Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d5be3fee-5249-40e3-a57f-f67e4d2c6c9a.roa
File:                     d5be3fee-5249-40e3-a57f-f67e4d2c6c9a.roa (raw, json)
Hash identifier:          ZZwrSB3NtR85XiH63bkbRw9o0w+mUs+I4gxaAk7wOMs=
Subject key identifier:   F9:2A:38:A0:BF:99:15:E3:26:80:78:53:45:AC:6A:BA:CC:0F:DC:80
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       154F3015DD671CE55EE8033FFFB4E6F5754D5F75
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d5be3fee-5249-40e3-a57f-f67e4d2c6c9a.roa
Signing time:             Mon 16 Jun 2025 18:01:03 +0000
ROA not before:           Mon 16 Jun 2025 18:01:03 +0000
ROA not after:            Mon 21 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        52.93.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:4f:30:15:dd:67:1c:e5:5e:e8:03:3f:ff:b4:e6:f5:75:4d:5f:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jun 16 18:01:03 2025 GMT
            Not After : Jul 21 23:59:59 2025 GMT
        Subject: serialNumber=13546ca057223e01dbcb1961c33f99bf9fd036cde785f72ae7903b69cd3fb392, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a7:bd:86:ba:67:e9:95:09:0b:33:69:90:ab:
                    41:ca:41:28:ad:08:63:c7:31:c5:6b:1a:7b:d6:02:
                    18:d3:c7:e5:6e:9b:40:d9:d6:84:d1:65:1d:7b:43:
                    07:39:03:dc:c1:68:f4:cc:3d:8f:ef:2d:75:95:61:
                    3f:bf:88:9e:d1:e9:e2:1b:2e:0b:2a:24:c0:2e:62:
                    aa:f4:5a:2a:33:ab:2b:98:62:9a:9b:2b:30:87:bd:
                    74:52:1e:9f:bd:2c:22:14:b0:44:f6:c4:80:f1:65:
                    89:fa:43:76:48:3e:82:e4:da:93:f9:b0:0c:7d:8c:
                    48:7b:36:ec:d6:05:75:70:8d:f2:27:c0:58:18:1d:
                    f1:74:7a:04:47:39:cc:25:5f:86:0b:34:e6:32:c6:
                    b1:59:fd:38:6d:cd:94:b6:d5:b8:56:1b:cb:0f:1d:
                    4f:7d:ed:96:2e:2e:04:9b:74:60:75:1b:65:50:5b:
                    30:0e:f7:37:41:ec:69:4c:dd:86:50:c2:05:df:b7:
                    07:ba:35:47:f7:38:8a:00:62:ce:07:ea:5e:35:ca:
                    28:97:21:39:21:76:50:4d:d8:90:b1:94:54:fd:a8:
                    9c:4b:34:44:eb:73:81:6a:cd:e5:05:83:25:4a:a2:
                    6b:03:5d:dd:c0:bd:38:77:10:5f:d3:40:e1:82:8b:
                    06:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:2A:38:A0:BF:99:15:E3:26:80:78:53:45:AC:6A:BA:CC:0F:DC:80
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d5be3fee-5249-40e3-a57f-f67e4d2c6c9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.93.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:da:cf:19:c6:ff:9a:21:51:d5:1b:77:68:c7:a3:3e:d5:94:
         0b:9a:98:df:df:c4:7a:6f:d9:75:d1:1a:46:aa:97:fd:8b:72:
         0f:36:11:86:1e:90:d4:2e:26:45:0f:e9:20:f6:56:07:30:1f:
         2f:d9:7e:d7:7e:59:ec:d2:89:bb:3c:52:04:20:86:ce:4f:e5:
         b1:ab:63:fd:94:98:58:41:9c:3e:fd:4f:7c:b0:fa:c9:f0:23:
         4d:65:c7:90:46:ff:4d:30:f1:48:55:a4:db:d0:1a:e9:0a:92:
         a7:8d:c2:ac:30:f3:67:ae:18:53:01:bb:69:fa:03:03:29:42:
         ec:b2:59:72:01:75:78:13:8a:a5:d4:e8:29:96:7a:46:0a:16:
         f3:de:96:f6:f2:34:20:e7:5f:bc:ad:7d:96:1d:f0:71:48:cb:
         a2:78:bf:34:68:9f:61:f4:c0:b5:dd:4b:f0:36:54:f4:75:18:
         99:dc:d8:52:f4:7e:ef:89:49:ab:56:68:a1:f1:bd:be:fa:3d:
         0d:42:10:e6:96:38:28:08:81:6b:5d:bc:34:39:14:25:76:ed:
         97:2d:f8:3b:89:89:dd:c7:13:7a:62:74:f7:2c:3b:2e:be:a4:
         1a:88:a6:27:42:ec:05:0a:24:50:63:30:c4:2c:11:8f:4d:3b:
         91:07:b0:b1
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUFU8wFd1nHOVe6AM//7Tm9XVNX3UwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjE2MTgwMTAzWhcNMjUwNzIxMjM1OTU5
WjB6MUkwRwYDVQQFE0AxMzU0NmNhMDU3MjIzZTAxZGJjYjE5NjFjMzNmOTliZjlm
ZDAzNmNkZTc4NWY3MmFlNzkwM2I2OWNkM2ZiMzkyMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDip72GumfplQkLM2mQq0HKQSitCGPHMcVrGnvWAhjTx+Vu
m0DZ1oTRZR17Qwc5A9zBaPTMPY/vLXWVYT+/iJ7R6eIbLgsqJMAuYqr0WiozqyuY
YpqbKzCHvXRSHp+9LCIUsET2xIDxZYn6Q3ZIPoLk2pP5sAx9jEh7NuzWBXVwjfIn
wFgYHfF0egRHOcwlX4YLNOYyxrFZ/ThtzZS21bhWG8sPHU997ZYuLgSbdGB1G2VQ
WzAO9zdB7GlM3YZQwgXftwe6NUf3OIoAYs4H6l41yiiXITkhdlBN2JCxlFT9qJxL
NETrc4FqzeUFgyVKomsDXd3AvTh3EF/TQOGCiwbbAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU+So4oL+ZFeMmgHhTRaxquswP3IAwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2Q1YmUzZmVlLTUyNDktNDBlMy1hNTdmLWY2N2U0ZDJjNmM5YS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAA0XTswDQYJKoZIhvcNAQELBQADggEBAI/azxnG/5ohUdUbd2jHoz7VlAua
mN/fxHpv2XXRGkaql/2Lcg82EYYekNQuJkUP6SD2VgcwHy/Zftd+WezSibs8UgQg
hs5P5bGrY/2UmFhBnD79T3yw+snwI01lx5BG/00w8UhVpNvQGukKkqeNwqww82eu
GFMBu2n6AwMpQuyyWXIBdXgTiqXU6CmWekYKFvPelvbyNCDnX7ytfZYd8HFIy6J4
vzRon2H0wLXdS/A2VPR1GJnc2FL0fu+JSatWaKHxvb76PQ1CEOaWOCgIgWtdvDQ5
FCV27Zct+DuJid3HE3pidPcsOy6+pBqIpidC7AUKJFBjMMQsEY9NO5EHsLE=
-----END CERTIFICATE-----
Generated at Sun Jun 29 02:34:56 2025 by rpki-client