Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b107bb4b-1562-43f5-84bf-bf849758b455.roa
File:                     b107bb4b-1562-43f5-84bf-bf849758b455.roa (raw, json)
Hash identifier:          hF4wAcqP4Ztiv9cFwz++2Y/CgpqqxXhrHHPN/thAo4o=
Subject key identifier:   76:2F:F6:A4:50:99:3B:2B:E6:7B:F6:68:A9:0F:A3:58:D7:BC:15:99
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       04F31BEAB0BD362135799F4B83178872D2EFBACF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b107bb4b-1562-43f5-84bf-bf849758b455.roa
Signing time:             Fri 25 Jul 2025 00:10:16 +0000
ROA not before:           Fri 25 Jul 2025 00:10:16 +0000
ROA not after:            Fri 29 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f60:a400::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:f3:1b:ea:b0:bd:36:21:35:79:9f:4b:83:17:88:72:d2:ef:ba:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 25 00:10:16 2025 GMT
            Not After : Aug 29 23:59:59 2025 GMT
        Subject: serialNumber=fe4e741da523338b1907babb5ec94c380667966d9c208123d78905098425f928, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:41:61:b4:ce:b5:ac:af:dc:a4:64:69:f2:4f:
                    84:77:30:a2:3e:8f:92:12:39:dd:97:20:32:73:9b:
                    37:b2:24:61:3b:e6:95:69:fe:8c:7c:9d:8d:a8:c1:
                    58:42:3e:ee:67:95:1c:26:1a:2a:1f:21:63:14:06:
                    cc:49:1f:ed:0b:eb:79:48:f0:e9:ac:6b:b7:05:03:
                    a3:75:fe:b2:c2:ba:54:f3:a9:35:fe:99:94:76:7b:
                    a8:bc:61:e4:6c:19:ae:75:b2:e1:0c:5c:d9:ae:ba:
                    c8:29:04:f2:75:78:91:74:35:f7:a1:a2:b5:c7:30:
                    ff:f4:cb:b3:14:ef:99:7f:42:84:d6:ad:6d:e9:42:
                    1e:b0:9d:84:7d:83:a3:5b:e4:d3:ce:3f:d4:39:ad:
                    e2:1c:99:9a:95:2f:62:6f:d1:ff:2c:38:34:6c:ee:
                    22:6f:4a:d9:42:6f:42:fc:14:a0:21:53:3e:e8:68:
                    dc:85:5d:93:36:d5:87:33:a9:69:a9:fd:f6:f8:69:
                    90:43:cc:96:b4:a2:48:36:07:79:17:9a:e1:36:f8:
                    7f:a7:a4:f5:dd:78:92:53:9b:c2:fe:0b:73:18:41:
                    de:e7:b7:33:17:92:eb:13:aa:8f:dd:ca:e5:db:0b:
                    9a:37:65:d8:ca:9a:01:f1:5e:b4:2c:7a:2e:14:20:
                    56:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:2F:F6:A4:50:99:3B:2B:E6:7B:F6:68:A9:0F:A3:58:D7:BC:15:99
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b107bb4b-1562-43f5-84bf-bf849758b455.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f60:a400::/40

    Signature Algorithm: sha256WithRSAEncryption
         99:55:df:88:ff:3e:fb:8b:38:65:d6:79:ed:46:73:cf:bd:3a:
         8e:45:58:05:41:b2:bc:b4:43:72:2a:3b:68:11:e3:a7:10:39:
         94:69:ef:d1:68:f4:8d:6d:34:04:6b:ce:25:87:65:a6:e5:68:
         51:21:47:33:57:9e:a3:f0:5e:46:99:7c:f0:6d:a8:13:bf:36:
         a1:08:7b:c3:b6:02:05:39:5d:1d:65:96:41:16:c6:65:da:10:
         d5:58:6f:3d:56:b1:1f:95:32:17:2b:18:b0:3f:e6:1b:27:28:
         b3:5c:c4:4a:a3:1f:da:3d:36:30:a4:8d:c3:9d:46:2d:98:e8:
         cd:ac:3b:bc:f6:cd:60:8f:d0:87:22:89:96:98:06:5b:61:46:
         37:53:96:dd:a2:cd:49:2f:fb:f4:15:98:f7:9e:ed:ef:c0:f8:
         29:0f:1e:4f:8f:a8:99:7f:5e:69:cc:cd:37:00:99:02:75:ca:
         58:f2:40:97:00:48:54:42:fa:99:8f:24:bd:39:6c:17:58:49:
         44:7e:61:d2:cd:8e:cc:06:05:c9:f3:e9:49:24:d8:88:6c:31:
         26:50:5e:e3:51:00:8b:a6:96:d9:bb:fa:7d:10:7b:15:77:61:
         21:45:9e:fd:eb:b5:ef:58:a2:5e:8a:77:a0:d0:fa:32:cd:2c:
         cd:5a:da:4d
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUBPMb6rC9NiE1eZ9LgxeIctLvus8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzI1MDAxMDE2WhcNMjUwODI5MjM1OTU5
WjB6MUkwRwYDVQQFE0BmZTRlNzQxZGE1MjMzMzhiMTkwN2JhYmI1ZWM5NGMzODA2
Njc5NjZkOWMyMDgxMjNkNzg5MDUwOTg0MjVmOTI4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDfQWG0zrWsr9ykZGnyT4R3MKI+j5ISOd2XIDJzmzeyJGE7
5pVp/ox8nY2owVhCPu5nlRwmGiofIWMUBsxJH+0L63lI8Omsa7cFA6N1/rLCulTz
qTX+mZR2e6i8YeRsGa51suEMXNmuusgpBPJ1eJF0NfehorXHMP/0y7MU75l/QoTW
rW3pQh6wnYR9g6Nb5NPOP9Q5reIcmZqVL2Jv0f8sODRs7iJvStlCb0L8FKAhUz7o
aNyFXZM21YczqWmp/fb4aZBDzJa0okg2B3kXmuE2+H+npPXdeJJTm8L+C3MYQd7n
tzMXkusTqo/dyuXbC5o3ZdjKmgHxXrQsei4UIFYzAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUdi/2pFCZOyvme/ZoqQ+jWNe8FZkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2IxMDdiYjRiLTE1NjItNDNmNS04NGJmLWJmODQ5NzU4YjQ1NS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB9gpDANBgkqhkiG9w0BAQsFAAOCAQEAmVXfiP8++4s4ZdZ57UZzz706
jkVYBUGyvLRDcio7aBHjpxA5lGnv0Wj0jW00BGvOJYdlpuVoUSFHM1eeo/BeRpl8
8G2oE782oQh7w7YCBTldHWWWQRbGZdoQ1VhvPVaxH5UyFysYsD/mGycos1zESqMf
2j02MKSNw51GLZjozaw7vPbNYI/QhyKJlpgGW2FGN1OW3aLNSS/79BWY957t78D4
KQ8eT4+omX9eaczNNwCZAnXKWPJAlwBIVEL6mY8kvTlsF1hJRH5h0s2OzAYFyfPp
SSTYiGwxJlBe41EAi6aW2bv6fRB7FXdhIUWe/eu171iiXop3oND6Ms0szVraTQ==
-----END CERTIFICATE-----
Generated at Fri Jul 25 05:23:12 2025 by rpki-client