Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c589a841-11da-4452-b1db-8ead5539a844.roa
File:                     c589a841-11da-4452-b1db-8ead5539a844.roa (raw, json)
Hash identifier:          ps+Yx8Whie9SHzmv4oHvQKct9DqBsYJenfoecgBt6ws=
Subject key identifier:   08:ED:D4:34:E8:C0:19:EA:0F:0C:78:41:5A:78:4B:A4:38:61:5B:C0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2F0F7DA1DB367AD6373963BE3181EAFB5A5D8D20
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c589a841-11da-4452-b1db-8ead5539a844.roa
Signing time:             Wed 04 Jun 2025 00:30:29 +0000
ROA not before:           Wed 04 Jun 2025 00:30:29 +0000
ROA not after:            Wed 09 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.151.184.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:0f:7d:a1:db:36:7a:d6:37:39:63:be:31:81:ea:fb:5a:5d:8d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun  4 00:30:29 2025 GMT
            Not After : Jul  9 23:59:59 2025 GMT
        Subject: serialNumber=45cd6f856f7d07b48e1c4dcf7b5efcba3c9fca45ab2c114b9e03f6ce9d68783f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ce:c7:7e:56:1f:5a:2d:14:7f:f8:fa:87:84:
                    a8:b1:27:c7:6c:fe:17:32:d9:fc:c0:f3:21:85:7c:
                    3f:66:ed:73:88:95:76:74:d3:83:b3:d9:5c:0b:4d:
                    bc:10:42:b6:56:94:71:64:02:69:9b:dc:3c:f4:e2:
                    cb:31:30:c9:e9:43:4c:d7:96:76:d5:62:df:b9:b0:
                    ff:80:6d:fa:b9:9e:77:d0:8d:69:c2:cf:a6:73:b8:
                    ee:a4:2d:78:64:78:18:8b:2b:2c:ef:e3:f7:f6:84:
                    9e:c2:41:f0:f8:6a:e0:2d:e9:dc:da:36:84:9d:c7:
                    78:da:cd:b3:a0:14:a8:8c:e7:e4:fd:d5:0c:86:7b:
                    bd:83:57:ec:b4:69:1b:eb:84:95:09:c9:b6:b7:6b:
                    50:28:87:d6:ad:f5:e7:05:46:b1:7b:cf:ac:f5:77:
                    e8:48:1b:52:bc:2e:d4:79:6c:87:19:26:70:35:1c:
                    12:95:e6:2b:2e:19:00:65:c5:5f:dc:40:2a:b4:f4:
                    a0:75:39:8f:85:12:68:12:a1:1d:01:3a:07:a4:cf:
                    bb:6c:00:79:0b:00:01:4c:d8:00:15:7c:d8:3e:d1:
                    0d:31:62:c6:c2:cf:b8:f8:1f:f2:b1:de:6c:38:63:
                    84:6a:9a:28:ca:05:b0:30:f2:4e:71:25:66:83:7a:
                    84:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:ED:D4:34:E8:C0:19:EA:0F:0C:78:41:5A:78:4B:A4:38:61:5B:C0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c589a841-11da-4452-b1db-8ead5539a844.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.151.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:b5:a0:70:da:12:f3:29:40:71:dc:0e:8e:8c:1c:5f:db:ab:
         97:9a:65:d2:ff:36:60:6c:d5:e6:75:f7:51:90:fa:55:99:dc:
         54:b9:38:7e:a8:d8:d3:90:e1:1d:df:ac:6f:81:e6:13:86:3c:
         94:85:b6:20:60:c3:4e:f2:2e:d9:77:11:2a:b2:0f:f2:fd:e2:
         8d:43:46:a2:88:80:37:fc:16:dc:c5:92:d2:3d:f2:f4:13:52:
         17:a2:26:5c:16:c7:b7:c9:8d:6e:1d:7f:06:16:b9:03:61:27:
         17:2a:c6:ce:02:c7:7c:ea:c3:17:44:92:0a:09:f3:e6:06:be:
         3b:2d:9a:cc:78:97:d1:fb:8d:1e:ab:62:dd:e0:a8:b9:1d:54:
         e1:fd:ff:90:23:80:97:e7:e4:5d:19:8b:59:f7:3e:7a:c4:e3:
         f5:80:6a:2a:ca:bc:3a:f8:0d:86:54:01:82:49:5d:3d:8d:0a:
         5f:a6:48:4a:79:2b:29:ef:42:c9:ca:05:67:ae:0b:c9:86:cf:
         2a:94:5e:e9:ee:86:50:6c:a8:a5:46:35:25:b9:c5:60:3b:64:
         0b:b5:e7:45:52:45:31:fb:71:93:48:56:6e:f6:3b:b5:eb:6e:
         cd:d4:67:b2:f4:00:1f:fb:c6:d7:fe:d6:45:e3:a0:88:05:66:
         c3:8d:5f:f7
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIULw99ods2etY3OWO+MYHq+1pdjSAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjA0MDAzMDI5WhcNMjUwNzA5MjM1OTU5
WjB6MUkwRwYDVQQFE0A0NWNkNmY4NTZmN2QwN2I0OGUxYzRkY2Y3YjVlZmNiYTNj
OWZjYTQ1YWIyYzExNGI5ZTAzZjZjZTlkNjg3ODNmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC7zsd+Vh9aLRR/+PqHhKixJ8ds/hcy2fzA8yGFfD9m7XOI
lXZ004Oz2VwLTbwQQrZWlHFkAmmb3Dz04ssxMMnpQ0zXlnbVYt+5sP+Abfq5nnfQ
jWnCz6ZzuO6kLXhkeBiLKyzv4/f2hJ7CQfD4auAt6dzaNoSdx3jazbOgFKiM5+T9
1QyGe72DV+y0aRvrhJUJyba3a1Aoh9at9ecFRrF7z6z1d+hIG1K8LtR5bIcZJnA1
HBKV5isuGQBlxV/cQCq09KB1OY+FEmgSoR0BOgekz7tsAHkLAAFM2AAVfNg+0Q0x
YsbCz7j4H/Kx3mw4Y4RqmijKBbAw8k5xJWaDeoRJAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUCO3UNOjAGeoPDHhBWnhLpDhhW8AwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2M1ODlhODQxLTExZGEtNDQ1Mi1iMWRiLThlYWQ1NTM5YTg0NC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAFjl7gwDQYJKoZIhvcNAQELBQADggEBAEm1oHDaEvMpQHHcDo6MHF/bq5ea
ZdL/NmBs1eZ191GQ+lWZ3FS5OH6o2NOQ4R3frG+B5hOGPJSFtiBgw07yLtl3ESqy
D/L94o1DRqKIgDf8FtzFktI98vQTUheiJlwWx7fJjW4dfwYWuQNhJxcqxs4Cx3zq
wxdEkgoJ8+YGvjstmsx4l9H7jR6rYt3gqLkdVOH9/5AjgJfn5F0Zi1n3PnrE4/WA
airKvDr4DYZUAYJJXT2NCl+mSEp5KynvQsnKBWeuC8mGzyqUXunuhlBsqKVGNSW5
xWA7ZAu150VSRTH7cZNIVm72O7Xrbs3UZ7L0AB/7xtf+1kXjoIgFZsONX/c=
-----END CERTIFICATE-----
Generated at Sat Jun 14 06:41:34 2025 by rpki-client