Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7fe7e7d6-bda7-425b-bbbd-44fa0b4c5ff6.roa
File:                     7fe7e7d6-bda7-425b-bbbd-44fa0b4c5ff6.roa (raw, json)
Hash identifier:          8TV6DstrNGHzfWnlr37cSXVRP2jO5Ii5uj5RPIeSAU4=
Subject key identifier:   2F:E9:C1:4A:DD:DD:F3:7A:A4:24:87:50:E0:DC:CC:CD:E9:4D:53:79
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       36175897742D1D1D787F46CEDD9D9BC89A23E549
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7fe7e7d6-bda7-425b-bbbd-44fa0b4c5ff6.roa
Signing time:             Fri 11 Jul 2025 16:01:12 +0000
ROA not before:           Fri 11 Jul 2025 16:01:12 +0000
ROA not after:            Fri 15 Aug 2025 23:59:59 +0000
asID:                     203
IP address blocks:        161.188.216.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:17:58:97:74:2d:1d:1d:78:7f:46:ce:dd:9d:9b:c8:9a:23:e5:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jul 11 16:01:12 2025 GMT
            Not After : Aug 15 23:59:59 2025 GMT
        Subject: serialNumber=2edb8e0c8895ee10d4dd910f21e09c64188f1e8ca7fe4c495d1b3aa6d850eae3, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ec:e1:37:7d:c2:38:c0:84:e2:22:4b:24:1c:
                    4a:ab:f5:18:dd:73:57:2f:ac:02:62:14:37:ec:62:
                    1b:7a:36:f1:fb:d4:9a:52:4a:da:24:1d:f2:bb:14:
                    2c:a5:44:34:c2:24:59:80:dd:25:0e:60:f2:5a:b1:
                    65:a5:c6:19:db:f9:14:88:c5:50:47:46:a9:20:5d:
                    ba:fb:14:82:97:70:82:98:9b:2e:86:2c:a3:a1:95:
                    e1:3b:43:67:4c:76:d7:2b:1c:79:6f:4f:da:81:2f:
                    62:6d:2d:70:bd:3f:4e:1e:42:9a:be:b1:bd:b4:de:
                    d3:62:c7:8a:6b:cf:02:91:40:32:f4:d1:60:80:35:
                    2c:3d:ed:3a:0a:f7:fd:4e:32:39:ec:9b:a6:64:cc:
                    2b:f6:e5:8c:ce:d3:ea:ae:30:34:4d:3f:9d:01:ae:
                    98:4c:71:14:15:1b:5c:55:8a:f8:38:66:6a:c5:b1:
                    26:0a:a3:b7:fb:46:6f:92:66:22:82:cf:41:ed:62:
                    0a:db:7d:5d:06:c5:d8:01:9d:e3:5d:ab:9f:dc:c7:
                    56:12:af:fe:de:0d:d2:e5:eb:ef:09:e4:f8:5b:3f:
                    5c:66:df:b7:9e:b9:7b:e2:54:89:25:cb:36:8c:6f:
                    a7:55:0d:56:84:40:1a:48:88:c0:ed:58:c6:a0:2d:
                    40:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:E9:C1:4A:DD:DD:F3:7A:A4:24:87:50:E0:DC:CC:CD:E9:4D:53:79
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7fe7e7d6-bda7-425b-bbbd-44fa0b4c5ff6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.188.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         43:0b:18:99:cc:04:8f:9d:fd:e1:7e:f3:74:1e:72:97:d1:84:
         66:73:7b:64:2f:35:ff:00:81:49:e6:cf:37:85:1b:91:26:27:
         6a:97:cf:0a:b2:22:e6:83:cf:37:89:29:5e:4d:e3:cf:9d:fd:
         22:d3:4b:f9:6c:56:f7:ea:93:dd:61:5a:c1:5b:a7:5e:36:3d:
         8d:58:5f:43:b4:25:35:09:25:82:c4:78:4e:19:0d:ee:56:b2:
         59:a9:dd:60:58:41:70:d0:0c:16:67:08:55:9e:95:c1:d8:7f:
         f0:10:93:cf:5c:43:b8:6f:1d:24:b6:24:43:98:a8:3a:eb:96:
         22:55:0d:b8:f2:16:48:87:8b:99:e4:c6:22:e6:88:66:f4:4f:
         e5:b4:97:76:d1:3d:80:7d:9a:29:20:f1:c9:dd:0b:ec:7f:b0:
         67:dc:5c:23:c9:7e:f1:fa:c9:ce:19:8e:6b:85:93:37:c1:ef:
         8f:ad:ac:ec:b9:fa:e2:80:8b:06:6b:d2:54:18:9d:11:44:eb:
         91:04:85:34:93:15:09:b6:f5:11:a5:23:73:37:c6:c2:2b:7d:
         c7:a7:3d:08:26:91:85:c5:99:22:d1:b0:ee:db:a8:0e:cf:a9:
         c6:33:61:07:27:c7:15:ed:6a:f3:61:0e:ae:b0:60:28:a2:10:
         b1:9d:2b:10
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUNhdYl3QtHR14f0bO3Z2byJoj5UkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzExMTYwMTEyWhcNMjUwODE1MjM1OTU5
WjB6MUkwRwYDVQQFE0AyZWRiOGUwYzg4OTVlZTEwZDRkZDkxMGYyMWUwOWM2NDE4
OGYxZThjYTdmZTRjNDk1ZDFiM2FhNmQ4NTBlYWUzMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCV7OE3fcI4wITiIkskHEqr9Rjdc1cvrAJiFDfsYht6NvH7
1JpSStokHfK7FCylRDTCJFmA3SUOYPJasWWlxhnb+RSIxVBHRqkgXbr7FIKXcIKY
my6GLKOhleE7Q2dMdtcrHHlvT9qBL2JtLXC9P04eQpq+sb203tNix4przwKRQDL0
0WCANSw97ToK9/1OMjnsm6ZkzCv25YzO0+quMDRNP50BrphMcRQVG1xVivg4ZmrF
sSYKo7f7Rm+SZiKCz0HtYgrbfV0GxdgBneNdq5/cx1YSr/7eDdLl6+8J5PhbP1xm
37eeuXviVIklyzaMb6dVDVaEQBpIiMDtWMagLUAJAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUL+nBSt3d83qkJIdQ4NzMzelNU3kwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzdmZTdlN2Q2LWJkYTctNDI1Yi1iYmJkLTQ0ZmEwYjRjNWZmNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAOhvNgwDQYJKoZIhvcNAQELBQADggEBAEMLGJnMBI+d/eF+83QecpfRhGZz
e2QvNf8AgUnmzzeFG5EmJ2qXzwqyIuaDzzeJKV5N48+d/SLTS/lsVvfqk91hWsFb
p142PY1YX0O0JTUJJYLEeE4ZDe5Wslmp3WBYQXDQDBZnCFWelcHYf/AQk89cQ7hv
HSS2JEOYqDrrliJVDbjyFkiHi5nkxiLmiGb0T+W0l3bRPYB9mikg8cndC+x/sGfc
XCPJfvH6yc4ZjmuFkzfB74+trOy5+uKAiwZr0lQYnRFE65EEhTSTFQm29RGlI3M3
xsIrfcenPQgmkYXFmSLRsO7bqA7PqcYzYQcnxxXtavNhDq6wYCiiELGdKxA=
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:03:58 2025 by rpki-client