Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e218b04-dfaf-4fdb-9e82-bad8d7e36def.roa
File:                     5e218b04-dfaf-4fdb-9e82-bad8d7e36def.roa (raw, json)
Hash identifier:          UaQlEe15IOeO7qBxS8W7TcHO1P6kJiJTeTZ1B4/vQeo=
Subject key identifier:   4A:77:BC:CB:FD:00:13:91:3C:4A:27:E5:41:6D:1A:2A:FC:AD:09:43
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       497EF94CF04FFBDBE83853DB4097E13ED6F6FEF1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e218b04-dfaf-4fdb-9e82-bad8d7e36def.roa
Signing time:             Fri 02 May 2025 00:10:55 +0000
ROA not before:           Fri 02 May 2025 00:10:55 +0000
ROA not after:            Fri 06 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        16.206.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:7e:f9:4c:f0:4f:fb:db:e8:38:53:db:40:97:e1:3e:d6:f6:fe:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  2 00:10:55 2025 GMT
            Not After : Jun  6 23:59:59 2025 GMT
        Subject: serialNumber=255da2d201f555429b0276de9829d141258f19dc3906f91419ab9efd3b0c92b8, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d4:e4:71:8f:3d:ea:9b:f1:8c:63:8e:fd:8c:
                    f4:b3:f8:20:38:6c:33:2d:82:d1:eb:31:34:80:86:
                    5b:02:71:4b:7a:7e:48:a1:cd:55:da:a4:e5:37:07:
                    ff:5f:3c:ab:7c:9a:46:83:f6:e2:1c:48:3e:fc:b1:
                    2e:88:ac:ba:0f:80:53:d6:57:39:3c:3b:55:5b:e5:
                    ef:e5:0e:70:7b:26:f4:d8:bb:5f:bc:10:78:b2:4c:
                    21:50:9f:9f:3f:c1:e7:12:bb:14:24:bc:37:e4:8b:
                    01:af:cf:30:b4:cb:cc:49:a9:53:d0:1e:65:15:cd:
                    61:e7:71:33:a3:2a:82:25:f1:b5:35:f7:d2:9c:57:
                    8a:80:6e:52:53:e0:b3:12:aa:ab:6a:e2:2e:b2:93:
                    de:d6:fe:d2:2b:52:e9:80:23:ec:85:36:11:19:8a:
                    59:81:f4:6b:ca:9c:29:bc:fb:bb:ac:8a:6a:99:a7:
                    a0:fe:d7:ef:63:9d:ce:ee:b1:8f:46:3d:97:a1:a6:
                    1d:ca:12:90:76:cc:6c:07:c6:cb:a3:78:43:f5:85:
                    4e:21:d2:c5:8b:95:31:f2:4c:2f:ed:16:89:ba:80:
                    2f:da:ea:48:a0:16:50:b8:ac:c4:19:2f:c3:de:87:
                    f3:cd:ff:1a:9f:0e:4a:8b:d5:9b:80:d5:af:3a:63:
                    50:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:77:BC:CB:FD:00:13:91:3C:4A:27:E5:41:6D:1A:2A:FC:AD:09:43
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e218b04-dfaf-4fdb-9e82-bad8d7e36def.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.206.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         15:db:ec:e6:a8:b9:5d:f2:67:80:1c:e9:29:4e:17:fb:21:c3:
         89:14:5a:d6:fd:9c:99:59:79:7d:23:9a:9a:cb:b8:33:00:ab:
         37:f2:7d:02:d6:1d:21:22:bd:36:21:16:04:8e:ae:a2:99:ea:
         27:91:a3:1c:03:f1:65:df:3f:da:14:ee:13:d7:a5:03:4d:a4:
         2e:18:e7:02:e0:52:1c:cc:fb:8c:74:39:5c:eb:9e:f6:c3:52:
         97:f1:5f:25:9b:39:a2:65:ac:1e:57:fe:01:03:2f:ac:4c:eb:
         6f:66:35:98:43:da:e0:de:51:9b:ac:a8:04:12:97:d1:4c:d1:
         bd:d7:22:d1:1b:f4:f4:86:83:3d:36:da:9d:50:40:aa:6d:a1:
         22:eb:4a:78:f1:5a:28:03:bf:6b:60:9f:5c:83:ab:85:bc:15:
         0a:9e:ad:a2:cd:81:6c:1b:1e:89:c9:d5:62:9c:be:14:e2:15:
         0f:fe:f8:39:7e:30:0e:fb:19:0d:25:07:f8:6e:3c:d5:f7:7f:
         9d:a9:6c:38:73:ab:92:11:5e:1e:8c:ba:19:8c:54:13:4d:b4:
         ba:5f:3b:8c:1c:08:2d:ec:d6:95:8a:13:94:f2:d4:2a:ec:b6:
         66:17:56:20:d5:24:5c:64:a9:9d:ec:4a:e0:05:09:8d:54:3f:
         6e:57:09:41
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUSX75TPBP+9voOFPbQJfhPtb2/vEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTAyMDAxMDU1WhcNMjUwNjA2MjM1OTU5
WjB6MUkwRwYDVQQFE0AyNTVkYTJkMjAxZjU1NTQyOWIwMjc2ZGU5ODI5ZDE0MTI1
OGYxOWRjMzkwNmY5MTQxOWFiOWVmZDNiMGM5MmI4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDd1ORxjz3qm/GMY479jPSz+CA4bDMtgtHrMTSAhlsCcUt6
fkihzVXapOU3B/9fPKt8mkaD9uIcSD78sS6IrLoPgFPWVzk8O1Vb5e/lDnB7JvTY
u1+8EHiyTCFQn58/wecSuxQkvDfkiwGvzzC0y8xJqVPQHmUVzWHncTOjKoIl8bU1
99KcV4qAblJT4LMSqqtq4i6yk97W/tIrUumAI+yFNhEZilmB9GvKnCm8+7usimqZ
p6D+1+9jnc7usY9GPZehph3KEpB2zGwHxsujeEP1hU4h0sWLlTHyTC/tFom6gC/a
6kigFlC4rMQZL8Peh/PN/xqfDkqL1ZuA1a86Y1AzAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUSne8y/0AE5E8SiflQW0aKvytCUMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzVlMjE4YjA0LWRmYWYtNGZkYi05ZTgyLWJhZDhkN2UzNmRlZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAQzjANBgkqhkiG9w0BAQsFAAOCAQEAFdvs5qi5XfJngBzpKU4X+yHDiRRa
1v2cmVl5fSOamsu4MwCrN/J9AtYdISK9NiEWBI6uopnqJ5GjHAPxZd8/2hTuE9el
A02kLhjnAuBSHMz7jHQ5XOue9sNSl/FfJZs5omWsHlf+AQMvrEzrb2Y1mEPa4N5R
m6yoBBKX0UzRvdci0Rv09IaDPTbanVBAqm2hIutKePFaKAO/a2CfXIOrhbwVCp6t
os2BbBseicnVYpy+FOIVD/74OX4wDvsZDSUH+G481fd/nalsOHOrkhFeHoy6GYxU
E020ul87jBwILezWlYoTlPLUKuy2ZhdWINUkXGSpnexK4AUJjVQ/blcJQQ==
-----END CERTIFICATE-----
Generated at Mon May 5 16:24:37 2025 by rpki-client