Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24d9276b-263e-407d-a430-3b8b325a790d.roa
File:                     24d9276b-263e-407d-a430-3b8b325a790d.roa (raw, json)
Hash identifier:          uRDrNaZ/HQgAZkK9DMC86spBZYbpgaWn3q/dHyGwVM0=
Subject key identifier:   E9:9E:02:39:52:6E:13:84:BA:2B:A1:39:96:53:4F:B8:F6:B6:79:1A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       72D34FEFAFDF9F6B99FF85770CA3E1ED3BDD53BE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24d9276b-263e-407d-a430-3b8b325a790d.roa
Signing time:             Mon 04 Aug 2025 15:41:07 +0000
ROA not before:           Mon 04 Aug 2025 15:41:07 +0000
ROA not after:            Mon 08 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        110.239.12.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:d3:4f:ef:af:df:9f:6b:99:ff:85:77:0c:a3:e1:ed:3b:dd:53:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  4 15:41:07 2025 GMT
            Not After : Sep  8 23:59:59 2025 GMT
        Subject: serialNumber=95a1a3e7d2d483bd6903c9996aaea526facf75b99ecbd58b9fd85c6907ebd4fd, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:af:b2:01:9a:2a:c0:8f:5c:b1:dd:aa:c2:09:
                    04:17:93:a3:83:82:0c:09:08:66:bf:50:66:90:2a:
                    97:de:d0:e1:c7:b0:59:71:8f:ea:bb:6f:40:a3:22:
                    e7:54:22:6e:dc:dd:41:44:bf:65:eb:f0:b5:ec:dc:
                    df:a7:c7:0b:1c:7d:0c:3f:8a:b1:da:c8:cc:08:29:
                    9e:78:81:e8:96:91:04:f8:74:83:ad:6d:03:cc:b9:
                    ad:aa:15:17:60:de:ae:77:39:4c:36:52:44:18:bd:
                    80:cc:cc:45:e1:db:1a:98:ae:1d:bf:a8:56:63:06:
                    43:8a:12:5d:06:b8:84:8f:75:8f:64:09:11:50:7a:
                    6e:8c:ad:57:f5:97:34:e6:4f:72:71:5c:48:b0:ba:
                    2c:96:8d:e2:ce:1c:63:8d:7e:9c:ec:8a:fe:7a:e6:
                    53:1d:6a:ac:72:5a:ec:71:9a:6f:c8:a0:40:7d:30:
                    15:fe:00:45:9f:3b:01:33:37:6a:6e:37:5f:76:42:
                    f3:72:80:61:f8:14:32:01:0f:ad:46:3c:d5:fb:df:
                    9b:ac:1c:83:68:c9:51:19:6c:ba:e2:27:a0:18:1f:
                    d6:5f:f3:ec:a0:b2:f3:ff:84:27:ba:04:1f:9f:81:
                    9b:d4:46:9a:81:cb:ba:7e:d8:41:72:b8:bc:df:8c:
                    d3:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:9E:02:39:52:6E:13:84:BA:2B:A1:39:96:53:4F:B8:F6:B6:79:1A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24d9276b-263e-407d-a430-3b8b325a790d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.239.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:f6:65:3b:70:20:36:61:7a:12:7b:52:41:6d:e9:a8:45:3f:
         0e:28:38:c7:87:2d:25:85:1e:05:a8:76:ee:ff:48:41:69:d5:
         6d:6b:dd:9c:b2:5b:a5:a5:d3:c9:6f:fd:f6:ba:58:75:70:66:
         a3:ad:03:3d:75:d8:80:56:02:28:b3:61:7a:e1:7d:3a:ff:18:
         09:c5:8d:3b:66:84:11:c6:f5:f8:6d:01:b2:47:9c:d8:c6:f5:
         9b:cb:93:39:ab:33:64:3b:2f:e0:af:7d:1e:cc:88:01:ec:17:
         af:27:fb:49:5d:cf:02:cc:85:c5:42:17:49:dc:89:40:72:52:
         4b:63:61:94:5f:ba:9c:f4:ac:1a:71:77:93:58:91:8a:f2:0e:
         54:18:34:2c:25:12:8d:d4:c5:3b:49:75:f3:2a:a5:22:5a:14:
         5c:93:fb:6b:9c:49:77:67:8e:97:e0:1a:f5:e3:88:0e:00:b2:
         f1:56:7e:8d:f2:07:25:81:72:02:bb:7e:bc:1e:0b:21:a1:94:
         5d:7a:f0:a3:26:5c:60:8e:d6:3c:ce:a4:25:4d:da:8e:de:b5:
         aa:09:3d:68:d2:5f:9c:a1:cb:72:bf:b4:b4:3d:10:7d:3c:1b:
         b7:3e:51:49:90:05:1b:3a:c7:06:75:38:aa:51:d6:aa:f6:6d:
         71:88:a3:f5
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUctNP76/fn2uZ/4V3DKPh7TvdU74wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA0MTU0MTA3WhcNMjUwOTA4MjM1OTU5
WjB6MUkwRwYDVQQFE0A5NWExYTNlN2QyZDQ4M2JkNjkwM2M5OTk2YWFlYTUyNmZh
Y2Y3NWI5OWVjYmQ1OGI5ZmQ4NWM2OTA3ZWJkNGZkMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCrr7IBmirAj1yx3arCCQQXk6ODggwJCGa/UGaQKpfe0OHH
sFlxj+q7b0CjIudUIm7c3UFEv2Xr8LXs3N+nxwscfQw/irHayMwIKZ54geiWkQT4
dIOtbQPMua2qFRdg3q53OUw2UkQYvYDMzEXh2xqYrh2/qFZjBkOKEl0GuISPdY9k
CRFQem6MrVf1lzTmT3JxXEiwuiyWjeLOHGONfpzsiv565lMdaqxyWuxxmm/IoEB9
MBX+AEWfOwEzN2puN192QvNygGH4FDIBD61GPNX735usHINoyVEZbLriJ6AYH9Zf
8+ygsvP/hCe6BB+fgZvURpqBy7p+2EFyuLzfjNOVAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU6Z4COVJuE4S6K6E5llNPuPa2eRowHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzI0ZDkyNzZiLTI2M2UtNDA3ZC1hNDMwLTNiOGIzMjVhNzkwZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAFu7wwwDQYJKoZIhvcNAQELBQADggEBAIr2ZTtwIDZhehJ7UkFt6ahFPw4o
OMeHLSWFHgWodu7/SEFp1W1r3ZyyW6Wl08lv/fa6WHVwZqOtAz112IBWAiizYXrh
fTr/GAnFjTtmhBHG9fhtAbJHnNjG9ZvLkzmrM2Q7L+CvfR7MiAHsF68n+0ldzwLM
hcVCF0nciUByUktjYZRfupz0rBpxd5NYkYryDlQYNCwlEo3UxTtJdfMqpSJaFFyT
+2ucSXdnjpfgGvXjiA4AsvFWfo3yByWBcgK7frweCyGhlF168KMmXGCO1jzOpCVN
2o7etaoJPWjSX5yhy3K/tLQ9EH08G7c+UUmQBRs6xwZ1OKpR1qr2bXGIo/U=
-----END CERTIFICATE-----
Generated at Wed Aug 6 05:12:33 2025 by rpki-client