MXVgMk/pHYSId+MEXGnl2Vw=
Subject key identifier:   FA:0B:3D:24:75:3B:B5:67:28:82:0C:2B:B0:2C:1A:A9:24:6F:3B:DF
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       7D595C6631CD2F672FC4BC8DB55E6E596DBD2F38
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/91910661-4e01-4954-945c-027bff21beb5.roa
Signing time:             Fri 24 Jul 2026 01:10:39 +0000
ROA not before:           Fri 24 Jul 2026 01:10:39 +0000
ROA not after:            Thu 22 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        13.232.0.0/13 maxlen: 13
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:59:5c:66:31:cd:2f:67:2f:c4:bc:8d:b5:5e:6e:59:6d:bd:2f:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jul 24 01:10:39 2026 GMT
            Not After : Oct 22 23:59:59 2026 GMT
        Subject: serialNumber=b4267dd18a088c728a9cbd3af6dcaa5da04e353769df859acde66cc899659907, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f5:3f:3d:3e:64:60:41:97:4d:39:0e:9e:fe:
                    1c:ec:33:c5:a2:50:5d:87:4c:23:b1:f8:6e:5d:38:
                    88:aa:4e:83:7d:89:a0:57:73:c0:45:2e:1b:4e:51:
                    23:e4:c2:0c:b0:54:ac:aa:a6:de:db:45:24:6f:d1:
                    30:88:6f:67:b0:bf:70:28:c7:5d:db:a9:3a:4d:74:
                    8b:4a:fd:98:34:e7:b2:d7:b4:2e:b6:15:1f:2a:3b:
                    40:04:b7:1d:64:f4:f3:38:13:7a:b1:a2:07:df:ea:
                    19:80:11:a6:61:d0:d8:46:60:bc:a4:f6:2a:38:3a:
                    3d:f8:e4:9b:7e:92:43:de:20:a6:83:19:dd:6c:4c:
                    3e:30:56:cc:a9:5d:da:51:f3:b1:e9:53:f1:ec:0e:
                    5e:53:f5:e0:19:81:72:eb:68:eb:95:fd:9f:85:b9:
                    56:d1:24:95:fb:c0:99:4b:76:f5:a8:46:97:e1:30:
                    6d:80:3e:26:94:e7:b8:96:5e:7f:cf:a1:6a:78:66:
                    9c:d2:26:82:f6:ae:42:58:43:f0:5d:30:d0:6e:cc:
                    83:39:5f:2c:16:bd:51:06:9d:e3:ea:2a:b7:86:b9:
                    c0:27:26:d4:bf:4c:4f:50:35:b5:24:90:ce:f1:a1:
                    5c:e2:e9:46:8c:68:15:76:27:fd:10:3a:2a:10:59:
                    ee:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:0B:3D:24:75:3B:B5:67:28:82:0C:2B:B0:2C:1A:A9:24:6F:3B:DF
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/91910661-4e01-4954-945c-027bff21beb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.232.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         a1:2c:77:83:3e:73:b9:88:b5:7a:4c:d1:01:47:04:dc:30:73:
         b9:fd:f0:c6:0a:56:99:63:9b:1a:88:d6:65:f9:20:71:48:56:
         11:13:c9:87:e5:d0:28:8e:33:21:e1:86:2e:71:82:90:bd:1f:
         22:3e:74:9e:9f:b9:e3:53:b8:32:62:32:81:95:7c:ba:c7:d4:
         6d:63:b6:fc:09:84:2c:b7:d2:09:82:c4:c3:62:f4:40:e3:82:
         61:67:fc:9c:1c:27:ad:7f:42:99:d1:c1:b9:34:5a:cb:37:71:
         bb:f6:ee:88:db:ff:06:0e:35:7b:f4:b2:b7:1d:2a:5d:93:59:
         c3:e1:c7:05:2f:7a:a9:33:20:eb:ae:06:bf:db:ff:2b:3c:e0:
         9d:45:fc:be:fc:3a:fd:47:a6:c8:fa:f3:a7:b8:9f:54:08:97:
         6d:3f:a7:b0:34:71:ff:49:21:7b:fc:b8:cf:39:03:02:0e:77:
         00:82:34:0a:16:64:13:fa:42:36:ca:d9:3e:e6:2a:c0:e0:70:
         8c:35:51:a7:0d:85:c0:e5:f9:f4:da:b6:e9:92:86:9b:d5:95:
         d1:2a:9d:2c:48:07:f6:72:be:05:25:0a:4d:18:18:3a:b4:e6:
         8e:33:35:9c:d4:60:97:36:f8:c7:26:6b:b6:53:2f:9b:8d:0e:
         c8:53:02:64
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUfVlcZjHNL2cvxLyNtV5uWW29LzgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNzI0MDExMDM5WhcNMjYxMDIyMjM1OTU5
WjB6MUkwRwYDVQQFE0BiNDI2N2RkMThhMDg4YzcyOGE5Y2JkM2FmNmRjYWE1ZGEw
NGUzNTM3NjlkZjg1OWFjZGU2NmNjODk5NjU5OTA3MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCm9T89PmRgQZdNOQ6e/hzsM8WiUF2HTCOx+G5dOIiqToN9
iaBXc8BFLhtOUSPkwgywVKyqpt7bRSRv0TCIb2ewv3Aox13bqTpNdItK/Zg057LX
tC62FR8qO0AEtx1k9PM4E3qxogff6hmAEaZh0NhGYLyk9io4Oj345Jt+kkPeIKaD
Gd1sTD4wVsypXdpR87HpU/HsDl5T9eAZgXLraOuV/Z+FuVbRJJX7wJlLdvWoRpfh
MG2APiaU57iWXn/PoWp4ZpzSJoL2rkJYQ/BdMNBuzIM5XywWvVEGnePqKreGucAn
JtS/TE9QNbUkkM7xoVzi6UaMaBV2J/0QOioQWe7dAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQU+gs9JHU7tWcoggwrsCwaqSRvO98wHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzkxOTEwNjYxLTRlMDEtNDk1NC05NDVjLTAyN2JmZjIxYmViNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwMN6DANBgkqhkiG9w0BAQsFAAOCAQEAoSx3gz5zuYi1ekzRAUcE3DBzuf3w
xgpWmWObGojWZfkgcUhWERPJh+XQKI4zIeGGLnGCkL0fIj50np+541O4MmIygZV8
usfUbWO2/AmELLfSCYLEw2L0QOOCYWf8nBwnrX9CmdHBuTRayzdxu/buiNv/Bg41
e/Sytx0qXZNZw+HHBS96qTMg664Gv9v/KzzgnUX8vvw6/UemyPrzp7ifVAiXbT+n
sDRx/0khe/y4zzkDAg53AII0ChZkE/pCNsrZPuYqwOBwjDVRpw2FwOX59Nq26ZKG
m9WV0SqdLEgH9nK+BSUKTRgYOrTmjjM1nNRglzb4xyZrtlMvm40OyFMCZA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:50:39 2026 by rpki-client