Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a53817fd-b599-4741-a058-100f3660315d.roa
File:                     a53817fd-b599-4741-a058-100f3660315d.roa (raw, json)
Hash identifier:          PAS59+XoaxWIASaGndSKrS5f9dxxmbDPdZo5XTtHNC4=
Subject key identifier:   1D:5A:02:65:58:1A:0A:62:99:53:38:56:1B:88:9C:89:64:0E:3D:F1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3B35909AA914AB853FC471BB53B6EDFFA5FC098F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a53817fd-b599-4741-a058-100f3660315d.roa
Signing time:             Tue 19 Aug 2025 00:00:38 +0000
ROA not before:           Tue 19 Aug 2025 00:00:38 +0000
ROA not after:            Tue 23 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        163.3.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:35:90:9a:a9:14:ab:85:3f:c4:71:bb:53:b6:ed:ff:a5:fc:09:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 19 00:00:38 2025 GMT
            Not After : Sep 23 23:59:59 2025 GMT
        Subject: serialNumber=e63a731712b0600c823e182c268a8fbb637afeb9559c26aa91c26bd4f168d1a4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a9:27:3a:ed:73:33:ae:40:8c:87:86:f1:96:
                    f9:89:35:16:2b:33:04:08:b8:1c:2a:10:5a:59:24:
                    0e:d3:8d:6f:99:17:74:6a:61:21:51:c9:bd:8c:85:
                    ee:98:84:2d:89:b4:13:43:30:fe:ec:bc:b6:64:33:
                    3e:20:fd:f1:75:3d:4a:3a:65:11:ed:54:24:45:6c:
                    b5:e3:59:88:9d:73:a4:57:f3:bd:30:4f:68:13:b7:
                    ef:19:21:53:ce:4b:f4:40:1a:e4:2f:26:1e:50:c8:
                    95:c0:40:c6:e2:b6:8d:4b:73:01:48:e5:3b:21:cf:
                    0e:88:b1:b6:55:40:5d:db:6d:3c:1f:4c:34:6a:6c:
                    64:cf:58:e3:07:05:4e:68:4f:1b:76:cd:e6:8c:29:
                    57:43:b2:76:d5:66:5e:74:94:64:98:ab:20:1b:ff:
                    8f:5a:30:99:1d:28:bd:b3:e7:96:30:b5:da:cd:6e:
                    4f:62:a2:41:85:0e:b1:98:cb:d5:f5:2c:62:7c:4a:
                    ca:57:55:9e:9d:3f:59:53:38:72:dc:9c:8f:b2:ce:
                    be:6f:5f:e0:53:ca:73:8f:b7:f4:17:7e:9f:eb:8e:
                    00:29:a6:8d:c0:a2:95:d6:78:df:69:35:42:05:a2:
                    a2:4f:07:b6:46:a4:0d:de:b0:2c:25:38:ea:7b:29:
                    04:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:5A:02:65:58:1A:0A:62:99:53:38:56:1B:88:9C:89:64:0E:3D:F1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a53817fd-b599-4741-a058-100f3660315d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.3.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         ba:d9:50:b8:d5:3b:88:3d:8a:fb:ad:3d:ec:50:aa:4b:4c:89:
         87:ae:e7:0d:34:15:46:64:29:34:46:25:f4:ab:c3:91:21:85:
         ee:02:23:5a:b8:7e:b2:2b:47:90:75:d3:59:ee:65:ec:c6:f1:
         23:5b:31:5f:6a:c6:fa:8b:64:97:d0:0f:09:de:a6:03:41:73:
         1b:f8:d9:b3:04:d4:53:46:7f:ab:7a:a0:10:e5:e0:d6:d3:1b:
         4f:3c:db:be:6e:26:4e:4c:92:77:0d:e0:16:06:35:cf:40:0d:
         d8:0f:2a:5a:f1:67:26:89:bd:76:f2:af:4c:11:64:22:9f:07:
         6b:9c:c2:be:15:45:ec:31:82:dd:de:b6:aa:30:2d:f8:50:ca:
         2f:e7:24:cb:a4:f9:a9:86:39:e1:56:25:fb:75:4f:f7:cb:07:
         9f:12:97:95:36:93:f4:46:14:64:92:f8:d4:04:4b:0e:dd:5c:
         8b:5b:96:51:02:f6:0b:e4:b1:6d:42:d0:7d:a8:42:26:be:a6:
         fc:0c:cc:31:a0:42:5b:fe:9f:a3:0b:41:ca:68:2e:1a:5f:c4:
         d3:23:ae:84:50:2f:85:dd:18:90:5e:1a:ae:43:fe:19:51:a4:
         9e:c8:72:02:34:88:ab:19:92:fa:cb:cb:1d:b5:f4:7f:d1:ce:
         2f:08:e7:1b
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUOzWQmqkUq4U/xHG7U7bt/6X8CY8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE5MDAwMDM4WhcNMjUwOTIzMjM1OTU5
WjB6MUkwRwYDVQQFE0BlNjNhNzMxNzEyYjA2MDBjODIzZTE4MmMyNjhhOGZiYjYz
N2FmZWI5NTU5YzI2YWE5MWMyNmJkNGYxNjhkMWE0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDUqSc67XMzrkCMh4bxlvmJNRYrMwQIuBwqEFpZJA7TjW+Z
F3RqYSFRyb2Mhe6YhC2JtBNDMP7svLZkMz4g/fF1PUo6ZRHtVCRFbLXjWYidc6RX
870wT2gTt+8ZIVPOS/RAGuQvJh5QyJXAQMbito1LcwFI5Tshzw6IsbZVQF3bbTwf
TDRqbGTPWOMHBU5oTxt2zeaMKVdDsnbVZl50lGSYqyAb/49aMJkdKL2z55YwtdrN
bk9iokGFDrGYy9X1LGJ8SspXVZ6dP1lTOHLcnI+yzr5vX+BTynOPt/QXfp/rjgAp
po3AopXWeN9pNUIFoqJPB7ZGpA3esCwlOOp7KQTlAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUHVoCZVgaCmKZUzhWG4iciWQOPfEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2E1MzgxN2ZkLWI1OTktNDc0MS1hMDU4LTEwMGYzNjYwMzE1ZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwCjAzANBgkqhkiG9w0BAQsFAAOCAQEAutlQuNU7iD2K+6097FCqS0yJh67n
DTQVRmQpNEYl9KvDkSGF7gIjWrh+sitHkHXTWe5l7MbxI1sxX2rG+otkl9APCd6m
A0FzG/jZswTUU0Z/q3qgEOXg1tMbTzzbvm4mTkySdw3gFgY1z0AN2A8qWvFnJom9
dvKvTBFkIp8Ha5zCvhVF7DGC3d62qjAt+FDKL+cky6T5qYY54VYl+3VP98sHnxKX
lTaT9EYUZJL41ARLDt1ci1uWUQL2C+SxbULQfahCJr6m/AzMMaBCW/6fowtBymgu
Gl/E0yOuhFAvhd0YkF4arkP+GVGknshyAjSIqxmS+svLHbX0f9HOLwjnGw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:12:24 2025 by rpki-client