Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6df0939-7cc3-4196-b4ea-d41d4fb4431a.roa
File:                     f6df0939-7cc3-4196-b4ea-d41d4fb4431a.roa (raw, json)
Hash identifier:          /ZCO/ZL7yeyRRpJyu4HaIxRcOB9Qro/T5LU+WNjarEo=
Subject key identifier:   EC:92:9C:7D:74:08:A8:FD:81:C3:08:7E:A1:05:37:B9:96:F0:6A:6D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       437846181847454783BC1EC7BA4F79C63127D6B4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6df0939-7cc3-4196-b4ea-d41d4fb4431a.roa
Signing time:             Fri 25 Apr 2025 00:20:31 +0000
ROA not before:           Fri 25 Apr 2025 00:20:31 +0000
ROA not after:            Fri 30 May 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        216.182.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:78:46:18:18:47:45:47:83:bc:1e:c7:ba:4f:79:c6:31:27:d6:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 25 00:20:31 2025 GMT
            Not After : May 30 23:59:59 2025 GMT
        Subject: serialNumber=f51cb9899039ecf89d6203293b2ac48c72d247b1c1b26e55894b24a2936c705c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9d:2b:0e:5a:6a:0b:17:92:db:f1:11:fe:c7:
                    b0:e6:b6:b6:8c:30:50:af:4d:25:23:b8:51:38:29:
                    41:c7:ef:8f:0e:d7:09:33:d2:e7:6e:c8:d3:83:23:
                    97:16:38:c3:df:c2:9c:da:4b:7c:76:b0:8d:63:73:
                    8f:ac:c1:cc:33:13:4c:c3:ac:4e:fc:a7:a7:31:d6:
                    87:77:2b:9e:c3:7e:a6:48:e3:95:f9:bb:6b:9e:13:
                    d2:8d:0d:a3:51:c9:69:c3:d7:5a:f8:11:d1:ff:cf:
                    73:4a:80:d5:cb:38:72:25:2e:fb:7b:e6:b1:fc:8c:
                    ce:04:ad:91:e3:1e:72:11:01:87:12:5d:d6:8b:fc:
                    c7:e0:1c:a1:66:86:e1:93:5a:b1:7d:08:e6:d3:a6:
                    21:a0:20:44:33:62:32:cb:c9:38:69:ec:87:f8:43:
                    36:85:d4:22:08:73:5d:4d:e0:ea:5e:cc:46:43:fe:
                    06:65:00:c2:f0:27:41:54:88:dd:31:83:6c:16:9d:
                    fe:a1:4d:9b:45:b6:14:ef:b2:46:ee:18:4f:6c:d0:
                    7a:e6:bb:44:31:f1:62:7f:47:1d:bc:01:42:c4:2e:
                    08:6b:58:0a:0e:9c:4e:77:7e:ea:02:38:d8:15:b9:
                    e3:5b:1b:a5:e7:7b:e6:32:82:b4:2f:46:c6:9a:05:
                    f5:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:92:9C:7D:74:08:A8:FD:81:C3:08:7E:A1:05:37:B9:96:F0:6A:6D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6df0939-7cc3-4196-b4ea-d41d4fb4431a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.182.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:9e:ef:9b:a8:cf:15:ff:17:7e:08:e1:1c:69:6d:a3:27:c4:
         4f:d0:27:68:c5:a8:db:d8:d9:7e:26:4c:f4:f2:56:f3:92:27:
         68:c4:a3:88:57:5f:eb:0e:83:31:b1:e9:61:f4:0f:74:93:5a:
         d1:39:17:61:a0:77:55:97:0c:3c:71:27:86:53:1f:ce:31:d8:
         dc:7b:17:85:26:ef:05:80:10:7c:54:d7:4d:12:4e:24:f9:91:
         6e:f0:e9:b1:5e:5e:cf:14:37:ea:66:50:f3:7f:bb:61:b6:92:
         82:53:02:ed:38:ed:11:72:ec:58:cb:ce:4c:0f:57:a6:e4:56:
         be:3a:64:c9:9c:af:b8:c5:9d:02:b3:8f:f1:d6:bd:29:e4:54:
         07:62:9c:66:f6:05:92:e7:2a:c8:db:1d:fd:d6:ac:06:f9:2e:
         04:bf:af:e0:d3:01:9b:22:3a:d9:0d:51:40:a1:83:36:e4:ac:
         f5:5d:f7:8c:0e:9f:67:de:39:c4:5d:de:f2:f0:16:35:6f:91:
         0e:2d:70:f6:f9:18:30:0d:b2:02:0f:af:07:18:8c:45:74:c3:
         4e:15:af:43:1e:d0:2f:12:0d:79:c0:8a:55:2b:b6:6e:45:65:
         5e:bb:b9:b4:b7:28:0e:c3:44:92:80:21:2b:db:f9:fe:d8:0a:
         17:e3:a5:ef
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUQ3hGGBhHRUeDvB7Huk95xjEn1rQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDI1MDAyMDMxWhcNMjUwNTMwMjM1OTU5
WjB6MUkwRwYDVQQFE0BmNTFjYjk4OTkwMzllY2Y4OWQ2MjAzMjkzYjJhYzQ4Yzcy
ZDI0N2IxYzFiMjZlNTU4OTRiMjRhMjkzNmM3MDVjMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCanSsOWmoLF5Lb8RH+x7DmtraMMFCvTSUjuFE4KUHH748O
1wkz0uduyNODI5cWOMPfwpzaS3x2sI1jc4+swcwzE0zDrE78p6cx1od3K57DfqZI
45X5u2ueE9KNDaNRyWnD11r4EdH/z3NKgNXLOHIlLvt75rH8jM4ErZHjHnIRAYcS
XdaL/MfgHKFmhuGTWrF9CObTpiGgIEQzYjLLyThp7If4QzaF1CIIc11N4OpezEZD
/gZlAMLwJ0FUiN0xg2wWnf6hTZtFthTvskbuGE9s0Hrmu0Qx8WJ/Rx28AULELghr
WAoOnE53fuoCONgVueNbG6Xne+YygrQvRsaaBfU9AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU7JKcfXQIqP2Bwwh+oQU3uZbwam0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2Y2ZGYwOTM5LTdjYzMtNDE5Ni1iNGVhLWQ0MWQ0ZmI0NDMxYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBALYtugwDQYJKoZIhvcNAQELBQADggEBAEWe75uozxX/F34I4RxpbaMnxE/Q
J2jFqNvY2X4mTPTyVvOSJ2jEo4hXX+sOgzGx6WH0D3STWtE5F2Ggd1WXDDxxJ4ZT
H84x2Nx7F4Um7wWAEHxU100STiT5kW7w6bFeXs8UN+pmUPN/u2G2koJTAu047RFy
7FjLzkwPV6bkVr46ZMmcr7jFnQKzj/HWvSnkVAdinGb2BZLnKsjbHf3WrAb5LgS/
r+DTAZsiOtkNUUChgzbkrPVd94wOn2feOcRd3vLwFjVvkQ4tcPb5GDANsgIPrwcY
jEV0w04Vr0Me0C8SDXnAilUrtm5FZV67ubS3KA7DRJKAISvb+f7YChfjpe8=
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:26:07 2025 by rpki-client