Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79931b83-9888-42c4-8cab-49d3b3177907.roa
File:                     79931b83-9888-42c4-8cab-49d3b3177907.roa (raw, json)
Hash identifier:          Hv68Lu/DaNkJML9JXWSgY3/0jRiy0sOk+O9i+ax7RN0=
Subject key identifier:   CC:29:CC:6B:98:8C:B7:06:68:AB:C5:40:9C:C0:45:62:DB:BD:20:E1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       53FD91893FC53529EB96A19EE26A56537B940144
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79931b83-9888-42c4-8cab-49d3b3177907.roa
Signing time:             Tue 10 Feb 2026 01:10:06 +0000
ROA not before:           Tue 10 Feb 2026 01:10:06 +0000
ROA not after:            Mon 11 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        64.252.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:fd:91:89:3f:c5:35:29:eb:96:a1:9e:e2:6a:56:53:7b:94:01:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 10 01:10:06 2026 GMT
            Not After : May 11 23:59:59 2026 GMT
        Subject: serialNumber=831e597b523f7d17951414001c65f651cb812c619262e3cf60c83356d948c950, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:52:e3:ae:91:65:83:c2:bc:9a:b1:1b:99:7d:
                    4b:26:57:ac:88:7d:f9:6f:90:e3:78:dd:9c:a0:58:
                    9b:01:3b:ae:81:4d:df:be:e9:08:c2:4c:77:1c:8f:
                    03:74:03:1c:f3:ef:70:37:a8:4d:ab:72:1e:46:c3:
                    e0:21:a9:1d:16:4c:f8:a9:dc:66:73:01:cb:2c:f5:
                    61:ff:bc:c2:03:6e:bb:07:33:15:1c:e7:8d:6d:6f:
                    5b:ba:40:93:3b:c2:e9:7b:c3:6c:50:25:b2:5f:16:
                    f9:8d:f0:46:b0:fb:38:06:69:23:85:40:c6:fe:5b:
                    7a:c3:d7:84:0e:3d:ca:1e:7a:9c:78:8d:e4:1c:4c:
                    e2:a1:09:92:ea:4f:f5:df:ff:2c:3d:68:5b:4a:df:
                    22:6d:cf:a5:24:af:f2:be:07:dc:58:9b:d0:db:cf:
                    8f:46:e1:54:08:f6:f4:b8:6c:94:e7:ca:db:cf:87:
                    89:c3:db:63:04:f9:2f:18:44:92:0b:61:3d:f3:13:
                    a7:0d:83:2e:92:26:95:a2:3d:18:e4:dc:2a:1a:23:
                    76:cd:c8:b2:08:30:e4:71:88:f1:c4:de:24:93:93:
                    b1:c2:d1:67:3c:58:3b:f0:3f:75:4d:31:9d:e3:32:
                    84:c3:07:32:2c:d0:8c:98:a6:95:40:1b:a6:ee:9c:
                    94:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:29:CC:6B:98:8C:B7:06:68:AB:C5:40:9C:C0:45:62:DB:BD:20:E1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79931b83-9888-42c4-8cab-49d3b3177907.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.252.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:d6:f2:e8:f7:d9:c2:c8:e9:77:37:bf:5f:9c:57:b1:0e:4a:
         85:37:6b:7c:81:ff:77:7e:43:2d:66:5a:09:37:76:3c:65:be:
         f1:87:56:4e:cb:7d:4f:fc:5f:10:7f:4d:70:f6:4b:c2:9f:ac:
         f1:2c:73:60:3c:cf:0e:fb:77:6a:8d:39:66:4e:82:cc:e2:1f:
         c9:98:1c:70:58:0c:94:e5:8a:b1:80:f0:9f:8d:25:6d:4f:67:
         03:5f:95:65:3e:ab:a2:c2:93:48:3e:cc:ad:9c:1f:f4:98:b0:
         b1:e0:2d:7d:7b:e3:50:53:f9:f3:ef:98:fb:9c:94:f8:02:74:
         e0:15:de:2d:16:99:a6:5f:d6:a0:93:07:88:8b:60:c5:14:6c:
         6d:ee:9b:88:95:51:90:77:a5:a6:0c:09:af:25:57:30:8c:8a:
         5c:71:84:53:b1:b4:bd:b9:8e:5a:36:f3:49:07:a0:56:f3:1f:
         a4:7b:9d:b1:6c:c9:ad:5e:21:f0:78:2b:92:43:d5:67:91:0e:
         bc:b1:b2:b9:02:ac:37:f4:b9:cd:b9:c2:bb:e2:54:9d:78:83:
         cd:e6:c7:3f:6e:1f:21:8f:4c:46:12:b5:c3:4f:b2:c2:db:5e:
         1b:96:3a:f5:ab:bf:31:6c:ae:3b:ea:bd:10:69:c3:dd:4e:a3:
         74:f6:dd:2e
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUU/2RiT/FNSnrlqGe4mpWU3uUAUQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjEwMDExMDA2WhcNMjYwNTExMjM1OTU5
WjB6MUkwRwYDVQQFE0A4MzFlNTk3YjUyM2Y3ZDE3OTUxNDE0MDAxYzY1ZjY1MWNi
ODEyYzYxOTI2MmUzY2Y2MGM4MzM1NmQ5NDhjOTUwMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC5UuOukWWDwryasRuZfUsmV6yIfflvkON43ZygWJsBO66B
Td++6QjCTHccjwN0Axzz73A3qE2rch5Gw+AhqR0WTPip3GZzAcss9WH/vMIDbrsH
MxUc541tb1u6QJM7wul7w2xQJbJfFvmN8Eaw+zgGaSOFQMb+W3rD14QOPcoeepx4
jeQcTOKhCZLqT/Xf/yw9aFtK3yJtz6Ukr/K+B9xYm9Dbz49G4VQI9vS4bJTnytvP
h4nD22ME+S8YRJILYT3zE6cNgy6SJpWiPRjk3CoaI3bNyLIIMORxiPHE3iSTk7HC
0Wc8WDvwP3VNMZ3jMoTDBzIs0IyYppVAG6bunJTtAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUzCnMa5iMtwZoq8VAnMBFYtu9IOEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzc5OTMxYjgzLTk4ODgtNDJjNC04Y2FiLTQ5ZDNiMzE3NzkwNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABA/GcwDQYJKoZIhvcNAQELBQADggEBABfW8uj32cLI6Xc3v1+cV7EOSoU3
a3yB/3d+Qy1mWgk3djxlvvGHVk7LfU/8XxB/TXD2S8KfrPEsc2A8zw77d2qNOWZO
gsziH8mYHHBYDJTlirGA8J+NJW1PZwNflWU+q6LCk0g+zK2cH/SYsLHgLX1741BT
+fPvmPuclPgCdOAV3i0WmaZf1qCTB4iLYMUUbG3um4iVUZB3paYMCa8lVzCMilxx
hFOxtL25jlo280kHoFbzH6R7nbFsya1eIfB4K5JD1WeRDryxsrkCrDf0uc25wrvi
VJ14g83mxz9uHyGPTEYStcNPssLbXhuWOvWrvzFsrjvqvRBpw91Oo3T23S4=
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:05:13 2026 by rpki-client