Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e2efa47b-abae-4edd-bc60-e8042483c05d.roa
File:                     e2efa47b-abae-4edd-bc60-e8042483c05d.roa (raw, json)
Hash identifier:          Ysme90J1Z/sKQDJuwFqT/X7wghAG9TaD23zJGlXXCqM=
Subject key identifier:   90:18:61:6A:C7:97:CD:05:DC:59:18:5D:DC:BE:E1:EF:0A:AA:83:35
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       06650811805F83D84FFA81EBE02CB7E5C4D4C62C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e2efa47b-abae-4edd-bc60-e8042483c05d.roa
Signing time:             Wed 18 Jun 2025 00:21:00 +0000
ROA not before:           Wed 18 Jun 2025 00:21:00 +0000
ROA not after:            Wed 23 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        96.0.100.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:65:08:11:80:5f:83:d8:4f:fa:81:eb:e0:2c:b7:e5:c4:d4:c6:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 18 00:21:00 2025 GMT
            Not After : Jul 23 23:59:59 2025 GMT
        Subject: serialNumber=f6ec0ffc1b85127cc14c7033a73559307886a12cd2014a97ee7ba3af990feae6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:94:ce:48:0a:49:40:53:da:98:87:ec:e1:7c:
                    c5:f2:06:9b:60:05:9e:72:c7:51:3e:a0:45:1f:21:
                    67:ee:d5:f0:60:cc:96:cb:4f:b9:3c:29:8a:49:1b:
                    6d:22:3d:8a:2f:df:d7:43:27:54:4b:43:03:5b:70:
                    54:f1:70:60:33:86:59:6f:22:2a:5d:45:31:fa:b2:
                    80:ef:b2:d7:a9:08:50:13:92:67:a2:de:4a:c1:57:
                    9d:6c:61:ed:ca:7d:27:cd:35:c5:1a:69:7f:74:7f:
                    26:2b:e3:ce:26:e8:0d:86:24:35:22:47:23:d9:0a:
                    75:10:bf:82:24:19:46:76:f2:81:22:46:6f:b2:99:
                    13:ff:f5:79:0c:b9:9d:cf:b1:e1:08:9d:f1:bb:02:
                    ff:9f:62:d1:af:26:af:bc:9a:3d:73:f9:f0:01:b9:
                    3d:2c:2d:4f:b2:a0:4d:ec:30:20:80:23:bc:f2:76:
                    4d:7f:2d:f1:30:8e:04:ab:8b:8e:f7:b0:45:1d:bb:
                    af:d1:41:6c:86:bb:00:f7:7b:12:99:b0:5d:b0:e6:
                    0a:c3:07:2d:53:4e:29:a6:10:96:8b:73:14:9b:1b:
                    f2:f8:cd:53:0a:67:d3:dc:54:1d:25:06:e2:3d:4f:
                    6b:92:ab:a4:1d:17:3d:00:67:31:17:2b:19:cc:1b:
                    b5:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:18:61:6A:C7:97:CD:05:DC:59:18:5D:DC:BE:E1:EF:0A:AA:83:35
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e2efa47b-abae-4edd-bc60-e8042483c05d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.0.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d6:b5:46:14:62:14:23:16:9c:41:ff:e8:0b:5a:f4:4f:1d:cc:
         6f:1a:62:28:a5:d9:af:f2:9e:35:ca:69:b1:fa:5f:6f:e9:f3:
         fa:0e:68:b7:f2:4d:ce:ed:69:3a:dd:03:ac:4f:ce:d1:c3:17:
         b8:a7:62:83:69:de:d7:44:56:43:36:1a:9b:09:e3:8c:0d:04:
         c8:d4:37:af:bf:8e:b6:96:10:1e:60:0d:e0:de:77:48:5f:e6:
         b6:b6:b0:45:17:a0:5b:4b:26:6c:ca:82:d8:d7:02:e1:6b:7d:
         e1:64:07:6c:62:66:d2:18:3f:5a:37:7f:99:83:d3:c8:41:5e:
         a8:64:e5:6d:3c:ca:66:ac:e8:b7:17:ff:e3:65:cd:57:99:65:
         f1:eb:98:a1:27:8b:a4:56:1a:1b:04:b8:e6:b1:15:8b:52:e2:
         ce:d4:c6:89:c1:fd:58:e0:46:a1:e4:3c:bd:aa:9f:9c:bb:23:
         2b:c3:2e:f2:ea:f9:3a:14:0b:74:44:16:ee:ed:49:db:40:80:
         61:a9:34:c8:c7:23:81:03:8f:60:03:cd:75:83:6b:d6:41:00:
         26:80:18:ef:c9:11:8c:1b:05:63:13:df:c7:d1:50:dd:22:ff:
         3f:2b:af:2b:69:69:9e:26:c1:f2:22:77:f4:9f:e2:5b:4d:6f:
         aa:22:16:df
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUBmUIEYBfg9hP+oHr4Cy35cTUxiwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjE4MDAyMTAwWhcNMjUwNzIzMjM1OTU5
WjB6MUkwRwYDVQQFE0BmNmVjMGZmYzFiODUxMjdjYzE0YzcwMzNhNzM1NTkzMDc4
ODZhMTJjZDIwMTRhOTdlZTdiYTNhZjk5MGZlYWU2MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDZlM5ICklAU9qYh+zhfMXyBptgBZ5yx1E+oEUfIWfu1fBg
zJbLT7k8KYpJG20iPYov39dDJ1RLQwNbcFTxcGAzhllvIipdRTH6soDvstepCFAT
kmei3krBV51sYe3KfSfNNcUaaX90fyYr484m6A2GJDUiRyPZCnUQv4IkGUZ28oEi
Rm+ymRP/9XkMuZ3PseEInfG7Av+fYtGvJq+8mj1z+fABuT0sLU+yoE3sMCCAI7zy
dk1/LfEwjgSri473sEUdu6/RQWyGuwD3exKZsF2w5grDBy1TTimmEJaLcxSbG/L4
zVMKZ9PcVB0lBuI9T2uSq6QdFz0AZzEXKxnMG7VbAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUkBhhaseXzQXcWRhd3L7h7wqqgzUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2UyZWZhNDdiLWFiYWUtNGVkZC1iYzYwLWU4MDQyNDgzYzA1ZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAFgAGQwDQYJKoZIhvcNAQELBQADggEBANa1RhRiFCMWnEH/6Ata9E8dzG8a
Yiil2a/ynjXKabH6X2/p8/oOaLfyTc7taTrdA6xPztHDF7inYoNp3tdEVkM2GpsJ
44wNBMjUN6+/jraWEB5gDeDed0hf5ra2sEUXoFtLJmzKgtjXAuFrfeFkB2xiZtIY
P1o3f5mD08hBXqhk5W08ymas6LcX/+NlzVeZZfHrmKEni6RWGhsEuOaxFYtS4s7U
xonB/VjgRqHkPL2qn5y7IyvDLvLq+ToUC3REFu7tSdtAgGGpNMjHI4EDj2ADzXWD
a9ZBACaAGO/JEYwbBWMT38fRUN0i/z8rrytpaZ4mwfIid/Sf4ltNb6oiFt8=
-----END CERTIFICATE-----
Generated at Sun Jun 29 08:54:22 2025 by rpki-client