Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/655d9c54-1648-4b17-915a-5b868df7eca4.roa
File:                     655d9c54-1648-4b17-915a-5b868df7eca4.roa (raw, json)
Hash identifier:          799bY3irK79BjKtxhtF+3DdEKbooZWs2wr8SzfI2n4U=
Subject key identifier:   07:54:5B:33:42:24:5A:09:D8:67:06:18:E5:11:AF:1D:E1:FB:A0:92
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4BA390D4B1CA4C42C5DA37C96E54E5595756933F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/655d9c54-1648-4b17-915a-5b868df7eca4.roa
Signing time:             Sat 06 Sep 2025 00:51:01 +0000
ROA not before:           Sat 06 Sep 2025 00:51:01 +0000
ROA not after:            Sat 11 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        75.79.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:a3:90:d4:b1:ca:4c:42:c5:da:37:c9:6e:54:e5:59:57:56:93:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep  6 00:51:01 2025 GMT
            Not After : Oct 11 23:59:59 2025 GMT
        Subject: serialNumber=a3e4e2f19cd6afd2997e2e612ae62571eeddc99c6ecb74d4f4adc4b8159f3fbb, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:32:8e:3a:62:17:b6:9c:96:bd:04:ed:ef:d4:
                    49:11:a1:11:11:a2:0c:71:6e:ae:77:83:c4:23:98:
                    17:28:e2:fe:d1:3e:17:0e:43:a1:3e:2a:37:12:75:
                    31:42:5e:bf:a7:d2:d3:47:3c:1e:0f:c2:29:0d:fb:
                    95:e1:ab:eb:26:77:bf:9c:95:a5:47:70:01:86:3c:
                    ae:08:fd:79:fd:af:fb:f3:ea:58:b0:fa:f6:95:2a:
                    24:fe:95:89:b5:ce:d3:a3:62:e2:3a:1a:15:bd:9a:
                    a6:30:99:3b:d6:4e:69:12:25:18:20:08:52:80:af:
                    a8:59:77:4a:97:96:29:2f:e3:cf:91:16:b4:4c:f8:
                    57:59:e0:55:ed:cb:4d:64:cf:f9:44:b6:9f:7c:49:
                    30:d3:ea:16:12:c1:9d:0c:90:c7:88:eb:18:9f:48:
                    be:c7:73:be:18:49:d4:4b:ed:41:9b:70:2a:e3:6c:
                    cd:a9:ea:f0:d5:7d:6a:81:12:01:48:0f:4a:bf:29:
                    06:f4:45:31:60:48:0d:76:cc:4d:2a:86:7d:ca:97:
                    02:34:a1:c9:ac:43:f9:8e:be:7c:e6:48:95:a0:7d:
                    cb:7f:61:62:87:a6:eb:bb:a2:95:0b:a7:92:57:c1:
                    f8:d3:d7:28:16:2a:d1:07:f0:7d:4c:de:a4:79:2e:
                    53:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:54:5B:33:42:24:5A:09:D8:67:06:18:E5:11:AF:1D:E1:FB:A0:92
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/655d9c54-1648-4b17-915a-5b868df7eca4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.79.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         14:68:6f:06:e1:c3:d3:6a:a4:23:42:63:53:45:f9:4a:86:89:
         d6:56:67:5b:ce:d5:93:fb:37:c1:e1:43:19:a8:22:d7:2a:f6:
         0c:ef:67:1d:1e:d0:51:58:8b:4c:3f:eb:ef:bb:5c:55:0c:2a:
         5e:18:09:33:50:9a:36:07:f2:e0:30:3c:ec:a8:5e:f7:dd:66:
         3b:94:a4:d4:e3:97:93:7f:a0:e3:52:60:66:13:c3:fe:b4:86:
         e4:9d:00:aa:c1:e3:6e:4c:7f:c1:e0:43:27:ab:81:26:ed:42:
         68:30:4b:b6:5c:72:42:86:b6:6c:d2:bc:d7:92:95:46:0c:94:
         86:1b:d1:87:9e:64:35:31:9d:bc:4a:a8:ce:ee:80:3c:3a:c9:
         17:b9:c4:90:a7:4b:71:20:5e:19:25:7c:1d:24:65:c5:22:8d:
         82:0f:50:13:66:55:df:25:27:29:67:c4:7a:12:da:b0:87:19:
         79:ac:38:6b:f6:2d:fd:4e:62:83:21:06:04:1f:aa:26:46:93:
         42:a3:32:e7:95:2a:a9:61:18:fc:dd:f7:d0:52:69:cf:60:5b:
         4b:af:4e:3b:be:4b:22:ed:bc:fb:e7:31:89:7c:14:db:a4:32:
         16:e7:60:1b:be:75:0d:77:bf:4d:58:9f:79:e0:e0:60:72:79:
         5f:99:44:d3
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUS6OQ1LHKTELF2jfJblTlWVdWkz8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwOTA2MDA1MTAxWhcNMjUxMDExMjM1OTU5
WjB6MUkwRwYDVQQFE0BhM2U0ZTJmMTljZDZhZmQyOTk3ZTJlNjEyYWU2MjU3MWVl
ZGRjOTljNmVjYjc0ZDRmNGFkYzRiODE1OWYzZmJiMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCgMo46Yhe2nJa9BO3v1EkRoRERogxxbq53g8QjmBco4v7R
PhcOQ6E+KjcSdTFCXr+n0tNHPB4PwikN+5Xhq+smd7+claVHcAGGPK4I/Xn9r/vz
6liw+vaVKiT+lYm1ztOjYuI6GhW9mqYwmTvWTmkSJRggCFKAr6hZd0qXlikv48+R
FrRM+FdZ4FXty01kz/lEtp98STDT6hYSwZ0MkMeI6xifSL7Hc74YSdRL7UGbcCrj
bM2p6vDVfWqBEgFID0q/KQb0RTFgSA12zE0qhn3KlwI0ocmsQ/mOvnzmSJWgfct/
YWKHpuu7opULp5JXwfjT1ygWKtEH8H1M3qR5LlPDAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUB1RbM0IkWgnYZwYY5RGvHeH7oJIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzY1NWQ5YzU0LTE2NDgtNGIxNy05MTVhLTViODY4ZGY3ZWNhNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwBLTzANBgkqhkiG9w0BAQsFAAOCAQEAFGhvBuHD02qkI0JjU0X5SoaJ1lZn
W87Vk/s3weFDGagi1yr2DO9nHR7QUViLTD/r77tcVQwqXhgJM1CaNgfy4DA87Khe
991mO5Sk1OOXk3+g41JgZhPD/rSG5J0AqsHjbkx/weBDJ6uBJu1CaDBLtlxyQoa2
bNK815KVRgyUhhvRh55kNTGdvEqozu6APDrJF7nEkKdLcSBeGSV8HSRlxSKNgg9Q
E2ZV3yUnKWfEehLasIcZeaw4a/Yt/U5igyEGBB+qJkaTQqMy55UqqWEY/N330FJp
z2BbS69OO75LIu28++cxiXwU26QyFudgG751DXe/TVifeeDgYHJ5X5lE0w==
-----END CERTIFICATE-----
Generated at Thu Sep 18 12:07:17 2025 by rpki-client