Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a55b9668-0898-4096-8bd0-529dad81c1b8.roa
File:                     a55b9668-0898-4096-8bd0-529dad81c1b8.roa (raw, json)
Hash identifier:          pWBIN54aj/n7zXzKciVkW9j8NIbGT1GZNFO+X3bgadc=
Subject key identifier:   95:C7:5A:BF:D3:BE:B8:21:C8:8C:F8:FB:36:CF:25:63:63:7E:9A:D4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       73A0D6E59CBBCF5F5885992C63EE268B2C92908B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a55b9668-0898-4096-8bd0-529dad81c1b8.roa
Signing time:             Fri 11 Jul 2025 00:41:21 +0000
ROA not before:           Fri 11 Jul 2025 00:41:21 +0000
ROA not after:            Fri 15 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        57.180.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:a0:d6:e5:9c:bb:cf:5f:58:85:99:2c:63:ee:26:8b:2c:92:90:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 11 00:41:21 2025 GMT
            Not After : Aug 15 23:59:59 2025 GMT
        Subject: serialNumber=80135fe658dd77a41b7e9f5e92de73fd2f76902a1f442adf2bc41fcc36252e05, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:12:24:d2:20:75:1f:1d:28:64:6d:4e:c2:e7:
                    ba:51:fd:63:a5:81:64:4c:9f:bb:2e:62:85:fc:6c:
                    27:0a:15:0a:97:52:ab:70:a5:d8:28:30:f6:8f:b1:
                    f0:8e:e7:46:2d:95:20:53:2c:05:24:b0:5e:df:a9:
                    7b:15:d8:27:77:f4:c8:42:a8:29:ae:07:7a:b6:a2:
                    66:35:ac:2f:31:ba:5c:ec:bf:9e:43:a7:13:59:96:
                    a9:f4:7f:07:dc:1d:06:9c:93:a9:76:6a:eb:72:68:
                    b1:70:4f:fb:5d:3b:1a:75:d6:6a:fd:d1:65:8a:d5:
                    fe:2b:8b:8c:e7:82:9a:fa:32:c7:8d:7c:2e:3c:0b:
                    0b:00:62:c7:6f:44:6e:8b:ac:68:eb:d7:b5:1a:f8:
                    5b:22:a7:0c:f7:2f:d2:7d:d1:cc:47:c3:5c:83:32:
                    c6:d4:3d:01:fa:94:50:22:b5:ed:6f:a2:30:b9:30:
                    c8:01:46:09:a0:43:22:ee:58:ac:6b:1e:5a:92:bd:
                    be:1f:be:c9:56:98:bb:5d:c1:bd:3a:ca:9d:be:e4:
                    e2:01:18:c2:57:42:b3:fb:14:88:b6:d3:bf:54:21:
                    79:32:0f:72:a1:fa:62:7b:4e:81:06:e9:10:75:fb:
                    22:a8:2e:7d:c1:21:cd:ba:95:b4:94:bf:55:35:d2:
                    d1:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:C7:5A:BF:D3:BE:B8:21:C8:8C:F8:FB:36:CF:25:63:63:7E:9A:D4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a55b9668-0898-4096-8bd0-529dad81c1b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  57.180.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         08:31:4b:9b:55:1a:45:76:eb:f8:03:e7:37:c7:fe:e1:a9:28:
         36:f3:20:ab:ca:35:00:34:54:7d:28:0e:f9:0e:cd:9c:cc:d0:
         d7:41:c9:7f:e7:2e:5b:f3:b6:73:08:79:8f:8c:00:90:68:48:
         62:b0:2e:df:2b:e7:f8:a7:dd:e0:94:25:57:61:24:5b:34:83:
         56:66:fe:d7:db:32:6a:06:03:2c:65:99:7a:e8:c4:da:ea:65:
         b3:1f:fd:53:da:fb:05:a6:62:d0:c9:e9:5d:0a:58:2d:2e:d3:
         fc:e8:51:4b:7d:16:34:d2:c9:b4:8c:a5:09:0d:b0:7a:4b:88:
         6b:a6:fb:57:60:ae:5c:0d:42:1b:e4:b3:68:1d:b9:d1:d1:bf:
         7f:af:21:23:fb:56:ce:c9:7d:c1:71:e0:7b:a0:bc:94:37:5e:
         cc:c3:64:46:79:51:b9:f7:e1:bd:75:71:6c:15:09:61:2d:aa:
         c7:90:2f:fe:23:d6:d3:9f:94:00:fc:0f:ff:87:07:f5:3e:51:
         ab:f1:08:ab:a5:78:ca:15:4a:87:2c:fb:fd:6f:84:2f:ab:f6:
         fe:3a:c8:e5:15:c4:8a:f5:69:13:4b:69:86:3a:d4:fa:fe:f4:
         c8:f4:1e:1b:71:c2:04:d0:c9:30:ad:96:92:25:59:28:46:26:
         e3:2a:48:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:57:20 2025 by rpki-client