Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e834e04c-f563-4064-a1f9-706839ae47eb.roa
File:                     e834e04c-f563-4064-a1f9-706839ae47eb.roa (raw, json)
Hash identifier:          R6xA+Okl1nGSy47QSky5EWJ3NiTZvVNg3wm+OJXdcgE=
Subject key identifier:   C7:DA:E0:8A:6B:06:B7:F6:B8:83:F0:CD:07:72:45:15:13:14:82:5F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       355C92BA6DF9E9070089F4C74F57DC1F679E5D59
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e834e04c-f563-4064-a1f9-706839ae47eb.roa
Signing time:             Wed 16 Jul 2025 00:01:35 +0000
ROA not before:           Wed 16 Jul 2025 00:01:35 +0000
ROA not after:            Wed 20 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        16.116.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:5c:92:ba:6d:f9:e9:07:00:89:f4:c7:4f:57:dc:1f:67:9e:5d:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 16 00:01:35 2025 GMT
            Not After : Aug 20 23:59:59 2025 GMT
        Subject: serialNumber=785d716cb7892633174e7558c7efff8154dc10b6f182deed9bac7cb968cfbb50, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:48:c0:be:f8:a8:c6:fd:f6:2e:4f:af:a1:1c:
                    6c:7f:55:0e:34:bd:60:f0:37:61:15:73:37:a3:5b:
                    92:a6:5d:c9:f8:de:cc:86:0c:25:1e:cc:13:72:1b:
                    cb:c2:f3:79:e4:1f:9f:bf:90:80:31:d1:66:c4:5b:
                    89:fc:21:e5:f3:5e:b4:50:17:a2:4e:f3:61:cc:bc:
                    f4:d7:d7:89:ce:ea:43:82:b0:c8:2e:fc:6f:51:be:
                    9f:6a:58:4e:86:ea:cd:30:6e:bf:fb:c8:45:e6:8a:
                    c9:ee:9a:9e:d5:96:4c:88:f5:da:9b:5c:43:36:e0:
                    41:a4:1b:8c:f1:89:6e:c9:af:44:51:8a:d4:d5:f4:
                    0c:13:99:f0:68:be:42:f4:3c:f3:51:a1:92:27:ff:
                    e3:33:f1:08:4d:2f:39:01:8c:1e:e6:2c:47:89:2d:
                    0b:18:10:21:0e:51:9f:f6:aa:d4:c6:39:a8:88:7e:
                    53:b2:0b:6e:e2:c7:98:6b:57:4f:2d:5f:6f:e8:a2:
                    7c:00:b4:ad:c7:83:68:b6:16:cb:ae:ec:59:b9:ee:
                    d2:47:e3:1d:ea:4d:0e:f0:df:f0:f9:48:4a:6a:a3:
                    b6:42:6e:34:14:85:fc:e2:49:2e:31:ab:86:4c:23:
                    69:56:93:d3:94:92:ed:23:96:e9:6b:bb:46:89:6c:
                    ce:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:DA:E0:8A:6B:06:B7:F6:B8:83:F0:CD:07:72:45:15:13:14:82:5F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e834e04c-f563-4064-a1f9-706839ae47eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.116.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5f:13:ea:ee:b7:29:08:05:5e:58:af:2c:c3:e0:2f:d1:d7:79:
         34:51:6c:38:df:8b:44:94:c5:f5:bf:c0:3e:3a:5c:23:ed:ab:
         f2:bf:89:d5:c0:63:d8:82:d0:15:25:1c:f9:cd:ce:65:ca:43:
         73:12:b4:b9:74:1c:02:27:0c:bc:1d:dc:6e:b0:32:fe:c1:f2:
         e1:41:ea:80:76:d5:2f:dc:ce:15:52:c1:b3:ee:19:9a:83:67:
         8b:b0:54:6a:2e:ea:bd:80:f8:49:c3:9d:a9:46:c8:1f:a5:58:
         5f:18:72:cf:06:3f:da:42:20:03:49:65:bc:be:22:32:05:db:
         4d:0c:d7:b1:78:df:fd:92:f8:45:ff:ad:ae:1d:bd:63:61:e4:
         bb:be:fc:cd:6c:96:93:59:a4:8d:7f:29:2f:ba:71:f4:2b:c4:
         85:e6:73:85:f2:8c:70:eb:8a:98:89:b8:5b:aa:e2:4b:bb:3c:
         45:c0:1b:99:f6:b2:0a:eb:18:69:ee:fb:02:13:1e:f4:33:9a:
         3b:2e:52:11:41:8d:5b:6b:b3:55:60:84:a8:4c:6d:df:2b:e7:
         ed:8d:68:fc:af:b9:80:c6:87:d0:44:b2:2c:5c:38:b9:0c:1e:
         9f:d9:e6:43:73:ee:1a:30:a5:e2:2e:61:b8:6f:e1:18:ef:d1:
         43:10:49:1c
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUNVySum356QcAifTHT1fcH2eeXVkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzE2MDAwMTM1WhcNMjUwODIwMjM1OTU5
WjB6MUkwRwYDVQQFE0A3ODVkNzE2Y2I3ODkyNjMzMTc0ZTc1NThjN2VmZmY4MTU0
ZGMxMGI2ZjE4MmRlZWQ5YmFjN2NiOTY4Y2ZiYjUwMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDbSMC++KjG/fYuT6+hHGx/VQ40vWDwN2EVczejW5KmXcn4
3syGDCUezBNyG8vC83nkH5+/kIAx0WbEW4n8IeXzXrRQF6JO82HMvPTX14nO6kOC
sMgu/G9Rvp9qWE6G6s0wbr/7yEXmisnump7VlkyI9dqbXEM24EGkG4zxiW7Jr0RR
itTV9AwTmfBovkL0PPNRoZIn/+Mz8QhNLzkBjB7mLEeJLQsYECEOUZ/2qtTGOaiI
flOyC27ix5hrV08tX2/oonwAtK3Hg2i2Fsuu7Fm57tJH4x3qTQ7w3/D5SEpqo7ZC
bjQUhfziSS4xq4ZMI2lWk9OUku0jlulru0aJbM53AgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUx9rgimsGt/a4g/DNB3JFFRMUgl8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2U4MzRlMDRjLWY1NjMtNDA2NC1hMWY5LTcwNjgzOWFlNDdlYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAQdDANBgkqhkiG9w0BAQsFAAOCAQEAXxPq7rcpCAVeWK8sw+Av0dd5NFFs
ON+LRJTF9b/APjpcI+2r8r+J1cBj2ILQFSUc+c3OZcpDcxK0uXQcAicMvB3cbrAy
/sHy4UHqgHbVL9zOFVLBs+4ZmoNni7BUai7qvYD4ScOdqUbIH6VYXxhyzwY/2kIg
A0llvL4iMgXbTQzXsXjf/ZL4Rf+trh29Y2Hku778zWyWk1mkjX8pL7px9CvEheZz
hfKMcOuKmIm4W6riS7s8RcAbmfayCusYae77AhMe9DOaOy5SEUGNW2uzVWCEqExt
3yvn7Y1o/K+5gMaH0ESyLFw4uQwen9nmQ3PuGjCl4i5huG/hGO/RQxBJHA==
-----END CERTIFICATE-----
Generated at Mon Jul 21 18:08:06 2025 by rpki-client