Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cc7e3fe7-6e30-4558-b2fd-08d149d39bbe.roa
File:                     cc7e3fe7-6e30-4558-b2fd-08d149d39bbe.roa (raw, json)
Hash identifier:          Ik0hLemFInz+PP4MY2XVBvnJc3q97RjTgfKaKKnRQ38=
Subject key identifier:   A8:B7:3D:7B:D4:2F:F9:8B:92:A6:B4:BB:45:00:40:C2:9D:96:25:4B
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       28094B4A696A4EFB295AF732645C1BBFEC59DDD7
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cc7e3fe7-6e30-4558-b2fd-08d149d39bbe.roa
Signing time:             Mon 16 Jun 2025 16:11:34 +0000
ROA not before:           Mon 16 Jun 2025 16:11:34 +0000
ROA not after:            Mon 21 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        13.248.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:09:4b:4a:69:6a:4e:fb:29:5a:f7:32:64:5c:1b:bf:ec:59:dd:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jun 16 16:11:34 2025 GMT
            Not After : Jul 21 23:59:59 2025 GMT
        Subject: serialNumber=c55dc75a3619c8d673dd1317b3fb9a7de5f66f8ed8cdb67905eb1dae872d628a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d9:aa:69:ca:3f:84:49:39:2f:5c:96:f9:a1:
                    74:f9:ed:b7:1d:4d:61:e8:83:b3:32:db:26:84:1a:
                    cb:df:90:e4:c4:b9:eb:98:6c:01:10:2c:5f:35:bd:
                    57:f3:13:d1:92:4b:bf:3d:d4:69:bb:11:e3:bb:a8:
                    a7:33:46:0d:0f:ef:a9:61:91:b6:71:85:0c:13:35:
                    04:84:45:da:6c:e9:6d:34:6e:ef:f0:58:ee:8d:c1:
                    31:8a:4b:3d:e2:1c:aa:cc:8d:58:e8:57:0c:95:5c:
                    1f:f0:bd:35:45:aa:20:5d:5e:e7:82:e8:a1:a7:97:
                    a5:dd:1e:0b:d7:c4:86:c6:63:44:1b:b5:cb:13:c2:
                    d3:ea:e9:29:d7:7a:58:de:0e:c5:a4:7f:bb:17:31:
                    7e:6f:e9:2c:f3:54:84:aa:14:e7:ed:6a:ea:bd:e3:
                    24:aa:e0:d0:39:11:14:c4:fc:2a:83:fe:68:cf:b4:
                    74:43:ac:39:90:06:59:bb:29:ca:39:de:a6:84:d4:
                    e0:ce:ee:e9:25:a4:5f:c9:57:b4:37:f7:de:a8:15:
                    9e:b8:77:59:ee:b5:9b:99:c7:8e:23:31:89:9d:30:
                    38:51:0f:9a:8f:90:df:8b:69:f0:6c:f5:3f:f1:d8:
                    25:93:10:9c:77:ea:4a:ab:b9:80:bc:a6:5f:9f:68:
                    0d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:B7:3D:7B:D4:2F:F9:8B:92:A6:B4:BB:45:00:40:C2:9D:96:25:4B
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cc7e3fe7-6e30-4558-b2fd-08d149d39bbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.248.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4b:c7:76:f8:0c:b0:14:5e:47:05:95:7f:69:f9:16:7e:17:ff:
         5d:23:1e:28:37:2b:c9:68:ad:65:90:8e:8a:10:bd:5a:cd:d5:
         b8:b8:d5:89:b2:3e:26:6c:e9:08:92:41:fc:5f:cb:ce:08:e9:
         4c:7a:8c:de:d6:37:13:29:45:49:b0:79:cb:8d:1e:3e:54:99:
         0b:be:33:ba:cb:0f:1c:d2:15:ab:ba:8e:ee:61:aa:02:dd:97:
         92:26:a5:09:7d:89:3a:ec:f2:ca:57:c9:8c:3a:ab:48:45:2d:
         d6:43:ac:66:f4:7a:6d:1f:10:d2:7f:7c:05:cf:f3:15:d4:86:
         ab:5b:7f:cc:c0:6e:f5:82:fd:14:c2:f9:ac:2f:0d:34:3d:47:
         0b:43:fb:bb:f0:1c:a0:2c:79:8e:58:e8:d6:06:49:7a:11:c5:
         70:f2:55:2f:1b:e9:ef:a0:5b:cb:df:7e:8e:41:80:9b:5d:b7:
         c8:4f:54:9b:b0:17:f9:1b:89:d9:36:a2:58:e6:0e:19:9f:a1:
         bc:d4:a4:c6:99:ab:2d:eb:69:90:bc:f5:f8:9b:87:47:fc:0e:
         01:df:26:55:20:b0:ba:24:33:a0:1a:f3:3a:37:01:6d:ca:38:
         0d:52:c7:9e:49:6e:31:95:b8:2a:8e:23:e5:ab:5b:b8:02:ee:
         1a:ea:6a:4e
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUKAlLSmlqTvspWvcyZFwbv+xZ3dcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjE2MTYxMTM0WhcNMjUwNzIxMjM1OTU5
WjB6MUkwRwYDVQQFE0BjNTVkYzc1YTM2MTljOGQ2NzNkZDEzMTdiM2ZiOWE3ZGU1
ZjY2ZjhlZDhjZGI2NzkwNWViMWRhZTg3MmQ2MjhhMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDR2appyj+ESTkvXJb5oXT57bcdTWHog7My2yaEGsvfkOTE
ueuYbAEQLF81vVfzE9GSS7891Gm7EeO7qKczRg0P76lhkbZxhQwTNQSERdps6W00
bu/wWO6NwTGKSz3iHKrMjVjoVwyVXB/wvTVFqiBdXueC6KGnl6XdHgvXxIbGY0Qb
tcsTwtPq6SnXeljeDsWkf7sXMX5v6SzzVISqFOftauq94ySq4NA5ERTE/CqD/mjP
tHRDrDmQBlm7Kco53qaE1ODO7uklpF/JV7Q3996oFZ64d1nutZuZx44jMYmdMDhR
D5qPkN+LafBs9T/x2CWTEJx36kqruYC8pl+faA1lAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUqLc9e9Qv+YuSprS7RQBAwp2WJUswHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2NjN2UzZmU3LTZlMzAtNDU1OC1iMmZkLTA4ZDE0OWQzOWJiZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAUN+EAwDQYJKoZIhvcNAQELBQADggEBAEvHdvgMsBReRwWVf2n5Fn4X/10j
Hig3K8lorWWQjooQvVrN1bi41YmyPiZs6QiSQfxfy84I6Ux6jN7WNxMpRUmwecuN
Hj5UmQu+M7rLDxzSFau6ju5hqgLdl5ImpQl9iTrs8spXyYw6q0hFLdZDrGb0em0f
ENJ/fAXP8xXUhqtbf8zAbvWC/RTC+awvDTQ9RwtD+7vwHKAseY5Y6NYGSXoRxXDy
VS8b6e+gW8vffo5BgJtdt8hPVJuwF/kbidk2oljmDhmfobzUpMaZqy3raZC89fib
h0f8DgHfJlUgsLokM6Aa8zo3AW3KOA1Sx55JbjGVuCqOI+WrW7gC7hrqak4=
-----END CERTIFICATE-----
Generated at Sun Jun 29 02:56:32 2025 by rpki-client