Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/06d001bb-c272-4687-88f0-22a71c59df6f.roa
File:                     06d001bb-c272-4687-88f0-22a71c59df6f.roa (raw, json)
Hash identifier:          ARLYu4JdMvTXkaq6UBk9ucGa5zJr79gNKNkkDbMbnsQ=
Subject key identifier:   C3:D2:C4:70:77:E5:E6:6F:7A:C8:FF:DF:86:CE:F4:64:B8:83:E6:0E
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       2EF6EB4337725E3382716B518F60EA374BA7B2A2
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/06d001bb-c272-4687-88f0-22a71c59df6f.roa
Signing time:             Sat 26 Jul 2025 00:31:10 +0000
ROA not before:           Sat 26 Jul 2025 00:31:10 +0000
ROA not after:            Sat 30 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        15.221.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:f6:eb:43:37:72:5e:33:82:71:6b:51:8f:60:ea:37:4b:a7:b2:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jul 26 00:31:10 2025 GMT
            Not After : Aug 30 23:59:59 2025 GMT
        Subject: serialNumber=a8d5c60e4213c682db557888a7e3958923777f7cc508c32a4d1da9dca4714d7e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:06:dd:b2:10:a0:eb:6e:1f:80:2a:a9:76:c1:
                    4e:c5:f4:e2:c1:f1:ce:16:49:23:03:63:1b:aa:52:
                    e4:49:ac:bc:84:d6:d7:c1:fc:02:0c:d6:60:69:eb:
                    af:d8:41:d4:e1:0d:1d:ec:91:29:f4:86:a4:8b:2f:
                    15:c9:7a:be:6f:0b:59:66:df:4c:ec:44:d5:11:23:
                    b3:11:56:10:59:b7:bb:63:77:c9:19:3f:4e:4e:6e:
                    b2:bb:f1:c7:62:18:d1:c7:4d:15:c8:7c:c7:d0:70:
                    76:95:a2:5d:53:e2:5c:39:8f:06:cf:47:75:4b:6f:
                    ca:b1:53:0c:0f:ec:9b:75:59:5f:fd:43:86:4f:08:
                    fe:80:0c:cf:e7:54:7d:a8:38:ed:65:b3:0c:55:b1:
                    fd:31:64:66:f6:83:6f:67:d8:47:a6:50:ac:74:f7:
                    de:ea:1c:4b:e4:5e:61:2f:af:4f:9f:9a:1d:9c:41:
                    34:da:35:17:ee:72:f9:9d:42:69:7a:c4:f5:f8:d0:
                    b6:12:fd:b4:cc:67:4a:b0:4d:1f:6f:95:90:ae:16:
                    8f:d2:c2:cf:1e:60:01:f7:6f:8a:6e:1d:b0:bf:4f:
                    06:b2:ed:14:b4:d4:b8:a7:8c:48:2a:0c:a1:02:d8:
                    69:5a:4f:f6:1a:1a:71:de:f8:de:0c:f3:76:91:b4:
                    c7:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:D2:C4:70:77:E5:E6:6F:7A:C8:FF:DF:86:CE:F4:64:B8:83:E6:0E
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/06d001bb-c272-4687-88f0-22a71c59df6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.221.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         07:84:af:1f:7c:7a:f3:f8:45:3d:cf:21:d5:78:96:8c:f3:54:
         bb:4a:31:0a:a7:af:99:92:68:4c:0c:36:9e:3a:fa:36:78:8e:
         61:ed:e2:7a:ed:8b:c3:7d:f3:b4:38:99:2a:0e:b8:76:a6:c7:
         f5:22:d0:ff:43:8e:ef:90:6c:13:45:e4:8a:11:21:71:cf:b1:
         be:7d:ad:ab:28:60:1a:e3:0b:1c:69:67:2f:a6:9e:7b:57:6f:
         cd:6e:c6:a1:89:e9:cc:28:fb:74:1c:d1:8a:2e:c0:ce:d0:b1:
         fc:e0:80:e5:8d:a5:61:91:27:28:6c:03:31:ba:5f:86:03:db:
         b8:2b:b5:71:d7:3b:70:0d:15:f9:4c:bb:32:2d:3d:9c:ec:ee:
         8b:3f:23:1a:8e:0e:e0:48:6f:23:98:26:c4:6d:d8:07:8c:a5:
         40:7c:20:d9:8d:80:51:52:52:4c:55:02:79:09:4b:ec:64:0e:
         bb:4d:da:31:a2:5c:c6:1f:5a:c9:fc:88:be:41:09:65:90:a7:
         69:f2:59:66:dd:f4:71:f3:14:15:56:d1:e6:5e:f9:08:3b:7a:
         b7:29:6f:d5:27:f0:b7:eb:3b:15:ff:4c:e8:72:fb:4a:3e:76:
         29:a9:1d:89:97:d9:7d:3e:2b:f5:8b:e9:36:5e:4f:46:62:52:
         f5:72:5e:ba
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIULvbrQzdyXjOCcWtRj2DqN0unsqIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzI2MDAzMTEwWhcNMjUwODMwMjM1OTU5
WjB6MUkwRwYDVQQFE0BhOGQ1YzYwZTQyMTNjNjgyZGI1NTc4ODhhN2UzOTU4OTIz
Nzc3ZjdjYzUwOGMzMmE0ZDFkYTlkY2E0NzE0ZDdlMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCqBt2yEKDrbh+AKql2wU7F9OLB8c4WSSMDYxuqUuRJrLyE
1tfB/AIM1mBp66/YQdThDR3skSn0hqSLLxXJer5vC1lm30zsRNURI7MRVhBZt7tj
d8kZP05ObrK78cdiGNHHTRXIfMfQcHaVol1T4lw5jwbPR3VLb8qxUwwP7Jt1WV/9
Q4ZPCP6ADM/nVH2oOO1lswxVsf0xZGb2g29n2EemUKx0997qHEvkXmEvr0+fmh2c
QTTaNRfucvmdQml6xPX40LYS/bTMZ0qwTR9vlZCuFo/Sws8eYAH3b4puHbC/Tway
7RS01LinjEgqDKEC2GlaT/YaGnHe+N4M83aRtMclAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUw9LEcHfl5m96yP/fhs70ZLiD5g4wHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzA2ZDAwMWJiLWMyNzItNDY4Ny04OGYwLTIyYTcxYzU5ZGY2Zi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAP3TANBgkqhkiG9w0BAQsFAAOCAQEAB4SvH3x68/hFPc8h1XiWjPNUu0ox
CqevmZJoTAw2njr6NniOYe3ieu2Lw33ztDiZKg64dqbH9SLQ/0OO75BsE0XkihEh
cc+xvn2tqyhgGuMLHGlnL6aee1dvzW7GoYnpzCj7dBzRii7AztCx/OCA5Y2lYZEn
KGwDMbpfhgPbuCu1cdc7cA0V+Uy7Mi09nOzuiz8jGo4O4EhvI5gmxG3YB4ylQHwg
2Y2AUVJSTFUCeQlL7GQOu03aMaJcxh9ayfyIvkEJZZCnafJZZt30cfMUFVbR5l75
CDt6tylv1Sfwt+s7Ff9M6HL7Sj52KakdiZfZfT4r9YvpNl5PRmJS9XJeug==
-----END CERTIFICATE-----
Generated at Mon Aug 4 21:52:14 2025 by rpki-client