Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a908559-3835-4924-b5fe-d49c9ed9c2f0.roa
File:                     6a908559-3835-4924-b5fe-d49c9ed9c2f0.roa (raw, json)
Hash identifier:          8kmNzPlopKwZmOA42QSHvwof5lmSYJ+NriC230h6lMg=
Subject key identifier:   0F:34:33:81:BA:2B:DF:61:77:F2:EB:1F:78:AC:FA:44:2A:2B:0B:DA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       31BDE9A51548F3BCC9F719236326C69DF0C366D2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a908559-3835-4924-b5fe-d49c9ed9c2f0.roa
Signing time:             Tue 20 May 2025 00:40:26 +0000
ROA not before:           Tue 20 May 2025 00:40:26 +0000
ROA not after:            Tue 24 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        40.178.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:bd:e9:a5:15:48:f3:bc:c9:f7:19:23:63:26:c6:9d:f0:c3:66:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 20 00:40:26 2025 GMT
            Not After : Jun 24 23:59:59 2025 GMT
        Subject: serialNumber=992391b3023aba90217a5f0902374fa287863b10363895f82c155405f75a35be, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:90:3e:7f:1d:03:41:69:ba:00:4c:2b:f4:7e:
                    f5:33:96:16:e1:47:df:a4:bb:21:98:65:6d:f4:ae:
                    bf:5b:f7:e1:7d:40:f3:d2:8d:f4:f7:c3:17:c9:cb:
                    75:c4:b4:df:5a:d6:31:60:33:5d:c0:5c:c3:5d:f4:
                    c6:a3:e0:2e:f7:4d:d9:80:8f:6a:02:4f:b6:6d:cd:
                    9f:d1:fd:d1:b5:22:95:18:58:10:2b:e8:59:d2:6b:
                    e8:7a:e0:20:5c:d8:41:8d:d7:57:4c:7e:e6:33:dd:
                    65:5e:20:8d:84:3c:9a:ea:14:ec:1e:df:fc:5e:2c:
                    a4:a9:05:fc:b8:7a:b1:9f:69:e4:62:68:d2:fd:68:
                    be:b1:67:29:b6:77:ea:cf:3a:ce:67:95:14:5d:76:
                    7b:8c:48:05:d6:c5:30:8e:ac:78:13:4c:1b:47:5c:
                    4d:73:96:de:30:da:51:e8:8e:04:fd:16:01:1e:ef:
                    9c:3e:52:f6:92:05:5f:5c:c1:43:59:e6:b7:97:b6:
                    5f:51:b8:d8:94:88:31:ff:eb:f7:d9:70:c0:ca:83:
                    f1:10:53:b3:2d:10:fc:67:bd:b8:57:08:59:b9:d9:
                    cf:d0:fc:a1:cb:af:fb:8e:81:5a:c4:aa:8e:0e:f0:
                    d4:02:d1:b5:72:16:6a:67:14:01:12:69:0c:b1:ac:
                    d7:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:34:33:81:BA:2B:DF:61:77:F2:EB:1F:78:AC:FA:44:2A:2B:0B:DA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a908559-3835-4924-b5fe-d49c9ed9c2f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.178.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         43:21:6b:69:c5:6b:ae:92:e1:d6:1c:36:3f:85:5b:ff:38:36:
         fb:80:c0:7f:02:6f:53:3c:a6:03:ab:b7:b5:b4:8b:98:77:46:
         83:6a:51:14:de:90:f8:51:d4:c2:20:40:ed:2c:47:e7:d4:66:
         50:c0:c1:db:f8:56:a3:d0:ed:b6:92:94:fc:bc:96:50:ee:79:
         4c:80:01:ff:53:2e:25:75:7e:1e:21:ec:7c:bf:b2:ff:62:4e:
         23:e5:e9:34:fa:c5:f1:d3:fd:db:5c:1e:9e:c7:75:b9:a9:51:
         d4:43:0c:b1:49:ee:23:19:ba:90:f2:10:aa:a3:3e:58:8e:63:
         70:97:de:68:c8:ef:be:fb:6b:21:4b:28:07:be:38:a4:a9:d6:
         c5:7e:23:b8:e6:bb:b1:59:c6:f8:f8:71:17:b2:d3:a4:23:c0:
         d9:f4:d8:5f:cc:e7:73:52:be:3b:7c:32:91:53:48:eb:18:1f:
         58:0c:59:4d:90:c4:5e:82:0c:8b:05:c2:93:70:d0:55:90:94:
         ac:1a:38:f6:43:d7:c7:9a:ce:ce:55:70:71:9b:cf:bb:ad:ac:
         cc:0f:3d:6d:91:ca:93:c8:4d:15:3b:8a:ee:ea:3d:b2:03:fc:
         e1:7e:ec:f8:b4:7a:0a:22:fc:e0:7d:e9:c0:48:71:6e:d8:3c:
         c6:f2:8f:99
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUMb3ppRVI87zJ9xkjYybGnfDDZtIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTIwMDA0MDI2WhcNMjUwNjI0MjM1OTU5
WjB6MUkwRwYDVQQFE0A5OTIzOTFiMzAyM2FiYTkwMjE3YTVmMDkwMjM3NGZhMjg3
ODYzYjEwMzYzODk1ZjgyYzE1NTQwNWY3NWEzNWJlMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDakD5/HQNBaboATCv0fvUzlhbhR9+kuyGYZW30rr9b9+F9
QPPSjfT3wxfJy3XEtN9a1jFgM13AXMNd9Maj4C73TdmAj2oCT7ZtzZ/R/dG1IpUY
WBAr6FnSa+h64CBc2EGN11dMfuYz3WVeII2EPJrqFOwe3/xeLKSpBfy4erGfaeRi
aNL9aL6xZym2d+rPOs5nlRRddnuMSAXWxTCOrHgTTBtHXE1zlt4w2lHojgT9FgEe
75w+UvaSBV9cwUNZ5reXtl9RuNiUiDH/6/fZcMDKg/EQU7MtEPxnvbhXCFm52c/Q
/KHLr/uOgVrEqo4O8NQC0bVyFmpnFAESaQyxrNctAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUDzQzgbor32F38usfeKz6RCorC9owHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzZhOTA4NTU5LTM4MzUtNDkyNC1iNWZlLWQ0OWM5ZWQ5YzJmMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwEosjANBgkqhkiG9w0BAQsFAAOCAQEAQyFracVrrpLh1hw2P4Vb/zg2+4DA
fwJvUzymA6u3tbSLmHdGg2pRFN6Q+FHUwiBA7SxH59RmUMDB2/hWo9DttpKU/LyW
UO55TIAB/1MuJXV+HiHsfL+y/2JOI+XpNPrF8dP921wensd1ualR1EMMsUnuIxm6
kPIQqqM+WI5jcJfeaMjvvvtrIUsoB744pKnWxX4juOa7sVnG+PhxF7LTpCPA2fTY
X8znc1K+O3wykVNI6xgfWAxZTZDEXoIMiwXCk3DQVZCUrBo49kPXx5rOzlVwcZvP
u62szA89bZHKk8hNFTuK7uo9sgP84X7s+LR6CiL84H3pwEhxbtg8xvKPmQ==
-----END CERTIFICATE-----
Generated at Sun Jun 1 05:01:24 2025 by rpki-client