Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1df4a82a-0875-47b6-9fc0-b67c097bc45c.roa
File:                     1df4a82a-0875-47b6-9fc0-b67c097bc45c.roa (raw, json)
Hash identifier:          k0UDs3z8O8eeIg2eUlEIzTs5q6lGqdrK+IneX4eHI8U=
Subject key identifier:   42:CB:CA:91:0E:E0:62:B9:B0:EE:1C:D6:B7:8B:50:24:F8:4A:7A:89
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       7A4ADF0C6597A3EF61ED6679D9FCFDC4716263AC
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1df4a82a-0875-47b6-9fc0-b67c097bc45c.roa
Signing time:             Tue 29 Apr 2025 00:30:08 +0000
ROA not before:           Tue 29 Apr 2025 00:30:08 +0000
ROA not after:            Tue 03 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f1:8800::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:4a:df:0c:65:97:a3:ef:61:ed:66:79:d9:fc:fd:c4:71:62:63:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Apr 29 00:30:08 2025 GMT
            Not After : Jun  3 23:59:59 2025 GMT
        Subject: serialNumber=47cad484234825d2c7a1e2260c955816f6f0d82f4fce1d3582198f631615922a, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:30:16:72:f6:ac:3d:6a:56:1c:4a:82:5d:8b:
                    94:f1:d9:57:e8:35:e2:a1:1d:ca:39:6b:da:f6:7a:
                    b0:62:69:b2:88:39:e3:e1:d4:8c:d1:d7:be:d5:d7:
                    eb:07:33:9b:38:51:b6:07:f2:22:75:8f:55:23:b2:
                    a8:eb:94:c0:37:06:07:54:ee:4a:f5:20:37:b6:61:
                    f9:16:3e:4c:a1:47:47:97:36:c5:32:ff:ef:75:8d:
                    2c:14:a1:47:ba:fa:fe:fd:c5:a7:de:50:bf:c0:21:
                    b2:89:cb:e4:12:7d:db:fd:eb:eb:ff:ff:6d:d7:40:
                    4c:b7:5e:cb:59:f1:6a:72:5f:04:c9:20:17:35:f3:
                    25:0b:01:95:81:7b:ea:aa:da:69:96:96:86:9a:b0:
                    a5:d2:39:56:43:fe:15:01:0e:1a:7c:29:7a:a7:24:
                    fe:d5:d4:31:08:69:4e:c5:46:4c:de:00:00:03:92:
                    29:f5:df:6f:7b:74:1b:f1:bf:71:e0:04:5d:b9:25:
                    83:7e:8a:5d:da:99:75:5a:1b:53:f1:4b:f7:1b:15:
                    5a:dd:ad:92:3c:7a:e1:dc:6e:9d:ee:ab:58:92:6a:
                    20:e4:ce:72:a7:83:ad:7d:28:e3:ff:a7:4e:d4:58:
                    50:86:f7:be:0c:00:fb:2b:a4:94:95:a0:e7:d7:fb:
                    dc:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:CB:CA:91:0E:E0:62:B9:B0:EE:1C:D6:B7:8B:50:24:F8:4A:7A:89
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1df4a82a-0875-47b6-9fc0-b67c097bc45c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f1:8800::/40

    Signature Algorithm: sha256WithRSAEncryption
         3e:50:25:04:dd:6d:03:40:3e:7f:24:0d:41:72:61:31:a7:f9:
         80:56:be:bd:e5:d8:42:3b:f8:27:34:cd:0c:92:02:47:fa:4c:
         b5:fe:7e:db:39:18:25:23:23:df:ee:e5:c7:0b:ff:34:33:c7:
         d8:a4:da:1e:3a:44:7f:80:2b:8f:0b:1a:41:4a:90:61:81:02:
         3f:80:02:37:4d:d4:49:4d:b2:81:a5:33:43:ba:d6:cd:06:e6:
         32:7d:ae:e6:29:56:91:2b:22:3c:30:29:e5:06:43:6a:d5:a8:
         55:af:b2:07:48:fe:5f:9b:47:1e:3f:71:4b:f8:b5:4f:0e:44:
         5e:d4:8a:08:d8:54:0d:0b:b6:5d:f2:9f:c9:93:a0:77:f3:8f:
         74:5a:03:2b:ab:cd:43:96:46:3b:02:d4:9a:a7:e2:4a:46:05:
         1f:46:4a:ae:ed:aa:e7:cf:55:59:e5:e8:95:d9:fa:f8:2b:54:
         94:1e:6b:b9:4a:28:2b:a0:8b:d2:fb:4e:69:77:fd:29:87:d8:
         12:4e:cd:a0:14:43:a4:26:4a:ef:e4:82:28:4a:6c:56:0a:ae:
         31:6f:fc:85:98:ce:f1:17:67:63:68:ca:88:2d:7f:49:b9:56:
         c7:a0:72:a5:f6:f2:2f:8e:b4:50:e6:3a:a5:a1:a4:12:61:6f:
         9a:11:10:96
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUekrfDGWXo+9h7WZ52fz9xHFiY6wwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNDI5MDAzMDA4WhcNMjUwNjAzMjM1OTU5
WjB6MUkwRwYDVQQFE0A0N2NhZDQ4NDIzNDgyNWQyYzdhMWUyMjYwYzk1NTgxNmY2
ZjBkODJmNGZjZTFkMzU4MjE5OGY2MzE2MTU5MjJhMS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC2MBZy9qw9alYcSoJdi5Tx2VfoNeKhHco5a9r2erBiabKI
OePh1IzR177V1+sHM5s4UbYH8iJ1j1UjsqjrlMA3BgdU7kr1IDe2YfkWPkyhR0eX
NsUy/+91jSwUoUe6+v79xafeUL/AIbKJy+QSfdv96+v//23XQEy3XstZ8WpyXwTJ
IBc18yULAZWBe+qq2mmWloaasKXSOVZD/hUBDhp8KXqnJP7V1DEIaU7FRkzeAAAD
kin13297dBvxv3HgBF25JYN+il3amXVaG1PxS/cbFVrdrZI8euHcbp3uq1iSaiDk
znKng619KOP/p07UWFCG974MAPsrpJSVoOfX+9yJAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUQsvKkQ7gYrmw7hzWt4tQJPhKeokwHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2LzFkZjRhODJhLTA4NzUtNDdiNi05ZmMwLWI2N2MwOTdiYzQ1Yy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAPDxiDANBgkqhkiG9w0BAQsFAAOCAQEAPlAlBN1tA0A+fyQNQXJhMaf5
gFa+veXYQjv4JzTNDJICR/pMtf5+2zkYJSMj3+7lxwv/NDPH2KTaHjpEf4Arjwsa
QUqQYYECP4ACN03USU2ygaUzQ7rWzQbmMn2u5ilWkSsiPDAp5QZDatWoVa+yB0j+
X5tHHj9xS/i1Tw5EXtSKCNhUDQu2XfKfyZOgd/OPdFoDK6vNQ5ZGOwLUmqfiSkYF
H0ZKru2q589VWeXoldn6+CtUlB5ruUooK6CL0vtOaXf9KYfYEk7NoBRDpCZK7+SC
KEpsVgquMW/8hZjO8RdnY2jKiC1/SblWx6BypfbyL460UOY6paGkEmFvmhEQlg==
-----END CERTIFICATE-----
Generated at Fri May 9 02:44:55 2025 by rpki-client