Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1d9802f5-2b41-4e83-b0d2-b35ec68f6bb8.roa
File:                     1d9802f5-2b41-4e83-b0d2-b35ec68f6bb8.roa (raw, json)
Hash identifier:          QtWxA08v7dKbM/Ma2c4o3WR1c7ulOcJwBujFFbBvTZw=
Subject key identifier:   DB:7C:21:48:7C:FB:B3:D7:D7:5A:94:72:7D:31:85:69:F0:31:B3:3A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       31C2C51C8B8C81A05D486AEA352021C8D15DA0B4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1d9802f5-2b41-4e83-b0d2-b35ec68f6bb8.roa
Signing time:             Fri 13 Jun 2025 00:41:27 +0000
ROA not before:           Fri 13 Jun 2025 00:41:27 +0000
ROA not after:            Fri 18 Jul 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        161.178.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:c2:c5:1c:8b:8c:81:a0:5d:48:6a:ea:35:20:21:c8:d1:5d:a0:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 13 00:41:27 2025 GMT
            Not After : Jul 18 23:59:59 2025 GMT
        Subject: serialNumber=db9368f8b84b9af853b3864797f10a00f13624b3c2b6300dd399210e9d818a8d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:3d:18:de:16:54:52:4d:09:c7:73:f3:89:cf:
                    1e:39:10:54:63:a2:3a:0d:cd:b0:bf:56:6b:f4:06:
                    a2:fd:ba:35:84:96:fb:25:1d:9a:f8:d8:7c:3f:9c:
                    82:06:75:97:6e:8f:43:dd:29:7f:42:39:ff:f1:e0:
                    54:cd:0b:99:13:ac:3d:f5:0a:ae:8a:cf:19:30:7f:
                    fc:bc:e8:d9:e6:e9:84:81:03:4c:fc:e6:d7:16:6d:
                    59:1a:e4:0b:eb:10:1b:2c:33:97:f3:19:f6:06:8f:
                    a9:31:ce:85:55:71:56:60:60:ef:37:39:f2:3b:6c:
                    18:d1:89:c4:1f:25:04:5c:ac:30:d4:ae:70:13:b8:
                    b4:09:08:fb:69:1a:85:e1:ab:b1:f0:2c:cb:04:66:
                    f5:a7:cd:2e:a6:47:76:81:01:b4:9b:68:42:26:ce:
                    09:44:b3:2e:8f:fd:3a:6d:89:54:ec:db:02:55:f5:
                    ea:90:a4:dc:73:24:21:3c:86:8e:98:e5:4e:dd:2c:
                    4c:9f:56:8e:12:94:93:b6:45:26:66:d7:1d:03:68:
                    42:dc:70:22:a9:76:62:03:8a:3c:b5:5b:fc:28:d3:
                    63:d7:cc:b7:37:6d:5b:2c:00:54:d4:8b:11:00:0c:
                    73:61:38:bd:6b:48:52:e5:04:6e:3e:5b:0a:74:a7:
                    42:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:7C:21:48:7C:FB:B3:D7:D7:5A:94:72:7D:31:85:69:F0:31:B3:3A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1d9802f5-2b41-4e83-b0d2-b35ec68f6bb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.178.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         89:a2:f2:5f:05:c6:35:6c:ce:7d:59:ac:7e:8e:4f:bd:75:1c:
         49:39:03:aa:80:2c:ee:b9:43:30:27:4a:dd:4f:ec:b8:e8:d7:
         bd:d0:30:81:b1:30:fb:fd:2e:43:c9:1f:fa:0d:a6:26:a5:1c:
         a6:00:62:db:ff:0a:59:01:2f:df:a2:91:74:7e:f0:6c:bc:6a:
         f0:2e:43:df:88:9e:c8:72:ac:70:1e:6a:c7:b7:83:ed:a3:e9:
         eb:86:d9:c7:e4:17:90:73:15:0f:04:8c:cc:fa:ac:4f:8d:34:
         cb:2c:c0:f3:3a:23:9e:c0:3d:26:f5:32:34:9e:82:b6:73:7b:
         88:ce:9c:49:b1:5c:41:fd:69:b5:84:ff:36:91:b8:55:a4:35:
         17:53:80:e2:55:33:43:1b:ee:98:c1:2d:2f:cd:95:9d:20:c0:
         0c:5f:b3:bf:35:58:c5:a4:fc:cf:01:08:b5:a4:c4:67:47:a7:
         ca:fe:bb:ef:f8:aa:f4:d9:33:ec:48:8e:6d:65:c5:13:3d:9c:
         2b:70:e3:de:7f:e9:d6:90:fd:da:08:64:ed:b7:8a:5e:dc:29:
         25:b0:11:e2:05:fb:2a:19:14:72:11:5b:99:69:0e:bb:56:39:
         9e:81:0e:71:bb:98:4e:28:4c:30:51:81:e7:f3:b2:da:85:11:
         66:85:d0:d1
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUMcLFHIuMgaBdSGrqNSAhyNFdoLQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjEzMDA0MTI3WhcNMjUwNzE4MjM1OTU5
WjB6MUkwRwYDVQQFE0BkYjkzNjhmOGI4NGI5YWY4NTNiMzg2NDc5N2YxMGEwMGYx
MzYyNGIzYzJiNjMwMGRkMzk5MjEwZTlkODE4YThkMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDXPRjeFlRSTQnHc/OJzx45EFRjojoNzbC/Vmv0BqL9ujWE
lvslHZr42Hw/nIIGdZduj0PdKX9COf/x4FTNC5kTrD31Cq6Kzxkwf/y86Nnm6YSB
A0z85tcWbVka5AvrEBssM5fzGfYGj6kxzoVVcVZgYO83OfI7bBjRicQfJQRcrDDU
rnATuLQJCPtpGoXhq7HwLMsEZvWnzS6mR3aBAbSbaEImzglEsy6P/TptiVTs2wJV
9eqQpNxzJCE8ho6Y5U7dLEyfVo4SlJO2RSZm1x0DaELccCKpdmIDijy1W/wo02PX
zLc3bVssAFTUixEADHNhOL1rSFLlBG4+Wwp0p0LdAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU23whSHz7s9fXWpRyfTGFafAxszowHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzFkOTgwMmY1LTJiNDEtNGU4My1iMGQyLWIzNWVjNjhmNmJiOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAahsoAwDQYJKoZIhvcNAQELBQADggEBAImi8l8FxjVszn1ZrH6OT711HEk5
A6qALO65QzAnSt1P7Ljo173QMIGxMPv9LkPJH/oNpialHKYAYtv/ClkBL9+ikXR+
8Gy8avAuQ9+InshyrHAease3g+2j6euG2cfkF5BzFQ8EjMz6rE+NNMsswPM6I57A
PSb1MjSegrZze4jOnEmxXEH9abWE/zaRuFWkNRdTgOJVM0Mb7pjBLS/NlZ0gwAxf
s781WMWk/M8BCLWkxGdHp8r+u+/4qvTZM+xIjm1lxRM9nCtw495/6daQ/doIZO23
il7cKSWwEeIF+yoZFHIRW5lpDrtWOZ6BDnG7mE4oTDBRgefzstqFEWaF0NE=
-----END CERTIFICATE-----
Generated at Mon Jun 16 02:41:16 2025 by rpki-client