Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f59c4022-6f7f-4f90-9478-97502a12f586.roa
File:                     f59c4022-6f7f-4f90-9478-97502a12f586.roa (raw, json)
Hash identifier:          1xct/ZzUK1CbJ8HRZp7vVFuMY/og3GJzRkDOI+Un3v4=
Subject key identifier:   FA:64:A0:64:A5:A5:76:1B:C2:AD:36:A2:C5:AE:28:31:F0:FD:4E:A5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7291216B3ED9FBA1108325FCCF142085E2355153
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f59c4022-6f7f-4f90-9478-97502a12f586.roa
Signing time:             Mon 02 Jun 2025 15:10:20 +0000
ROA not before:           Mon 02 Jun 2025 15:10:20 +0000
ROA not after:            Mon 07 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        15.103.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:91:21:6b:3e:d9:fb:a1:10:83:25:fc:cf:14:20:85:e2:35:51:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun  2 15:10:20 2025 GMT
            Not After : Jul  7 23:59:59 2025 GMT
        Subject: serialNumber=cc7958c00d7770771a1b043989c06e70f2fcbfe581ae2c02e37a8ea425975470, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:47:b8:2a:cf:15:be:27:64:59:c6:9d:2c:cc:
                    6f:88:58:52:5a:08:2f:99:59:0e:b7:59:c7:f9:39:
                    8e:80:91:82:af:1d:85:65:f9:fc:56:7e:f7:82:ac:
                    8b:14:04:f1:2b:97:91:75:2a:a0:cc:d4:56:a9:69:
                    51:ee:bd:ef:2a:1c:8e:63:b7:a0:af:b8:d9:33:b3:
                    65:9c:a7:93:6e:1c:07:ed:3b:56:5a:23:8e:8c:c2:
                    01:43:4c:8d:fc:c2:a9:58:87:70:9c:1b:22:58:1e:
                    aa:c2:a0:b7:19:ca:78:ec:b0:41:e5:da:00:6f:d9:
                    b7:29:fa:5d:c1:32:09:9d:4c:9e:db:15:87:bd:0e:
                    58:cc:d4:79:2b:a2:92:9d:f2:3e:ac:f3:35:f8:71:
                    a9:e1:52:75:88:a1:78:95:17:70:c9:ea:c9:43:1f:
                    d7:a2:9c:41:75:d0:09:53:f0:71:3b:19:35:e7:74:
                    89:cc:3b:e7:aa:1b:4d:ee:d3:11:eb:cd:86:51:55:
                    bc:ff:68:33:27:ba:5b:9e:f8:3b:01:ad:32:ec:d5:
                    0a:f4:84:c0:09:be:50:b2:ab:36:b2:24:c7:ff:de:
                    9d:15:fe:df:b0:4e:dd:5d:f8:b8:80:e2:56:c5:59:
                    81:99:35:c9:c4:5f:29:9a:f7:ed:04:34:f1:01:3d:
                    1c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:64:A0:64:A5:A5:76:1B:C2:AD:36:A2:C5:AE:28:31:F0:FD:4E:A5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f59c4022-6f7f-4f90-9478-97502a12f586.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.103.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         d2:48:a8:3e:b6:51:a0:d4:ec:e4:2b:64:67:52:69:33:41:32:
         e7:e6:b8:dc:74:68:b4:bb:2d:32:a9:58:48:34:e9:93:1c:55:
         46:fe:63:b2:28:cc:3b:9a:fc:af:ef:19:3f:32:2f:d7:06:3b:
         69:a5:13:a5:da:71:8f:ad:b5:80:eb:c2:72:72:3b:37:81:e6:
         cd:48:5b:6e:14:96:7c:2c:f7:c2:4b:c1:27:35:97:6d:db:23:
         a5:82:cd:2a:e3:ea:f7:1f:78:81:21:9f:4a:a8:81:92:4a:a7:
         de:9b:b6:fd:3d:50:c6:55:4f:35:84:a4:e1:f4:19:72:59:d3:
         91:a8:a9:f2:73:fd:30:f2:2b:ce:bf:96:d4:46:69:67:f2:d1:
         a0:01:e2:4a:c9:e1:e1:da:d7:23:fa:60:18:e5:3e:e3:58:c4:
         b6:6e:c1:1d:27:3e:0f:9c:84:15:99:01:6b:d7:9d:55:cc:ad:
         e9:f7:fe:7c:84:27:e4:d1:ff:c2:11:a1:12:30:3d:f8:28:5f:
         95:9b:da:b2:6d:ca:69:f7:ca:54:cf:4e:1a:0e:ee:cc:6b:35:
         23:00:14:c4:a7:f4:ba:6d:b2:f6:9b:0a:5b:34:5d:be:c4:be:
         d6:85:6a:b2:dc:26:57:c0:9a:3b:c2:01:cb:d7:b8:61:7e:11:
         02:6f:37:5e
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUcpEhaz7Z+6EQgyX8zxQgheI1UVMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjAyMTUxMDIwWhcNMjUwNzA3MjM1OTU5
WjB6MUkwRwYDVQQFE0BjYzc5NThjMDBkNzc3MDc3MWExYjA0Mzk4OWMwNmU3MGYy
ZmNiZmU1ODFhZTJjMDJlMzdhOGVhNDI1OTc1NDcwMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCjR7gqzxW+J2RZxp0szG+IWFJaCC+ZWQ63Wcf5OY6AkYKv
HYVl+fxWfveCrIsUBPErl5F1KqDM1FapaVHuve8qHI5jt6CvuNkzs2Wcp5NuHAft
O1ZaI46MwgFDTI38wqlYh3CcGyJYHqrCoLcZynjssEHl2gBv2bcp+l3BMgmdTJ7b
FYe9DljM1HkropKd8j6s8zX4canhUnWIoXiVF3DJ6slDH9einEF10AlT8HE7GTXn
dInMO+eqG03u0xHrzYZRVbz/aDMnulue+DsBrTLs1Qr0hMAJvlCyqzayJMf/3p0V
/t+wTt1d+LiA4lbFWYGZNcnEXyma9+0ENPEBPRyzAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQU+mSgZKWldhvCrTaixa4oMfD9TqUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2Y1OWM0MDIyLTZmN2YtNGY5MC05NDc4LTk3NTAyYTEyZjU4Ni5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAPZzANBgkqhkiG9w0BAQsFAAOCAQEA0kioPrZRoNTs5CtkZ1JpM0Ey5+a4
3HRotLstMqlYSDTpkxxVRv5jsijMO5r8r+8ZPzIv1wY7aaUTpdpxj621gOvCcnI7
N4HmzUhbbhSWfCz3wkvBJzWXbdsjpYLNKuPq9x94gSGfSqiBkkqn3pu2/T1QxlVP
NYSk4fQZclnTkaip8nP9MPIrzr+W1EZpZ/LRoAHiSsnh4drXI/pgGOU+41jEtm7B
HSc+D5yEFZkBa9edVcyt6ff+fIQn5NH/whGhEjA9+ChflZvasm3KaffKVM9OGg7u
zGs1IwAUxKf0um2y9psKWzRdvsS+1oVqstwmV8CaO8IBy9e4YX4RAm83Xg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 06:49:02 2025 by rpki-client