Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d556d4ad-3617-4c1e-8e59-ecf8fec0873e.roa
File:                     d556d4ad-3617-4c1e-8e59-ecf8fec0873e.roa (raw, json)
Hash identifier:          nhvmfvTTrfAZZpA3T4E46lVeSFg7wMbCrSZnTtGSbK0=
Subject key identifier:   C2:49:39:B2:23:53:97:FC:DC:BF:56:B2:8A:98:38:60:5E:BA:5A:1E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       377A19E5F0059910CD16B0FF9E88E6D892CD57E2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d556d4ad-3617-4c1e-8e59-ecf8fec0873e.roa
Signing time:             Tue 03 Jun 2025 00:11:01 +0000
ROA not before:           Tue 03 Jun 2025 00:11:01 +0000
ROA not after:            Tue 08 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        184.72.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:7a:19:e5:f0:05:99:10:cd:16:b0:ff:9e:88:e6:d8:92:cd:57:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun  3 00:11:01 2025 GMT
            Not After : Jul  8 23:59:59 2025 GMT
        Subject: serialNumber=e843fa782a2bd6bda5848cd24b1c8e3602312b40ff238739ca5029c4137b936f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:75:a2:1a:69:63:93:22:24:24:9f:53:50:5d:
                    e7:c8:8e:4f:90:9e:e2:9c:8b:9d:31:0d:ff:34:6a:
                    02:99:bb:3a:62:39:1b:a3:e8:96:c7:52:5f:21:29:
                    f9:1f:52:68:42:14:ca:2c:cc:66:23:ef:fc:32:72:
                    5c:61:68:d9:e0:90:f6:30:d6:db:d3:78:1f:17:80:
                    96:e0:00:e0:99:2e:f2:52:f3:0f:0e:3f:29:92:03:
                    c8:20:b5:e7:ef:22:68:8f:96:28:f3:de:7c:62:48:
                    28:b6:1f:81:b9:ad:f5:e1:c5:a4:66:93:93:15:5f:
                    6b:00:f8:80:a9:8e:b5:bf:c5:fb:f2:3b:4c:2e:2b:
                    20:ea:80:7b:60:b2:bb:33:fe:52:91:cb:be:29:3a:
                    d0:15:43:a6:1b:b6:d1:9b:52:72:17:53:17:19:94:
                    2a:79:e0:c7:07:dc:21:36:f0:51:d6:4b:13:02:39:
                    e8:d6:04:59:b5:cf:73:94:ab:79:4e:c9:be:4a:02:
                    33:19:6d:d2:1b:ee:e2:c1:53:e0:76:cd:23:9a:2e:
                    3f:00:e7:a8:a8:fb:c0:d9:68:a3:b0:a1:0d:4d:db:
                    b1:75:d3:3d:38:89:c9:21:14:89:f0:9f:fc:bf:a7:
                    0b:90:7e:f2:77:ca:a9:bb:05:f4:a5:35:76:bd:e7:
                    2d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:49:39:B2:23:53:97:FC:DC:BF:56:B2:8A:98:38:60:5E:BA:5A:1E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d556d4ad-3617-4c1e-8e59-ecf8fec0873e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.72.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:49:15:54:1d:b0:27:62:6e:f3:73:95:4c:2f:e0:09:83:b9:
         05:90:4b:42:42:06:7a:c0:f3:d1:21:5a:02:63:9a:ba:f2:aa:
         34:e5:05:a2:a7:31:56:e2:1c:fd:c1:30:ba:f8:1b:14:78:23:
         9b:04:94:77:ae:6f:ee:24:bf:93:70:4b:8f:c6:ed:03:cd:f8:
         7f:ac:1d:7a:e0:88:3f:e0:a8:ef:eb:f8:c1:45:19:c2:88:64:
         75:7e:41:7c:60:5f:24:8f:30:ff:37:40:98:0f:59:69:7a:12:
         69:4d:6b:9d:b3:c7:38:31:1a:0c:1e:99:3b:61:3e:11:15:17:
         a5:d7:e5:b5:05:8d:14:85:3a:fa:7a:47:11:3e:31:3b:cf:fa:
         b4:3b:bc:da:0b:51:8c:28:15:e2:4b:85:7e:d8:3a:6f:76:10:
         f7:45:8e:07:13:be:a1:12:96:df:2c:4e:32:a5:2c:c5:5d:5f:
         57:51:94:09:73:b4:8d:21:a4:b0:6f:b0:ca:ab:d6:86:d0:98:
         e1:8c:7f:ad:8c:c3:84:6e:e4:c1:8c:2b:fc:f8:14:39:95:41:
         7f:e9:18:47:96:8e:62:43:b0:d7:c9:28:e5:96:36:76:f3:b6:
         81:ce:00:74:61:8d:0c:f3:f3:4e:ef:8b:eb:0e:36:41:70:2e:
         68:33:f6:ca
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUN3oZ5fAFmRDNFrD/nojm2JLNV+IwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjAzMDAxMTAxWhcNMjUwNzA4MjM1OTU5
WjB6MUkwRwYDVQQFE0BlODQzZmE3ODJhMmJkNmJkYTU4NDhjZDI0YjFjOGUzNjAy
MzEyYjQwZmYyMzg3MzljYTUwMjljNDEzN2I5MzZmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDPdaIaaWOTIiQkn1NQXefIjk+QnuKci50xDf80agKZuzpi
ORuj6JbHUl8hKfkfUmhCFMoszGYj7/wyclxhaNngkPYw1tvTeB8XgJbgAOCZLvJS
8w8OPymSA8ggtefvImiPlijz3nxiSCi2H4G5rfXhxaRmk5MVX2sA+ICpjrW/xfvy
O0wuKyDqgHtgsrsz/lKRy74pOtAVQ6YbttGbUnIXUxcZlCp54McH3CE28FHWSxMC
OejWBFm1z3OUq3lOyb5KAjMZbdIb7uLBU+B2zSOaLj8A56io+8DZaKOwoQ1N27F1
0z04ickhFInwn/y/pwuQfvJ3yqm7BfSlNXa95y15AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUwkk5siNTl/zcv1ayipg4YF66Wh4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2Q1NTZkNGFkLTM2MTctNGMxZS04ZTU5LWVjZjhmZWMwODczZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAC4SF0wDQYJKoZIhvcNAQELBQADggEBAMhJFVQdsCdibvNzlUwv4AmDuQWQ
S0JCBnrA89EhWgJjmrryqjTlBaKnMVbiHP3BMLr4GxR4I5sElHeub+4kv5NwS4/G
7QPN+H+sHXrgiD/gqO/r+MFFGcKIZHV+QXxgXySPMP83QJgPWWl6EmlNa52zxzgx
GgwemTthPhEVF6XX5bUFjRSFOvp6RxE+MTvP+rQ7vNoLUYwoFeJLhX7YOm92EPdF
jgcTvqESlt8sTjKlLMVdX1dRlAlztI0hpLBvsMqr1obQmOGMf62Mw4Ru5MGMK/z4
FDmVQX/pGEeWjmJDsNfJKOWWNnbztoHOAHRhjQzz807vi+sONkFwLmgz9so=
-----END CERTIFICATE-----
Generated at Sat Jun 14 06:47:36 2025 by rpki-client