Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1adf4d9d-eda9-4fe8-8f93-4b6c05e8aba4.roa
File:                     1adf4d9d-eda9-4fe8-8f93-4b6c05e8aba4.roa (raw, json)
Hash identifier:          +5kJhSiSfIa6z/vm7eSsmfGsiYIsuA1jBPfQj0F69Xk=
Subject key identifier:   3F:20:83:63:97:E1:4D:37:88:22:9F:E5:75:5F:C6:F6:05:34:FC:4E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       65E841989A02D649F19B94D5D3AF9FC3229C36D0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1adf4d9d-eda9-4fe8-8f93-4b6c05e8aba4.roa
Signing time:             Sun 17 May 2026 00:20:57 +0000
ROA not before:           Sun 17 May 2026 00:20:57 +0000
ROA not after:            Sat 15 Aug 2026 23:59:59 +0000
asID:                     26982
IP address blocks:        192.31.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:e8:41:98:9a:02:d6:49:f1:9b:94:d5:d3:af:9f:c3:22:9c:36:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 17 00:20:57 2026 GMT
            Not After : Aug 15 23:59:59 2026 GMT
        Subject: serialNumber=856ec6a49e449aa08a261ac825cd657d32abc884a425b390db4377991591409f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:28:c5:2a:29:cb:72:e2:e4:12:77:f4:2f:0a:
                    83:31:c4:70:31:c8:92:70:4f:ef:f9:79:45:91:02:
                    16:72:95:e1:1d:ee:70:5f:a0:a7:95:0e:d7:2a:a4:
                    0c:3e:b5:36:67:5b:74:90:5a:eb:82:e8:af:c0:4a:
                    a0:83:cf:f7:45:75:a0:2e:b8:86:85:9a:1a:00:59:
                    cc:6f:9f:54:0e:d3:55:33:69:f2:69:5d:7a:a3:b5:
                    32:58:2b:bd:13:c5:11:d6:6f:9a:ed:34:ab:3e:b4:
                    82:de:01:f6:47:df:39:31:f7:75:f5:ee:a0:47:97:
                    2a:d7:e6:34:84:f8:3d:24:7b:0b:28:7f:1a:b8:64:
                    bf:d3:5c:e1:82:fe:52:75:9c:18:14:0a:37:12:9a:
                    c3:dc:0e:0c:6d:a2:f6:18:bf:98:e2:f6:c5:a5:56:
                    69:1b:0e:d7:99:f5:14:3f:6c:41:7f:1c:32:45:76:
                    5c:b7:e2:bd:de:53:49:89:a6:6e:ac:6d:c2:53:ba:
                    03:de:d6:b4:e0:40:52:2f:f3:38:37:5c:27:3f:6e:
                    83:2d:b9:45:bc:42:91:c0:87:bd:e9:ad:42:47:86:
                    92:2c:8e:da:01:93:cf:c5:6a:2c:d7:30:58:8b:22:
                    94:8e:58:79:55:57:73:ac:99:5b:21:ff:d8:4f:24:
                    c2:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:20:83:63:97:E1:4D:37:88:22:9F:E5:75:5F:C6:F6:05:34:FC:4E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1adf4d9d-eda9-4fe8-8f93-4b6c05e8aba4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.31.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cb:12:a8:1e:ae:37:aa:89:d2:c5:a2:db:85:49:78:f4:a5:39:
         61:d7:4b:13:c9:1d:a4:71:1a:d3:73:86:da:a5:d7:68:c9:45:
         da:b3:46:78:6f:b8:53:12:1e:85:37:6b:57:86:5b:95:1b:aa:
         ef:0d:fd:92:f6:02:96:52:7b:57:17:9d:6d:c9:00:7e:06:57:
         1d:21:f6:32:82:36:4e:7f:b8:34:c1:56:b2:51:22:47:6b:f8:
         7d:21:42:db:a2:a6:bc:d0:77:61:37:78:2a:e4:61:e2:8d:dd:
         a5:74:bf:ba:97:d4:b0:22:47:2c:38:26:5b:ca:45:c7:8f:0e:
         41:f6:7e:bb:fe:7e:58:e6:5c:00:71:47:fd:7c:bd:0b:64:78:
         b8:64:43:51:b4:b8:f1:4a:4a:a2:9a:b0:d3:2e:73:1c:b3:26:
         14:04:ff:8c:72:f8:b8:b3:ac:dc:3d:6f:28:d0:17:de:f5:19:
         44:0c:c9:d5:2d:99:92:6b:a9:db:d5:15:43:23:01:16:57:35:
         3b:fd:b8:b5:dc:de:94:e1:43:39:17:65:93:4b:89:f3:15:50:
         77:20:f2:8f:cd:ff:b8:e3:8d:8c:e8:dc:ff:34:13:50:90:22:
         a9:23:f9:e1:bc:bd:c1:32:f0:85:a4:c0:fb:6d:fe:4d:44:e5:
         68:ef:e3:4a
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUZehBmJoC1knxm5TV06+fwyKcNtAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE3MDAyMDU3WhcNMjYwODE1MjM1OTU5
WjB6MUkwRwYDVQQFE0A4NTZlYzZhNDllNDQ5YWEwOGEyNjFhYzgyNWNkNjU3ZDMy
YWJjODg0YTQyNWIzOTBkYjQzNzc5OTE1OTE0MDlmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC3KMUqKcty4uQSd/QvCoMxxHAxyJJwT+/5eUWRAhZyleEd
7nBfoKeVDtcqpAw+tTZnW3SQWuuC6K/ASqCDz/dFdaAuuIaFmhoAWcxvn1QO01Uz
afJpXXqjtTJYK70TxRHWb5rtNKs+tILeAfZH3zkx93X17qBHlyrX5jSE+D0kewso
fxq4ZL/TXOGC/lJ1nBgUCjcSmsPcDgxtovYYv5ji9sWlVmkbDteZ9RQ/bEF/HDJF
dly34r3eU0mJpm6sbcJTugPe1rTgQFIv8zg3XCc/boMtuUW8QpHAh73prUJHhpIs
jtoBk8/FaizXMFiLIpSOWHlVV3OsmVsh/9hPJMJLAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUPyCDY5fhTTeIIp/ldV/G9gU0/E4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzFhZGY0ZDlkLWVkYTktNGZlOC04ZjkzLTRiNmMwNWU4YWJhNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADAH9QwDQYJKoZIhvcNAQELBQADggEBAMsSqB6uN6qJ0sWi24VJePSlOWHX
SxPJHaRxGtNzhtql12jJRdqzRnhvuFMSHoU3a1eGW5Ubqu8N/ZL2ApZSe1cXnW3J
AH4GVx0h9jKCNk5/uDTBVrJRIkdr+H0hQtuiprzQd2E3eCrkYeKN3aV0v7qX1LAi
Ryw4JlvKRcePDkH2frv+fljmXABxR/18vQtkeLhkQ1G0uPFKSqKasNMucxyzJhQE
/4xy+LizrNw9byjQF971GUQMydUtmZJrqdvVFUMjARZXNTv9uLXc3pThQzkXZZNL
ifMVUHcg8o/N/7jjjYzo3P80E1CQIqkj+eG8vcEy8IWkwPtt/k1E5Wjv40o=
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:14:41 2026 by rpki-client