Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9013bd97-577e-43f7-91e4-454ea80fb5f6.roa
File:                     9013bd97-577e-43f7-91e4-454ea80fb5f6.roa (raw, json)
Hash identifier:          xGHuXHVoGXzzUo9Wh1pJJZmYvft2za0lp9DGd2y6QmA=
Subject key identifier:   A4:46:18:67:06:B8:23:F1:A0:21:69:2F:53:8E:1D:DF:8D:AD:E6:7E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6E24D3C235076B19CFE6EAC2D86E946E27E9446E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9013bd97-577e-43f7-91e4-454ea80fb5f6.roa
Signing time:             Tue 10 Feb 2026 00:10:59 +0000
ROA not before:           Tue 10 Feb 2026 00:10:59 +0000
ROA not after:            Mon 11 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        99.82.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:24:d3:c2:35:07:6b:19:cf:e6:ea:c2:d8:6e:94:6e:27:e9:44:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 10 00:10:59 2026 GMT
            Not After : May 11 23:59:59 2026 GMT
        Subject: serialNumber=50408974b76eb5ef7cdd775ae5e6758c06d5a0752ae27f1cc1095be1c54ae223, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:db:c7:7a:e0:1e:2b:d4:49:68:e1:99:40:2c:
                    10:97:2b:67:4b:b5:f3:63:f7:96:ec:f0:94:3c:11:
                    32:64:36:d4:2c:e1:0e:6d:ab:0d:81:a7:30:ec:1d:
                    79:cd:77:c3:27:34:4f:8f:c9:9e:a6:8e:63:4f:b2:
                    86:27:40:77:4d:38:c9:93:4b:fd:34:47:8f:7d:b3:
                    2b:70:40:f3:3b:bf:30:57:59:b8:5e:1b:39:05:ab:
                    71:98:fa:61:04:63:82:0b:20:78:1e:ea:e0:37:68:
                    63:e4:0e:42:6b:98:53:77:7e:1e:76:00:1d:e6:53:
                    21:78:1a:76:1e:5f:f8:9e:2b:f9:73:b4:09:9a:37:
                    c5:e2:1d:38:d0:8e:7d:1d:06:57:92:72:65:fa:ad:
                    c9:73:05:6c:78:5c:f0:a6:d7:46:f9:0c:a3:6a:8e:
                    93:3b:e8:0d:d3:a4:80:03:b0:49:59:6f:d4:52:ac:
                    cf:50:cd:6a:12:3a:b5:8f:ec:58:1c:0a:6b:73:e0:
                    ae:bc:7a:3f:6d:ea:0a:fa:fe:4d:c1:e7:03:fa:d7:
                    cf:0b:cb:fd:96:38:b3:d4:ff:b3:29:75:da:0a:b3:
                    cc:45:46:2a:30:ae:9c:5e:a9:11:2d:df:a2:4e:33:
                    db:37:b5:45:16:79:4b:45:2c:b9:c3:b0:dd:8c:83:
                    76:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:46:18:67:06:B8:23:F1:A0:21:69:2F:53:8E:1D:DF:8D:AD:E6:7E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9013bd97-577e-43f7-91e4-454ea80fb5f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.82.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c9:a8:43:71:ea:d1:c3:e7:03:b7:1c:f7:fb:e9:a9:1b:5f:2f:
         66:82:eb:ac:11:1e:43:20:53:09:16:6c:6a:b3:44:d0:8b:a8:
         ec:25:c5:d9:61:bb:68:00:8c:8a:7a:57:de:9d:c0:f5:92:16:
         0b:b1:ce:87:21:1b:d9:9c:be:76:04:4b:02:36:29:26:b9:41:
         ae:1b:33:1e:17:4f:45:97:10:02:de:2f:0f:e4:e0:ca:24:93:
         c4:49:30:1b:bb:be:cd:92:e7:eb:d0:4f:7c:77:69:73:2d:76:
         6c:c4:c0:17:dd:59:29:3b:e0:0a:4f:f0:7c:44:b2:38:02:c0:
         a0:15:d7:89:7d:84:0d:1a:0a:2a:88:cd:72:50:ac:0b:cd:58:
         19:22:b3:6e:5f:8d:b2:7c:d3:1a:10:e8:e6:e9:cd:c9:fd:4c:
         b6:3e:63:9a:25:7f:a8:28:19:9e:e1:b1:1e:8a:0d:0b:8b:74:
         a8:be:f5:f9:60:f1:14:66:93:cf:08:b4:8e:87:47:71:dc:51:
         13:d3:40:a1:b9:e2:20:99:c3:30:1a:e9:a0:b6:fe:e8:68:cb:
         1e:38:8b:55:2d:1e:66:db:62:1d:c8:b3:72:3b:10:e2:62:3e:
         ed:20:c5:41:12:ce:5a:f3:52:51:ba:16:5e:8a:e0:85:5d:e7:
         7a:0c:29:85
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUbiTTwjUHaxnP5urC2G6UbifpRG4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjEwMDAxMDU5WhcNMjYwNTExMjM1OTU5
WjB6MUkwRwYDVQQFE0A1MDQwODk3NGI3NmViNWVmN2NkZDc3NWFlNWU2NzU4YzA2
ZDVhMDc1MmFlMjdmMWNjMTA5NWJlMWM1NGFlMjIzMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC028d64B4r1Elo4ZlALBCXK2dLtfNj95bs8JQ8ETJkNtQs
4Q5tqw2BpzDsHXnNd8MnNE+PyZ6mjmNPsoYnQHdNOMmTS/00R499sytwQPM7vzBX
WbheGzkFq3GY+mEEY4ILIHge6uA3aGPkDkJrmFN3fh52AB3mUyF4GnYeX/ieK/lz
tAmaN8XiHTjQjn0dBleScmX6rclzBWx4XPCm10b5DKNqjpM76A3TpIADsElZb9RS
rM9QzWoSOrWP7FgcCmtz4K68ej9t6gr6/k3B5wP6188Ly/2WOLPU/7MpddoKs8xF
RiowrpxeqREt36JOM9s3tUUWeUtFLLnDsN2Mg3bpAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUpEYYZwa4I/GgIWkvU44d342t5n4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzkwMTNiZDk3LTU3N2UtNDNmNy05MWU0LTQ1NGVhODBmYjVmNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAJjUrwwDQYJKoZIhvcNAQELBQADggEBAMmoQ3Hq0cPnA7cc9/vpqRtfL2aC
66wRHkMgUwkWbGqzRNCLqOwlxdlhu2gAjIp6V96dwPWSFguxzochG9mcvnYESwI2
KSa5Qa4bMx4XT0WXEALeLw/k4Mokk8RJMBu7vs2S5+vQT3x3aXMtdmzEwBfdWSk7
4ApP8HxEsjgCwKAV14l9hA0aCiqIzXJQrAvNWBkis25fjbJ80xoQ6Obpzcn9TLY+
Y5olf6goGZ7hsR6KDQuLdKi+9flg8RRmk88ItI6HR3HcURPTQKG54iCZwzAa6aC2
/uhoyx44i1UtHmbbYh3Is3I7EOJiPu0gxUESzlrzUlG6Fl6K4IVd53oMKYU=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:17:17 2026 by rpki-client