Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d9a6d2b4-6eb6-4846-9180-7b5ff8440cf0.roa
File:                     d9a6d2b4-6eb6-4846-9180-7b5ff8440cf0.roa (raw, json)
Hash identifier:          dyqkkktRF3yqOb/CeQOsl6T0gtCa1iGAXuPKe8T3ASs=
Subject key identifier:   BE:27:2C:78:F7:38:8F:14:63:DF:7F:1B:F3:04:F8:88:39:79:D2:6C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1A20AF18D7D63EA30F186AC19EE938D6A92BCE3B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d9a6d2b4-6eb6-4846-9180-7b5ff8440cf0.roa
Signing time:             Wed 11 Jun 2025 00:00:53 +0000
ROA not before:           Wed 11 Jun 2025 00:00:53 +0000
ROA not after:            Wed 16 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        1.178.88.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:20:af:18:d7:d6:3e:a3:0f:18:6a:c1:9e:e9:38:d6:a9:2b:ce:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 11 00:00:53 2025 GMT
            Not After : Jul 16 23:59:59 2025 GMT
        Subject: serialNumber=0441b4c1996d58d1d5360a1428c9a4e9f10f1b51c62d5b863cae6cece74056d5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:1e:49:8d:65:0f:2a:11:31:0b:b2:79:51:04:
                    34:16:ca:8b:3c:9c:8e:d0:51:97:8c:29:ba:72:7a:
                    62:64:97:ae:ea:27:89:fc:f9:c4:c7:0a:d0:81:43:
                    39:1b:e5:05:56:1f:84:28:51:18:7a:15:c8:34:5c:
                    13:c0:42:a2:aa:5c:34:73:8e:51:63:f8:f1:ea:a6:
                    b7:54:90:5a:61:6f:1a:cb:b9:8b:86:a1:4b:7d:d0:
                    23:60:bf:05:2b:92:33:24:57:63:8e:2b:a2:cd:88:
                    25:d6:bd:d6:85:44:28:20:4d:d0:12:66:d1:a1:7d:
                    c6:32:c2:5c:65:e7:21:ed:9a:aa:cf:af:42:6c:ee:
                    41:57:aa:ed:49:af:7c:ba:f5:cf:15:16:fe:43:48:
                    c9:58:99:d6:0e:e2:7f:d5:46:38:fb:6e:d5:80:3a:
                    03:d4:23:43:38:3a:9c:20:5f:84:44:e8:5b:5f:b3:
                    a8:ea:44:f8:d0:8d:87:6c:dd:8e:7f:bb:bb:3c:cf:
                    4a:64:4e:74:d8:d8:32:df:15:98:8f:6b:43:b8:81:
                    7f:8c:5a:ae:e6:2e:55:9a:a4:7c:da:83:5b:5f:67:
                    06:8a:0b:27:66:17:bd:bf:91:db:73:7d:4a:23:29:
                    d6:cc:50:1e:38:37:5e:04:97:ce:75:be:23:cd:1a:
                    ef:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:27:2C:78:F7:38:8F:14:63:DF:7F:1B:F3:04:F8:88:39:79:D2:6C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d9a6d2b4-6eb6-4846-9180-7b5ff8440cf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.178.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         48:e9:4a:4e:f0:2b:8f:89:6f:39:46:38:44:ab:da:b4:dd:1c:
         af:c7:12:e1:b2:9e:0d:d3:ff:7c:85:f6:cd:6a:4f:09:23:61:
         4b:f3:46:93:d2:76:e5:95:ba:76:3c:ee:b2:b9:c6:20:98:90:
         a7:d2:e4:03:6c:62:e7:18:8e:7b:20:09:65:90:24:0d:be:93:
         2f:13:a6:2a:11:b0:3c:1a:f5:e8:4e:30:b9:c1:47:2f:61:5b:
         56:0d:ff:b7:76:34:7e:d9:76:7a:4a:10:8a:28:5a:2e:11:85:
         c9:91:ad:ce:c5:ae:37:9d:1c:9f:e1:98:13:f2:fa:e7:6e:4b:
         55:0d:87:9f:75:7c:02:a3:70:bb:e0:d4:6e:63:ca:e5:a7:db:
         c7:db:d8:45:75:ee:3f:16:58:0c:48:f3:d4:04:c6:65:1f:03:
         22:4b:fc:f4:60:82:2c:98:f0:30:59:f9:24:4b:3c:69:a4:f8:
         bf:99:36:e9:f4:62:c0:16:85:4f:e2:50:a3:92:7d:1b:80:67:
         ab:d3:b9:f7:fd:33:bc:95:99:15:06:b7:6d:f7:d5:bb:bd:c4:
         c7:7f:4b:55:75:be:a6:b9:83:eb:2f:8c:96:79:c9:a9:8b:62:
         93:25:e9:1a:c0:74:a2:3d:b2:d8:ff:e5:5b:72:a1:2a:6b:3d:
         10:9b:6e:28
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUGiCvGNfWPqMPGGrBnuk41qkrzjswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjExMDAwMDUzWhcNMjUwNzE2MjM1OTU5
WjB6MUkwRwYDVQQFE0AwNDQxYjRjMTk5NmQ1OGQxZDUzNjBhMTQyOGM5YTRlOWYx
MGYxYjUxYzYyZDViODYzY2FlNmNlY2U3NDA1NmQ1MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCRHkmNZQ8qETELsnlRBDQWyos8nI7QUZeMKbpyemJkl67q
J4n8+cTHCtCBQzkb5QVWH4QoURh6Fcg0XBPAQqKqXDRzjlFj+PHqprdUkFphbxrL
uYuGoUt90CNgvwUrkjMkV2OOK6LNiCXWvdaFRCggTdASZtGhfcYywlxl5yHtmqrP
r0Js7kFXqu1Jr3y69c8VFv5DSMlYmdYO4n/VRjj7btWAOgPUI0M4OpwgX4RE6Ftf
s6jqRPjQjYds3Y5/u7s8z0pkTnTY2DLfFZiPa0O4gX+MWq7mLlWapHzag1tfZwaK
CydmF72/kdtzfUojKdbMUB44N14El851viPNGu9FAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUvicsePc4jxRj338b8wT4iDl50mwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2Q5YTZkMmI0LTZlYjYtNDg0Ni05MTgwLTdiNWZmODQ0MGNmMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAMBslgwDQYJKoZIhvcNAQELBQADggEBAEjpSk7wK4+JbzlGOESr2rTdHK/H
EuGyng3T/3yF9s1qTwkjYUvzRpPSduWVunY87rK5xiCYkKfS5ANsYucYjnsgCWWQ
JA2+ky8TpioRsDwa9ehOMLnBRy9hW1YN/7d2NH7ZdnpKEIooWi4RhcmRrc7Frjed
HJ/hmBPy+uduS1UNh591fAKjcLvg1G5jyuWn28fb2EV17j8WWAxI89QExmUfAyJL
/PRggiyY8DBZ+SRLPGmk+L+ZNun0YsAWhU/iUKOSfRuAZ6vTuff9M7yVmRUGt233
1bu9xMd/S1V1vqa5g+svjJZ5yamLYpMl6RrAdKI9stj/5VtyoSprPRCbbig=
-----END CERTIFICATE-----
Generated at Sat Jun 14 06:45:41 2025 by rpki-client