Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0e7416a4-4897-401e-b597-780bb34b5685.roa
File:                     0e7416a4-4897-401e-b597-780bb34b5685.roa (raw, json)
Hash identifier:          urynLVgmmULw8RFSF/PhOk0k1cqjtBPRBFRAPC9eLrU=
Subject key identifier:   7E:62:79:F4:B7:7E:BB:CC:8F:9A:30:87:5A:91:73:77:88:6E:3F:AF
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       26FCFD69779D49E2399ED09E7A1F640EF9722B3B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0e7416a4-4897-401e-b597-780bb34b5685.roa
Signing time:             Sat 28 Jun 2025 00:11:41 +0000
ROA not before:           Sat 28 Jun 2025 00:11:41 +0000
ROA not after:            Sat 02 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        155.50.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:fc:fd:69:77:9d:49:e2:39:9e:d0:9e:7a:1f:64:0e:f9:72:2b:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 28 00:11:41 2025 GMT
            Not After : Aug  2 23:59:59 2025 GMT
        Subject: serialNumber=26593dc0eac4c43af10b1619049a915062b8b79d73969a6231c18f62a0861d59, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3e:db:32:8e:6f:1e:29:be:62:9f:66:9c:73:
                    9a:bf:c0:7c:00:f3:b0:3c:d4:23:c3:31:37:6e:d0:
                    94:4f:ba:67:e8:bb:ec:d1:71:c0:7f:c4:9a:f1:18:
                    99:f5:93:d3:72:a0:4d:08:9c:79:29:77:46:02:f8:
                    36:71:9e:68:7c:3d:a0:b4:66:9f:30:f7:cc:0a:dc:
                    a4:85:60:8f:73:2c:8b:38:6a:82:06:61:a6:bf:e2:
                    d8:10:c8:c4:28:7c:6e:ee:5a:2a:64:ba:9b:7c:ae:
                    d1:72:08:bd:74:cd:c4:da:d7:2d:1f:27:1d:59:8d:
                    79:41:ed:2b:5a:81:0e:d3:0c:8a:de:16:8a:31:ce:
                    59:06:f8:27:7d:c9:0c:4d:dd:bd:9a:bf:d0:f7:18:
                    f7:9d:10:c1:1b:6e:b3:91:e5:b8:e3:f7:94:b0:46:
                    17:79:d7:b9:eb:d2:b3:af:a3:ac:ff:26:4f:16:18:
                    18:20:99:e0:5d:19:5c:2a:2c:1b:97:63:36:89:66:
                    34:34:83:a2:80:e6:44:ce:d9:77:be:d4:2f:0d:d5:
                    ff:fe:df:83:24:91:a4:ad:c9:5a:3d:ad:fd:5d:ea:
                    c7:18:fe:8a:96:ee:74:7b:56:4b:90:68:0c:84:8a:
                    58:60:0b:58:50:c1:62:98:cc:a2:91:a4:8b:20:5f:
                    af:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:62:79:F4:B7:7E:BB:CC:8F:9A:30:87:5A:91:73:77:88:6E:3F:AF
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0e7416a4-4897-401e-b597-780bb34b5685.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.50.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         28:f1:3b:a4:4f:55:4e:a5:35:ca:11:a1:e9:44:41:07:81:16:
         fc:41:0c:0d:93:5a:15:7d:2f:e8:f7:20:7a:82:24:e4:8d:b1:
         aa:83:e9:ed:0c:e9:34:c6:85:fb:29:65:89:85:d2:85:b0:e4:
         03:22:f7:ef:62:19:20:6c:a2:44:6e:a4:da:43:af:35:74:60:
         ea:d8:2e:d5:4b:6b:e6:dc:98:10:f7:77:f0:d6:1d:50:ab:ff:
         96:f6:5c:85:41:75:5f:a0:14:95:4d:62:5f:73:2b:96:98:b8:
         79:cc:12:cb:c2:2b:f0:54:da:87:88:a9:68:92:e1:da:7e:6b:
         bf:ed:93:3b:bb:ab:f6:55:0a:de:92:ad:40:f9:1c:f0:83:cd:
         99:8a:6d:13:86:9e:6c:ca:db:26:72:fb:6d:da:57:61:55:07:
         2d:c1:ea:d6:c2:49:70:65:34:cc:ef:e2:db:24:7b:26:74:67:
         d1:2f:42:19:32:09:36:54:14:06:e3:0d:d1:80:bb:5b:73:ab:
         27:2d:bd:c1:db:16:71:a2:02:26:20:22:44:ae:df:00:d3:70:
         57:df:a6:cd:fb:4a:50:41:53:77:99:2f:fc:f8:ea:6a:64:7e:
         01:a4:41:11:f2:27:6e:d0:be:08:ab:a7:55:28:29:51:ec:54:
         b5:39:3e:2f
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUJvz9aXedSeI5ntCeeh9kDvlyKzswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjI4MDAxMTQxWhcNMjUwODAyMjM1OTU5
WjB6MUkwRwYDVQQFE0AyNjU5M2RjMGVhYzRjNDNhZjEwYjE2MTkwNDlhOTE1MDYy
YjhiNzlkNzM5NjlhNjIzMWMxOGY2MmEwODYxZDU5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC6Ptsyjm8eKb5in2acc5q/wHwA87A81CPDMTdu0JRPumfo
u+zRccB/xJrxGJn1k9NyoE0InHkpd0YC+DZxnmh8PaC0Zp8w98wK3KSFYI9zLIs4
aoIGYaa/4tgQyMQofG7uWipkupt8rtFyCL10zcTa1y0fJx1ZjXlB7StagQ7TDIre
FooxzlkG+Cd9yQxN3b2av9D3GPedEMEbbrOR5bjj95SwRhd517nr0rOvo6z/Jk8W
GBggmeBdGVwqLBuXYzaJZjQ0g6KA5kTO2Xe+1C8N1f/+34MkkaStyVo9rf1d6scY
/oqW7nR7VkuQaAyEilhgC1hQwWKYzKKRpIsgX6/jAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUfmJ59Ld+u8yPmjCHWpFzd4huP68wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzBlNzQxNmE0LTQ4OTctNDAxZS1iNTk3LTc4MGJiMzRiNTY4NS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAebMoAwDQYJKoZIhvcNAQELBQADggEBACjxO6RPVU6lNcoRoelEQQeBFvxB
DA2TWhV9L+j3IHqCJOSNsaqD6e0M6TTGhfspZYmF0oWw5AMi9+9iGSBsokRupNpD
rzV0YOrYLtVLa+bcmBD3d/DWHVCr/5b2XIVBdV+gFJVNYl9zK5aYuHnMEsvCK/BU
2oeIqWiS4dp+a7/tkzu7q/ZVCt6SrUD5HPCDzZmKbROGnmzK2yZy+23aV2FVBy3B
6tbCSXBlNMzv4tskeyZ0Z9EvQhkyCTZUFAbjDdGAu1tzqyctvcHbFnGiAiYgIkSu
3wDTcFffps37SlBBU3eZL/z46mpkfgGkQRHyJ27Qvgirp1UoKVHsVLU5Pi8=
-----END CERTIFICATE-----
Generated at Wed Jul 2 16:38:30 2025 by rpki-client