Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/edaf6eb4-ef4f-49cd-b06e-97e2bd78c821.roa
File:                     edaf6eb4-ef4f-49cd-b06e-97e2bd78c821.roa (raw, json)
Hash identifier:          w7bxK84/uxc4+FdftTsZH00c6tgz+CQDj527WNzu8jU=
Subject key identifier:   F6:5A:80:DA:BE:91:DD:DB:53:58:27:ED:85:9E:25:57:C4:65:81:E4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4C5A36CC06831643A2C70A3830750B2BED0AB00D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/edaf6eb4-ef4f-49cd-b06e-97e2bd78c821.roa
Signing time:             Thu 26 Feb 2026 00:00:45 +0000
ROA not before:           Thu 26 Feb 2026 00:00:45 +0000
ROA not after:            Wed 27 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        56.18.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:5a:36:cc:06:83:16:43:a2:c7:0a:38:30:75:0b:2b:ed:0a:b0:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 26 00:00:45 2026 GMT
            Not After : May 27 23:59:59 2026 GMT
        Subject: serialNumber=e9817c97cd882200a1cf4b6da8104c12baa5c7382c481079d8d994544c8ad6f7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:7c:65:f9:c7:bb:81:c5:46:96:6d:e7:bb:d1:
                    18:09:95:5e:8b:2a:93:6d:d4:d3:5e:5b:31:54:53:
                    1c:27:16:0f:9c:e6:82:f9:33:13:2b:4d:65:d2:ff:
                    cc:a9:9f:13:2f:60:ba:89:11:04:d5:2e:07:ce:5a:
                    20:bb:a7:c1:6c:84:0d:43:62:b5:cc:2e:22:f5:6f:
                    16:55:59:67:6c:d1:65:43:0b:ae:4b:cf:0b:b8:37:
                    e6:16:e2:6b:ab:a8:a6:75:11:fd:52:06:9e:98:45:
                    76:8d:e7:9b:24:f5:20:c5:fa:db:d5:5c:03:3f:27:
                    7d:33:16:41:cf:66:f4:c4:92:eb:b1:e6:a9:63:2b:
                    4f:1a:b7:8d:5a:19:e9:b0:e9:dd:82:7e:8e:57:4b:
                    c3:06:cc:2f:30:d0:f4:f0:fd:2b:c1:5b:82:2f:2e:
                    c3:55:22:3a:d0:f3:ed:27:59:e2:65:9c:ff:38:3a:
                    64:9c:60:99:cc:06:44:f7:36:1b:c7:37:6d:aa:9a:
                    22:25:58:8a:d7:3a:57:78:89:a9:da:75:be:a0:18:
                    71:19:df:80:09:1e:3a:82:e5:9f:97:dd:b0:55:15:
                    b6:40:76:49:f9:4a:38:ff:2a:da:75:81:e7:3d:23:
                    3c:82:ee:88:af:50:65:3b:73:54:79:0b:f8:5a:bf:
                    dc:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:5A:80:DA:BE:91:DD:DB:53:58:27:ED:85:9E:25:57:C4:65:81:E4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/edaf6eb4-ef4f-49cd-b06e-97e2bd78c821.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.18.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7a:2c:03:6d:a0:11:a0:76:54:5d:5f:51:29:52:53:43:3f:67:
         01:fe:f5:54:aa:20:e6:59:94:0e:3f:1d:d0:54:7e:ac:8a:dc:
         2e:e3:ac:54:da:c7:db:bc:6a:3d:34:24:8e:40:2d:a8:27:c7:
         46:42:52:b3:b2:4e:d2:1b:52:ae:76:a8:f6:52:e3:50:52:ac:
         2f:8f:bd:ee:4d:bd:ca:77:f0:b1:c2:ed:0b:f5:ba:f4:34:67:
         57:59:c4:6c:6e:42:f6:71:ca:63:e0:2e:a0:63:34:e7:8a:5e:
         51:3f:45:1e:a8:5c:19:11:5f:aa:22:56:e9:68:ce:b5:b7:c0:
         43:e7:a0:9f:39:3d:e8:9d:7b:c8:10:ee:40:d9:9f:9e:4c:fe:
         21:42:cf:08:1d:e3:51:0a:2a:66:30:1e:03:93:05:13:e1:85:
         85:79:06:cb:27:59:67:68:ec:ab:1d:4f:22:f6:bd:75:af:4d:
         9a:ca:24:ae:3b:ce:5b:1c:a0:04:12:87:ee:ee:e0:19:36:83:
         3a:52:11:99:2f:9d:e2:3e:de:da:41:9b:7a:8a:1c:d2:44:00:
         c8:2f:63:33:61:cd:08:37:0f:17:fc:f0:da:51:2d:24:6f:ba:
         c6:86:fd:2d:d9:f9:3c:f5:db:4b:2d:7d:2d:4c:68:fb:a9:6d:
         c4:1f:3d:04
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUTFo2zAaDFkOixwo4MHULK+0KsA0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI2MDAwMDQ1WhcNMjYwNTI3MjM1OTU5
WjB6MUkwRwYDVQQFE0BlOTgxN2M5N2NkODgyMjAwYTFjZjRiNmRhODEwNGMxMmJh
YTVjNzM4MmM0ODEwNzlkOGQ5OTQ1NDRjOGFkNmY3MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDofGX5x7uBxUaWbee70RgJlV6LKpNt1NNeWzFUUxwnFg+c
5oL5MxMrTWXS/8ypnxMvYLqJEQTVLgfOWiC7p8FshA1DYrXMLiL1bxZVWWds0WVD
C65Lzwu4N+YW4murqKZ1Ef1SBp6YRXaN55sk9SDF+tvVXAM/J30zFkHPZvTEkuux
5qljK08at41aGemw6d2Cfo5XS8MGzC8w0PTw/SvBW4IvLsNVIjrQ8+0nWeJlnP84
OmScYJnMBkT3NhvHN22qmiIlWIrXOld4ianadb6gGHEZ34AJHjqC5Z+X3bBVFbZA
dkn5Sjj/Ktp1gec9IzyC7oivUGU7c1R5C/hav9wHAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQU9lqA2r6R3dtTWCfthZ4lV8RlgeQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2VkYWY2ZWI0LWVmNGYtNDljZC1iMDZlLTk3ZTJiZDc4YzgyMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA4EjANBgkqhkiG9w0BAQsFAAOCAQEAeiwDbaARoHZUXV9RKVJTQz9nAf71
VKog5lmUDj8d0FR+rIrcLuOsVNrH27xqPTQkjkAtqCfHRkJSs7JO0htSrnao9lLj
UFKsL4+97k29ynfwscLtC/W69DRnV1nEbG5C9nHKY+AuoGM054peUT9FHqhcGRFf
qiJW6WjOtbfAQ+egnzk96J17yBDuQNmfnkz+IULPCB3jUQoqZjAeA5MFE+GFhXkG
yydZZ2jsqx1PIva9da9NmsokrjvOWxygBBKH7u7gGTaDOlIRmS+d4j7e2kGbeooc
0kQAyC9jM2HNCDcPF/zw2lEtJG+6xob9Ldn5PPXbSy19LUxo+6ltxB89BA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:11:22 2026 by rpki-client