Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88296b80-7a2f-4c78-bca6-31fd9a45902e.roa
File:                     88296b80-7a2f-4c78-bca6-31fd9a45902e.roa (raw, json)
Hash identifier:          J20FhabNIanQ7omXNDW7s//M6xQRmnLhrSmYBExRnvU=
Subject key identifier:   96:B8:F4:47:98:A9:A8:E8:57:83:17:14:B0:97:74:04:81:DD:13:6B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       58CFF383DB738F4D08F10E083F50329477084F69
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88296b80-7a2f-4c78-bca6-31fd9a45902e.roa
Signing time:             Fri 18 Jul 2025 00:41:36 +0000
ROA not before:           Fri 18 Jul 2025 00:41:36 +0000
ROA not after:            Fri 22 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        66.245.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:cf:f3:83:db:73:8f:4d:08:f1:0e:08:3f:50:32:94:77:08:4f:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 18 00:41:36 2025 GMT
            Not After : Aug 22 23:59:59 2025 GMT
        Subject: serialNumber=52ed508a07de825f559556111ad8fd396919376b8b7cfa0d63a1028bd97ba8ed, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:99:fb:e5:bb:ea:dd:6c:a4:80:f4:1f:73:40:
                    57:2e:04:82:04:55:89:7b:59:73:26:39:8b:c6:2a:
                    44:86:e5:05:4c:c2:5c:64:32:65:b5:6c:90:cb:27:
                    88:b3:67:0c:ed:55:a3:5d:78:56:37:b8:2b:1c:13:
                    cb:a0:0f:1d:c3:ff:f8:31:d8:46:42:d3:0e:59:e6:
                    b2:e1:23:8f:d3:46:67:39:01:96:d5:f6:72:7b:e6:
                    99:39:53:29:3d:b6:d3:c7:49:79:bb:87:6d:b0:0a:
                    1d:a4:1f:3b:f7:0f:43:aa:36:06:39:3d:ab:16:22:
                    38:93:4e:b2:fb:df:d8:a3:52:54:57:dc:bb:88:bd:
                    aa:ff:47:58:4a:52:ce:4b:2b:18:8f:0b:9a:24:00:
                    06:bb:d4:7a:bc:78:f8:7e:6c:58:59:8c:40:34:93:
                    3f:7c:47:42:5a:7d:5d:e5:18:f2:39:7e:54:d6:8c:
                    73:25:9c:de:86:96:63:74:77:56:9b:46:ec:3f:b1:
                    d1:0a:e7:ed:ee:fa:32:6b:cd:9d:73:6e:3b:46:c3:
                    81:79:2d:af:62:58:53:a1:a8:ca:61:fd:2b:b2:8b:
                    c0:8a:1b:74:97:ec:38:46:04:0c:76:1c:35:0b:70:
                    40:ee:26:b4:ed:ea:f9:18:88:cc:b4:27:1d:b1:95:
                    5f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:B8:F4:47:98:A9:A8:E8:57:83:17:14:B0:97:74:04:81:DD:13:6B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88296b80-7a2f-4c78-bca6-31fd9a45902e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.245.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         cb:59:4c:e2:f1:cd:7f:7f:a8:3a:e6:9a:c3:23:a4:50:70:7d:
         ad:4c:60:96:ba:76:83:ea:5c:e6:a0:7c:0e:c8:42:68:56:8e:
         6f:66:ca:9d:67:33:d8:e3:5e:f6:ac:7f:24:ae:94:12:e3:f1:
         44:32:df:fd:c1:4c:d4:47:a3:59:d2:05:22:bb:39:e9:5e:16:
         b8:38:1a:5d:49:41:59:05:9c:be:1b:69:2e:f9:d0:63:d1:38:
         d6:da:f3:96:e6:1e:c1:ac:f9:d2:30:9e:cd:74:3d:37:bf:a1:
         e5:d3:02:a5:bb:a6:61:90:38:da:08:4d:eb:66:99:a3:4f:f0:
         de:d1:7a:a3:c3:9d:71:4b:e1:c5:a0:0b:6b:35:2f:46:00:1b:
         4a:5a:81:4d:db:aa:8f:bb:bf:be:d0:68:27:fb:5d:cf:41:ff:
         30:65:83:d0:d5:90:3f:6c:26:3f:aa:c1:b9:9d:4d:4b:21:a0:
         35:c0:7e:c1:94:1e:69:34:cb:02:16:9f:37:14:a1:7b:86:a3:
         27:e1:da:5d:2f:03:aa:9e:c1:90:12:e7:e6:a2:bb:1d:93:c7:
         3d:22:8c:b2:09:ab:c7:a4:fc:7f:70:99:c5:1e:f2:ef:14:61:
         72:1c:2d:d7:8e:9f:c6:8a:67:b5:b8:8d:e1:94:c0:0d:f9:15:
         f8:ba:fe:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:31:21 2025 by rpki-client