Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0aed058e-8a89-4a3a-98d6-a76022818bde.roa
File:                     0aed058e-8a89-4a3a-98d6-a76022818bde.roa (raw, json)
Hash identifier:          5xLbCbwLvsBNqK3aQd30tixHMeXjsd07SnKBXbpL+w8=
Subject key identifier:   DF:7E:8F:8B:DE:51:F1:FB:BD:C8:07:2E:BD:59:84:54:07:84:63:E8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       74D07E7FDAF7F8A530FD26C487FDFCA10D9CAB80
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0aed058e-8a89-4a3a-98d6-a76022818bde.roa
Signing time:             Fri 13 Jun 2025 16:51:23 +0000
ROA not before:           Fri 13 Jun 2025 16:51:23 +0000
ROA not after:            Fri 18 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f17:4c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:d0:7e:7f:da:f7:f8:a5:30:fd:26:c4:87:fd:fc:a1:0d:9c:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 13 16:51:23 2025 GMT
            Not After : Jul 18 23:59:59 2025 GMT
        Subject: serialNumber=31648a5e49d652077aa01157f67f21bb34168c6d6cff34695543f74d164694c9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:4c:0a:81:7b:a3:4f:d7:c9:d2:ac:46:a3:f9:
                    e9:63:6f:32:72:72:bb:40:df:88:23:8b:b0:53:43:
                    67:b3:f3:b8:78:15:27:d1:4d:e7:60:18:14:c1:b3:
                    a4:33:61:9b:25:15:5b:a2:27:0c:a5:e3:9d:31:f8:
                    20:ae:c4:1e:40:61:64:da:2e:52:d1:85:c1:84:a4:
                    21:a3:44:20:e1:54:e5:db:32:0d:15:a2:16:15:f4:
                    dd:17:5d:e8:31:1c:bd:c7:95:a4:c6:e0:86:7b:d6:
                    5c:0c:85:96:47:86:85:e9:21:d8:02:6a:22:ad:0e:
                    7b:6b:88:26:87:7f:24:88:dc:ab:4b:dd:76:1d:bf:
                    19:8b:28:50:4e:1c:97:69:b2:d3:06:4f:8a:f0:bb:
                    0c:df:a7:0a:da:3f:73:83:85:60:cc:eb:c4:f1:c9:
                    8b:93:21:b5:70:cc:6e:fe:65:28:1d:f1:c6:88:66:
                    a2:d1:25:b0:0d:4d:3e:2d:09:8f:f8:a3:c9:96:68:
                    ca:4d:59:d2:b5:d5:67:87:52:fb:ec:b6:db:3d:12:
                    d2:01:e9:4a:ed:0c:53:0e:3f:bc:3b:5e:c1:92:22:
                    7f:5d:bf:38:3d:88:28:79:eb:fa:96:bd:d4:18:6b:
                    2b:c7:91:b8:d4:7b:2f:9a:89:34:75:3f:31:9d:e0:
                    87:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:7E:8F:8B:DE:51:F1:FB:BD:C8:07:2E:BD:59:84:54:07:84:63:E8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0aed058e-8a89-4a3a-98d6-a76022818bde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f17:4c00::/38

    Signature Algorithm: sha256WithRSAEncryption
         39:b8:5a:17:27:61:26:e9:8a:6e:92:d8:3d:01:a0:fb:bb:32:
         05:ae:7f:ca:7a:28:54:6d:ce:60:ad:62:4d:4d:10:2b:70:ef:
         17:c9:94:9f:39:3a:a9:35:65:1a:e3:e7:1d:b1:03:db:52:10:
         fe:ae:21:51:83:dd:61:5a:53:89:f9:ed:d6:68:fd:ea:7f:72:
         eb:04:97:db:92:83:44:70:b5:47:79:62:d9:7a:ac:ec:ff:05:
         ad:29:d5:02:af:80:36:99:ac:5c:e8:7d:9c:34:63:2f:35:27:
         c5:58:06:90:14:7d:d0:8d:f8:a4:ad:5c:71:48:c3:30:7f:67:
         e3:14:04:bb:b9:15:50:73:9e:fb:9f:86:d3:31:38:3a:1c:29:
         45:2a:bc:4e:10:5e:31:67:b1:b5:1f:83:e9:a8:d5:d7:a8:53:
         b1:26:83:f7:1c:fb:e3:46:12:b4:1c:5f:b3:f3:e0:f1:76:55:
         a9:2f:62:c8:98:9b:c6:51:b6:26:5d:21:fd:bb:27:d5:bd:4c:
         20:ab:05:83:8f:4f:9a:0c:ac:f5:d3:99:0d:d7:4c:ec:42:2c:
         f9:98:c7:27:66:87:1c:82:a5:79:dd:07:2c:ca:df:6a:1a:6d:
         5d:41:65:81:c2:2c:4a:9d:1c:ec:b4:cd:81:d3:7f:07:95:61:
         11:63:a7:95
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUdNB+f9r3+KUw/SbEh/38oQ2cq4AwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjEzMTY1MTIzWhcNMjUwNzE4MjM1OTU5
WjB6MUkwRwYDVQQFE0AzMTY0OGE1ZTQ5ZDY1MjA3N2FhMDExNTdmNjdmMjFiYjM0
MTY4YzZkNmNmZjM0Njk1NTQzZjc0ZDE2NDY5NGM5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCPTAqBe6NP18nSrEaj+eljbzJycrtA34gji7BTQ2ez87h4
FSfRTedgGBTBs6QzYZslFVuiJwyl450x+CCuxB5AYWTaLlLRhcGEpCGjRCDhVOXb
Mg0VohYV9N0XXegxHL3HlaTG4IZ71lwMhZZHhoXpIdgCaiKtDntriCaHfySI3KtL
3XYdvxmLKFBOHJdpstMGT4rwuwzfpwraP3ODhWDM68TxyYuTIbVwzG7+ZSgd8caI
ZqLRJbANTT4tCY/4o8mWaMpNWdK11WeHUvvstts9EtIB6UrtDFMOP7w7XsGSIn9d
vzg9iCh56/qWvdQYayvHkbjUey+aiTR1PzGd4IePAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQU336Pi95R8fu9yAcuvVmEVAeEY+gwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzBhZWQwNThlLThhODktNGEzYS05OGQ2LWE3NjAyMjgxOGJkZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgImAB8XTDANBgkqhkiG9w0BAQsFAAOCAQEAObhaFydhJumKbpLYPQGg+7sy
Ba5/ynooVG3OYK1iTU0QK3DvF8mUnzk6qTVlGuPnHbED21IQ/q4hUYPdYVpTifnt
1mj96n9y6wSX25KDRHC1R3li2Xqs7P8FrSnVAq+ANpmsXOh9nDRjLzUnxVgGkBR9
0I34pK1ccUjDMH9n4xQEu7kVUHOe+5+G0zE4OhwpRSq8ThBeMWextR+D6ajV16hT
sSaD9xz740YStBxfs/Pg8XZVqS9iyJibxlG2Jl0h/bsn1b1MIKsFg49Pmgys9dOZ
DddM7EIs+ZjHJ2aHHIKled0HLMrfahptXUFlgcIsSp0c7LTNgdN/B5VhEWOnlQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 06:56:38 2025 by rpki-client