Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/29fe4c24-b674-4bba-8dd9-9639a0d43dc6.roa
File:                     29fe4c24-b674-4bba-8dd9-9639a0d43dc6.roa (raw, json)
Hash identifier:          CLY/QMgyHez3AoZbCgqgAZt4tMsnXts/ZplbZIJ3Vw4=
Subject key identifier:   E5:7F:5F:A9:7F:F9:CF:60:40:DC:C0:BB:22:DD:8C:44:B2:13:AD:81
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4BDBF096F1FC1FCEEEB4E090D2373E70D935D627
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/29fe4c24-b674-4bba-8dd9-9639a0d43dc6.roa
Signing time:             Tue 22 Jul 2025 00:41:49 +0000
ROA not before:           Tue 22 Jul 2025 00:41:49 +0000
ROA not after:            Tue 26 Aug 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        50.17.184.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:db:f0:96:f1:fc:1f:ce:ee:b4:e0:90:d2:37:3e:70:d9:35:d6:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 22 00:41:49 2025 GMT
            Not After : Aug 26 23:59:59 2025 GMT
        Subject: serialNumber=923e446012adb7813fa66255a170e439850c24578ea4582f7ad12777e543a7e9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d8:c3:5a:38:a7:d0:38:5b:09:0e:c0:57:45:
                    b2:14:f3:e7:5b:7b:4b:42:11:63:87:83:5c:e1:0b:
                    fa:73:10:a2:ff:41:ea:41:fc:b8:9b:6c:e9:69:a6:
                    fb:c3:6a:ee:7d:60:79:65:ee:b4:aa:7b:08:33:84:
                    cd:bf:39:12:e4:bc:11:39:f5:a5:2c:46:9c:9b:c7:
                    88:4e:4c:1e:ab:2c:dd:4d:82:f6:ab:b6:e0:9d:7a:
                    d3:5f:3f:87:01:5b:54:2f:4f:99:1b:a9:f6:e9:5f:
                    4d:0d:70:1b:1c:27:f1:9f:26:cc:c4:37:a4:11:b0:
                    68:21:a3:55:5e:4e:3c:42:67:55:fe:89:a9:65:38:
                    c7:d7:16:36:4b:95:9a:6a:2d:b6:70:58:06:bd:d2:
                    b6:2d:7e:ea:7b:58:7d:f0:a8:12:ef:44:3f:10:f0:
                    d1:5d:52:f3:ba:b1:ab:8e:b8:79:ae:ac:00:a6:05:
                    58:e2:ca:c0:99:0c:8b:6c:f4:9b:49:1b:db:6d:98:
                    c9:ec:35:22:ca:1c:9c:12:f2:bf:c6:a3:96:c2:97:
                    05:d3:20:de:fd:29:0e:2f:d5:85:04:84:4c:fc:55:
                    12:eb:38:24:68:02:35:36:cf:66:74:67:f0:27:39:
                    21:05:fe:ee:26:47:d5:de:b1:f1:db:bb:c4:3a:cf:
                    36:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:7F:5F:A9:7F:F9:CF:60:40:DC:C0:BB:22:DD:8C:44:B2:13:AD:81
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/29fe4c24-b674-4bba-8dd9-9639a0d43dc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.17.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a6:9a:44:75:0b:3c:74:0a:0a:f5:f7:6b:5d:a8:7c:f1:5d:41:
         2d:af:5a:1b:61:92:4c:36:c9:73:0c:96:f2:69:91:9c:6d:65:
         fd:de:9e:59:7d:da:65:11:3c:88:0f:39:0b:55:dd:cc:19:dc:
         09:b1:ca:09:86:0e:9d:30:52:0c:e0:d9:cb:8e:fe:5e:1e:9b:
         80:67:00:59:d2:fb:a4:b0:b2:c4:39:0c:2c:b3:34:ad:59:a9:
         5d:35:ba:74:30:ba:e4:5d:e2:3c:c5:2d:43:ee:d9:18:d3:e2:
         1a:73:e1:0a:08:d6:0a:d3:8b:88:77:75:c0:10:75:ae:e3:8e:
         40:cf:58:b9:81:eb:c4:a1:4b:76:a8:46:91:21:67:11:e0:9c:
         78:82:eb:ea:8c:09:6a:2e:a5:94:4e:e9:26:da:98:48:c4:36:
         44:06:be:e2:81:22:9a:22:b2:39:7c:74:5b:bd:d8:a2:ed:15:
         ab:eb:98:0d:90:58:e1:b4:65:f4:ef:39:81:71:15:17:30:1d:
         51:38:b7:aa:ae:7d:6e:f3:76:12:8d:d3:20:3e:cc:4f:69:15:
         45:90:55:00:79:fd:c9:be:e0:d9:da:ed:71:3e:37:79:30:f8:
         5b:9e:94:80:21:ec:d6:e3:67:c9:fd:08:6f:5a:78:3a:d2:41:
         df:82:b7:78
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUS9vwlvH8H87utOCQ0jc+cNk11icwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzIyMDA0MTQ5WhcNMjUwODI2MjM1OTU5
WjB6MUkwRwYDVQQFE0A5MjNlNDQ2MDEyYWRiNzgxM2ZhNjYyNTVhMTcwZTQzOTg1
MGMyNDU3OGVhNDU4MmY3YWQxMjc3N2U1NDNhN2U5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDZ2MNaOKfQOFsJDsBXRbIU8+dbe0tCEWOHg1zhC/pzEKL/
QepB/LibbOlppvvDau59YHll7rSqewgzhM2/ORLkvBE59aUsRpybx4hOTB6rLN1N
gvartuCdetNfP4cBW1QvT5kbqfbpX00NcBscJ/GfJszEN6QRsGgho1VeTjxCZ1X+
iallOMfXFjZLlZpqLbZwWAa90rYtfup7WH3wqBLvRD8Q8NFdUvO6sauOuHmurACm
BVjiysCZDIts9JtJG9ttmMnsNSLKHJwS8r/Go5bClwXTIN79KQ4v1YUEhEz8VRLr
OCRoAjU2z2Z0Z/AnOSEF/u4mR9XesfHbu8Q6zzbpAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU5X9fqX/5z2BA3MC7It2MRLITrYEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzI5ZmU0YzI0LWI2NzQtNGJiYS04ZGQ5LTk2MzlhMGQ0M2RjNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAMyEbgwDQYJKoZIhvcNAQELBQADggEBAKaaRHULPHQKCvX3a12ofPFdQS2v
Whthkkw2yXMMlvJpkZxtZf3enll92mURPIgPOQtV3cwZ3AmxygmGDp0wUgzg2cuO
/l4em4BnAFnS+6SwssQ5DCyzNK1ZqV01unQwuuRd4jzFLUPu2RjT4hpz4QoI1grT
i4h3dcAQda7jjkDPWLmB68ShS3aoRpEhZxHgnHiC6+qMCWoupZRO6SbamEjENkQG
vuKBIpoisjl8dFu92KLtFavrmA2QWOG0ZfTvOYFxFRcwHVE4t6qufW7zdhKN0yA+
zE9pFUWQVQB5/cm+4Nna7XE+N3kw+FuelIAh7NbjZ8n9CG9aeDrSQd+Ct3g=
-----END CERTIFICATE-----
Generated at Wed Jul 23 02:06:11 2025 by rpki-client