Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bb3edb19-9dc8-4fb1-80a7-e7d90b77a937.roa
File:                     bb3edb19-9dc8-4fb1-80a7-e7d90b77a937.roa (raw, json)
Hash identifier:          wn+JhAQuOZbDwAhutE4She9biP9G/a2nwT8vHdlclyg=
Subject key identifier:   5D:09:4E:7D:88:A7:3B:62:0E:33:AE:DE:A1:B4:C0:D8:99:A0:81:3C
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       11EA5D6935B446EC954913BB9BDEC156D6B98459
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bb3edb19-9dc8-4fb1-80a7-e7d90b77a937.roa
Signing time:             Tue 20 May 2025 16:40:10 +0000
ROA not before:           Tue 20 May 2025 16:40:10 +0000
ROA not after:            Tue 24 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        18.208.0.0/13 maxlen: 13
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:ea:5d:69:35:b4:46:ec:95:49:13:bb:9b:de:c1:56:d6:b9:84:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: May 20 16:40:10 2025 GMT
            Not After : Jun 24 23:59:59 2025 GMT
        Subject: serialNumber=1fb40174c37f4fd0d3c37f74bb53f2dfd57139f0de3f6a3f7bc7a21d8310bf18, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fc:cd:b8:df:ab:2a:d2:c0:1a:a5:65:66:f1:
                    c0:97:e1:c1:12:33:89:f0:68:42:5a:1f:21:41:2a:
                    11:9f:2d:b0:ba:eb:00:6f:a6:a7:4e:fc:6f:6c:82:
                    cc:09:5f:56:21:ad:c3:e0:32:54:b6:d1:6f:a2:1b:
                    fe:6f:ed:3d:c8:c1:33:86:6d:2a:6c:9a:0f:52:73:
                    71:6d:8e:ae:04:d8:e8:8b:7c:26:c7:75:5f:1f:9a:
                    78:e7:71:64:ec:b7:28:fe:43:66:6f:91:32:0a:8b:
                    b8:f7:88:42:c3:cb:65:01:21:e7:5d:fc:f4:82:02:
                    c4:59:8d:f1:fc:2b:5e:dc:95:cc:17:e6:97:df:2a:
                    5d:94:ae:80:28:ab:7f:6a:12:48:32:f0:e3:57:f6:
                    43:ce:35:4a:b7:3c:8c:1b:19:1e:cc:7c:52:48:2e:
                    ad:c1:93:3e:0a:46:42:29:b1:25:5a:02:eb:8a:44:
                    50:6e:3b:fc:07:31:02:0f:ef:0e:d9:ac:ed:5b:f2:
                    7c:49:ba:d9:6a:c3:9c:a0:59:7a:5f:9d:25:08:fc:
                    67:df:d3:77:24:92:0d:e0:86:c3:bc:01:61:7e:31:
                    ea:91:0c:49:c1:d1:a3:63:da:8d:3b:b4:b2:c1:09:
                    20:56:7d:8f:21:8c:89:a9:81:18:af:79:bc:e0:2b:
                    3d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:09:4E:7D:88:A7:3B:62:0E:33:AE:DE:A1:B4:C0:D8:99:A0:81:3C
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bb3edb19-9dc8-4fb1-80a7-e7d90b77a937.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.208.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         0b:88:ef:ca:e5:e4:c0:eb:a0:fe:b6:64:2a:d5:a1:22:56:8d:
         19:d6:21:4c:da:18:6d:82:0e:82:f0:26:8c:73:75:2c:75:41:
         18:4b:3f:b8:39:ac:c8:65:56:4e:b8:30:6c:3e:e4:57:ab:6f:
         af:07:83:e2:f3:0e:b5:a1:e1:f5:e4:04:7d:f8:a8:30:9f:93:
         c4:8e:2f:11:94:e5:26:c8:c7:46:c9:b0:44:e0:7d:bb:07:d8:
         f1:ec:c8:ee:5f:a5:cd:8f:c5:c4:2f:98:d9:c8:32:64:c8:92:
         27:74:3d:e9:90:0a:1d:6d:19:a9:f4:72:95:ba:04:e6:02:ac:
         9b:d5:de:6c:7b:5e:ef:3d:7c:b7:6f:a9:51:61:2b:e7:9b:73:
         96:e8:97:b4:6a:ee:18:d6:ad:86:04:8f:2b:cf:1f:97:e5:61:
         65:f3:42:3c:ad:62:9f:5f:32:66:02:c9:b1:dc:a5:23:10:c6:
         72:a5:b0:56:e9:ba:b6:ca:3e:40:c9:77:96:2f:91:41:48:ed:
         0c:9d:9a:0d:8c:6d:90:76:78:6d:28:49:e8:69:7f:d1:69:cc:
         64:e3:62:8b:73:f0:97:54:18:b4:76:d1:8c:f3:84:92:d4:78:
         e6:25:3b:9c:bb:df:9f:ce:c7:6b:14:66:b6:59:f4:db:9d:d5:
         89:9f:3f:df
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUEepdaTW0RuyVSRO7m97BVta5hFkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNTIwMTY0MDEwWhcNMjUwNjI0MjM1OTU5
WjB6MUkwRwYDVQQFE0AxZmI0MDE3NGMzN2Y0ZmQwZDNjMzdmNzRiYjUzZjJkZmQ1
NzEzOWYwZGUzZjZhM2Y3YmM3YTIxZDgzMTBiZjE4MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC8/M2436sq0sAapWVm8cCX4cESM4nwaEJaHyFBKhGfLbC6
6wBvpqdO/G9sgswJX1YhrcPgMlS20W+iG/5v7T3IwTOGbSpsmg9Sc3Ftjq4E2OiL
fCbHdV8fmnjncWTstyj+Q2ZvkTIKi7j3iELDy2UBIedd/PSCAsRZjfH8K17clcwX
5pffKl2UroAoq39qEkgy8ONX9kPONUq3PIwbGR7MfFJILq3Bkz4KRkIpsSVaAuuK
RFBuO/wHMQIP7w7ZrO1b8nxJutlqw5ygWXpfnSUI/Gff03ckkg3ghsO8AWF+MeqR
DEnB0aNj2o07tLLBCSBWfY8hjImpgRivebzgKz2RAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUXQlOfYinO2IOM67eobTA2JmggTwwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2JiM2VkYjE5LTlkYzgtNGZiMS04MGE3LWU3ZDkwYjc3YTkzNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwMS0DANBgkqhkiG9w0BAQsFAAOCAQEAC4jvyuXkwOug/rZkKtWhIlaNGdYh
TNoYbYIOgvAmjHN1LHVBGEs/uDmsyGVWTrgwbD7kV6tvrweD4vMOtaHh9eQEffio
MJ+TxI4vEZTlJsjHRsmwROB9uwfY8ezI7l+lzY/FxC+Y2cgyZMiSJ3Q96ZAKHW0Z
qfRylboE5gKsm9XebHte7z18t2+pUWEr55tzluiXtGruGNathgSPK88fl+VhZfNC
PK1in18yZgLJsdylIxDGcqWwVum6tso+QMl3li+RQUjtDJ2aDYxtkHZ4bShJ6Gl/
0WnMZONii3Pwl1QYtHbRjPOEktR45iU7nLvfn87HaxRmtln0253ViZ8/3w==
-----END CERTIFICATE-----
Generated at Sat Jun 14 05:46:32 2025 by rpki-client