Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e96848dd-3369-4e73-af27-2bec7ae42c0e.roa
File:                     e96848dd-3369-4e73-af27-2bec7ae42c0e.roa (raw, json)
Hash identifier:          6QBPF1S3k5d3db7KjisUzVE03hqo1q0ga6jH4r3q12M=
Subject key identifier:   E0:3A:E7:2F:AA:55:02:67:F8:6B:C7:9C:27:BE:6A:38:42:21:A6:82
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       216D5970E4E04E7F949DD686BF13C996A78873E1
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e96848dd-3369-4e73-af27-2bec7ae42c0e.roa
Signing time:             Fri 11 Jul 2025 18:00:13 +0000
ROA not before:           Fri 11 Jul 2025 18:00:13 +0000
ROA not after:            Fri 15 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        173.82.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:6d:59:70:e4:e0:4e:7f:94:9d:d6:86:bf:13:c9:96:a7:88:73:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Jul 11 18:00:13 2025 GMT
            Not After : Aug 15 23:59:59 2025 GMT
        Subject: serialNumber=b73779f0dc58d081b0e5b18e164bf6e2d5764a26616a379515cd86ba289710bd, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a2:c4:cc:07:e7:1d:02:12:61:1f:55:bf:a7:
                    fe:54:38:8e:18:ed:6e:c2:39:5c:37:ec:c6:8e:e6:
                    67:95:27:f2:0a:10:49:d2:ad:a5:ab:7e:61:7d:28:
                    ff:b1:ee:b1:42:81:a9:59:ca:61:29:56:ac:ef:b2:
                    1a:76:67:95:fa:96:fc:8b:54:b6:3f:2d:c3:55:0c:
                    3f:b8:3f:f1:ac:28:62:8b:b3:86:b5:8f:48:c2:7b:
                    ed:da:95:e7:1c:79:fd:3f:ac:42:98:e4:24:5f:35:
                    fd:ab:7d:78:29:68:f2:7e:0c:17:ad:b7:1f:49:42:
                    4d:bc:0d:ca:d2:a8:cc:79:7c:3c:71:d1:09:c4:f5:
                    03:a8:30:b2:b5:ba:0e:ee:d8:c8:80:ad:7c:27:03:
                    5b:38:3d:5c:da:c2:c3:5c:1f:da:86:d5:30:41:20:
                    3d:79:ed:cd:db:d6:57:42:6b:a8:cc:04:cb:4d:45:
                    ef:60:67:ee:32:86:18:d6:59:36:ee:1b:20:8a:ae:
                    28:9e:44:90:e1:3d:11:5e:ed:30:8e:c0:d5:9e:78:
                    fc:88:f5:29:e7:50:8d:47:28:6b:d1:4a:c4:ab:62:
                    b3:30:ee:01:ca:9d:89:60:fd:1a:a1:a0:cf:98:1c:
                    c8:92:f3:dc:fa:95:a4:ca:ae:cf:14:b1:68:15:63:
                    58:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:3A:E7:2F:AA:55:02:67:F8:6B:C7:9C:27:BE:6A:38:42:21:A6:82
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e96848dd-3369-4e73-af27-2bec7ae42c0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.82.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:6a:a7:90:65:c5:37:4d:3e:40:25:af:16:e9:03:3a:98:89:
         68:2a:75:f0:b9:cf:37:7f:22:bd:dd:d8:e5:3e:71:2f:62:6c:
         d1:27:90:2f:83:e0:db:16:55:41:ad:6a:4a:e3:5b:08:3e:aa:
         64:a1:93:55:84:b5:24:e2:6c:5b:b2:7d:89:31:8b:56:6b:87:
         4a:43:13:23:c1:0c:e2:a0:28:d7:c7:52:e5:5f:9d:8e:da:11:
         58:64:4d:62:48:53:61:85:bf:f4:76:be:0d:07:ce:d6:3f:97:
         fe:7c:3e:d9:1a:0f:2c:2b:de:47:7f:3a:6d:18:0b:aa:c7:12:
         57:c9:5a:c8:73:20:61:3a:87:93:1c:b7:c2:28:93:44:97:04:
         e2:02:83:d4:e7:b5:40:eb:92:b0:c8:54:90:d7:bb:74:97:7f:
         01:dd:eb:2b:3d:25:61:3a:79:48:20:f3:45:b5:02:68:9b:03:
         83:dc:45:6f:bc:11:aa:c5:41:87:9e:b9:2e:36:ca:94:84:8e:
         6c:f8:89:ac:4d:53:48:1e:9d:41:ed:fc:4c:85:80:51:30:9f:
         49:2e:4f:97:53:e4:65:c5:41:35:fb:7e:97:bb:6b:f5:51:ab:
         29:9f:91:b3:04:80:07:71:4c:1d:7c:0c:37:aa:0b:ae:98:d5:
         41:2d:ec:72
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUIW1ZcOTgTn+UndaGvxPJlqeIc+EwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw
MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNzExMTgwMDEzWhcNMjUwODE1MjM1OTU5
WjB6MUkwRwYDVQQFE0BiNzM3NzlmMGRjNThkMDgxYjBlNWIxOGUxNjRiZjZlMmQ1
NzY0YTI2NjE2YTM3OTUxNWNkODZiYTI4OTcxMGJkMS0wKwYDVQQDEyRmNzI0Mzc4
NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCbosTMB+cdAhJhH1W/p/5UOI4Y7W7COVw37MaO5meVJ/IK
EEnSraWrfmF9KP+x7rFCgalZymEpVqzvshp2Z5X6lvyLVLY/LcNVDD+4P/GsKGKL
s4a1j0jCe+3aleccef0/rEKY5CRfNf2rfXgpaPJ+DBettx9JQk28DcrSqMx5fDxx
0QnE9QOoMLK1ug7u2MiArXwnA1s4PVzawsNcH9qG1TBBID157c3b1ldCa6jMBMtN
Re9gZ+4yhhjWWTbuGyCKriieRJDhPRFe7TCOwNWeePyI9SnnUI1HKGvRSsSrYrMw
7gHKnYlg/RqhoM+YHMiS89z6laTKrs8UsWgVY1jnAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU4DrnL6pVAmf4a8ecJ75qOEIhpoIwHwYDVR0jBBgwFoAUugzhfiM/vHHU
MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m
NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5
YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy
YTEzOWVhOTJiL2U5Njg0OGRkLTMzNjktNGU3My1hZjI3LTJiZWM3YWU0MmMwZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh
LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBACtUgQwDQYJKoZIhvcNAQELBQADggEBAD1qp5BlxTdNPkAlrxbpAzqYiWgq
dfC5zzd/Ir3d2OU+cS9ibNEnkC+D4NsWVUGtakrjWwg+qmShk1WEtSTibFuyfYkx
i1Zrh0pDEyPBDOKgKNfHUuVfnY7aEVhkTWJIU2GFv/R2vg0HztY/l/58PtkaDywr
3kd/Om0YC6rHElfJWshzIGE6h5Mct8Iok0SXBOICg9TntUDrkrDIVJDXu3SXfwHd
6ys9JWE6eUgg80W1AmibA4PcRW+8EarFQYeeuS42ypSEjmz4iaxNU0genUHt/EyF
gFEwn0kuT5dT5GXFQTX7fpe7a/VRqymfkbMEgAdxTB18DDeqC66Y1UEt7HI=
-----END CERTIFICATE-----
Generated at Mon Aug 4 21:53:16 2025 by rpki-client