Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6f491165-5062-4abd-aaf2-0f2e517e9ea7.roa
File:                     6f491165-5062-4abd-aaf2-0f2e517e9ea7.roa (raw, json)
Hash identifier:          ajBVtacLbhBL+Azd5Pbrh2zUlqJuQvKFH/MyNXI40rI=
Subject key identifier:   65:55:A7:67:9F:81:D0:54:3D:A2:BF:0F:38:60:82:2D:3F:F6:51:83
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       33E9112919AB60750769BF631152BD27FFF73C06
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6f491165-5062-4abd-aaf2-0f2e517e9ea7.roa
Signing time:             Wed 02 Jul 2025 00:41:26 +0000
ROA not before:           Wed 02 Jul 2025 00:41:26 +0000
ROA not after:            Wed 06 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        69.0.150.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:e9:11:29:19:ab:60:75:07:69:bf:63:11:52:bd:27:ff:f7:3c:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul  2 00:41:26 2025 GMT
            Not After : Aug  6 23:59:59 2025 GMT
        Subject: serialNumber=d41d30abdc10cb1760ac4038af25f6f3b4ca8b35be70d1ef18720c48d177fd88, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7d:09:b3:63:13:83:f4:2c:e4:a5:ab:b2:c2:
                    b0:7e:15:c2:fb:8e:ce:c3:47:b9:9b:e8:38:ba:db:
                    6c:d7:51:e1:26:8b:c6:16:8b:bf:90:b0:5f:0a:08:
                    cc:04:22:b8:e5:f0:02:7c:c7:8b:63:43:c4:b1:16:
                    69:17:b5:59:76:89:93:9e:f8:4d:90:b9:f1:d8:ba:
                    1d:c6:1d:79:d4:f3:e9:1a:b2:1d:89:57:09:2a:57:
                    1d:f1:20:5d:9d:ce:1e:d4:1f:61:94:b7:87:f0:ca:
                    da:c3:23:a7:71:46:b0:0d:3a:af:b0:7a:74:1d:e4:
                    38:6e:6f:35:6e:c0:bd:31:88:b2:0f:61:ef:31:d5:
                    53:e7:4f:0b:92:29:be:4f:69:83:bc:ee:b8:0b:1b:
                    45:35:80:d1:34:20:20:c2:e8:b1:b7:1e:ac:32:15:
                    98:d4:e5:b7:05:bd:e9:27:5b:67:21:84:a6:48:03:
                    90:6a:af:b9:00:e9:3d:24:a1:5e:7d:3e:ab:f1:c7:
                    30:47:d4:94:8d:1d:9f:ba:07:2e:9e:0c:8a:4c:ad:
                    fc:d1:0f:bb:3e:93:03:57:70:5d:61:63:13:c6:23:
                    77:81:d1:55:fe:15:7a:61:3b:8b:0b:0c:0c:b9:62:
                    c5:e0:f8:bc:9c:c9:80:08:69:1d:88:90:12:c6:be:
                    33:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:55:A7:67:9F:81:D0:54:3D:A2:BF:0F:38:60:82:2D:3F:F6:51:83
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6f491165-5062-4abd-aaf2-0f2e517e9ea7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.0.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c0:8a:8d:53:41:f4:be:35:e5:c6:18:54:b1:3d:b6:dc:e1:a0:
         51:00:54:29:a5:83:d9:ea:9f:8e:31:fc:a5:c7:ed:d1:26:df:
         00:94:a8:7c:fa:40:8e:14:05:2d:5c:6a:4d:2e:96:30:4a:39:
         fb:e7:9b:6c:b8:79:5f:f2:4c:52:1f:8e:df:31:5d:72:d6:a2:
         32:71:d3:21:91:b7:50:6e:b5:52:64:16:11:f7:3f:6b:a7:33:
         84:32:69:15:9d:bf:1c:ad:8b:d8:b2:c6:92:1f:42:cd:8d:14:
         d1:4b:20:39:ef:1d:92:d6:fe:e9:97:aa:7b:1f:62:3f:58:e1:
         af:50:9a:6f:22:a2:c5:52:9f:47:63:5e:9d:4f:fa:0c:37:a1:
         95:3f:4e:08:36:9f:d4:f3:10:80:9f:44:aa:45:b5:8d:02:bf:
         ad:b8:2d:68:8b:3b:1f:db:54:82:6d:38:77:c1:ef:5d:2e:da:
         ca:92:1d:0a:df:a6:2e:c6:b7:54:03:3b:8f:da:bb:88:41:58:
         16:50:ee:77:71:69:64:a4:4e:e0:34:e6:d6:2f:f6:ce:8a:ca:
         be:07:5c:a1:01:5f:33:82:f3:a9:d2:e2:38:25:a7:a7:85:12:
         1c:88:38:77:14:0e:3e:fd:2e:cb:a1:1a:5e:5d:2b:93:73:d9:
         21:e1:e8:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 05:09:42 2025 by rpki-client