Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/552b517a-5218-4ed2-a892-21426274eafb.roa
File:                     552b517a-5218-4ed2-a892-21426274eafb.roa (raw, json)
Hash identifier:          pjSS72k7GMj61EB4y0mRKdjKS63cLWv4Ym9PVv+6Sx4=
Subject key identifier:   C5:28:3F:69:8A:C8:ED:9B:98:1C:E1:7B:60:8A:57:1B:C4:34:27:D3
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7D1CC6DB136F9E7CFCAEDF995800DFED4C122024
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/552b517a-5218-4ed2-a892-21426274eafb.roa
Signing time:             Tue 08 Jul 2025 17:40:16 +0000
ROA not before:           Tue 08 Jul 2025 17:40:16 +0000
ROA not after:            Tue 12 Aug 2025 23:59:59 +0000
asID:                     7224
IP address blocks:        69.210.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:1c:c6:db:13:6f:9e:7c:fc:ae:df:99:58:00:df:ed:4c:12:20:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul  8 17:40:16 2025 GMT
            Not After : Aug 12 23:59:59 2025 GMT
        Subject: serialNumber=9113995a25bb3c551fa99c619645b8269c10233010563298e591d4408964d98e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e5:06:b0:b5:70:47:74:e8:96:2f:35:b9:31:
                    a5:4a:c5:6b:79:67:21:40:56:5c:27:ec:41:bb:66:
                    e1:bd:8d:d8:26:78:5f:f8:f0:61:84:63:df:c3:bf:
                    3f:6d:36:03:63:6c:be:03:5b:a6:2d:62:86:a3:ae:
                    2f:d2:cc:7f:af:14:3c:d1:91:07:cf:0a:08:1f:7c:
                    20:ab:1e:42:48:d6:94:3a:f1:16:38:18:a5:df:9d:
                    8f:52:4a:8d:91:a1:a8:33:ec:11:c3:17:c8:91:a5:
                    a7:41:09:a4:af:86:8d:25:ef:11:92:19:63:42:02:
                    83:bb:35:8e:a0:01:20:34:90:69:74:7b:6c:e6:f7:
                    9c:47:78:24:e9:58:ad:46:f4:88:23:1a:29:99:c8:
                    66:8f:e2:b8:15:55:e9:a7:d6:d4:c8:ad:0b:ce:ee:
                    3b:e3:56:1c:e9:39:24:31:f1:36:29:28:14:40:4c:
                    e6:05:c9:ce:1f:00:fc:e9:95:16:d7:c8:18:9f:e1:
                    f6:63:cc:2b:e9:cd:fc:e8:8b:81:e8:d2:f8:64:07:
                    f2:25:f9:d3:eb:f4:26:3f:1e:f3:37:8f:72:23:b1:
                    56:04:5c:3d:f6:44:d0:65:54:37:3c:a1:01:af:b5:
                    71:d9:58:2e:b3:44:b2:a8:e3:be:43:21:ac:8f:cd:
                    c7:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:28:3F:69:8A:C8:ED:9B:98:1C:E1:7B:60:8A:57:1B:C4:34:27:D3
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/552b517a-5218-4ed2-a892-21426274eafb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.210.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         c9:77:49:f2:cd:f4:96:5d:af:6e:8d:26:56:a9:58:f1:b6:cc:
         bc:a9:9a:ed:e0:4e:c4:3b:54:0d:ae:5e:af:ac:05:7c:6f:cf:
         c8:d4:c8:c9:e0:88:df:ff:12:63:98:88:3f:f8:fa:ff:b3:53:
         04:04:e9:4c:25:94:6b:c1:8b:5e:41:bb:9a:78:10:57:c2:b1:
         2e:d1:03:ff:07:59:b1:18:5e:66:56:21:d4:21:e2:87:a1:51:
         e9:50:27:d0:da:7e:ac:6b:13:f1:13:da:26:b8:ad:7a:85:5b:
         88:dd:94:8e:80:1c:93:ef:f1:3f:59:39:87:c4:17:12:11:6a:
         ff:a1:7d:da:73:8e:a3:b9:ed:a2:47:95:24:2a:6e:30:39:f5:
         4c:9c:78:4f:be:1a:88:97:83:c8:52:67:c1:4e:85:43:43:dc:
         77:92:2c:a9:ea:7f:62:5d:be:dd:d8:aa:f8:8f:ab:d3:7c:2f:
         bb:06:c5:12:31:39:b4:c3:70:6e:e7:37:cb:ff:55:4f:31:32:
         b8:3a:2a:50:bd:3a:c6:f9:15:d7:d5:93:04:2c:58:5e:ee:5b:
         75:8a:42:91:d2:a9:d2:b9:e4:6f:e2:db:0a:14:2d:64:83:8d:
         df:c5:1d:ab:f5:ba:3c:24:e2:75:c0:48:9a:5a:e2:bd:fa:6a:
         02:e1:dc:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 05:55:24 2025 by rpki-client