Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d0e3fb9a-1677-41cb-ad7a-b5231049acda.roa
File:                     d0e3fb9a-1677-41cb-ad7a-b5231049acda.roa (raw, json)
Hash identifier:          yT36xv8iJdOCq669HXCe9d0OZ+eBlSleEeoVN31PFXM=
Subject key identifier:   D0:EE:FD:61:34:0B:23:DB:CC:05:BC:A1:60:42:FC:D8:04:04:F8:F9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       320645DC23F192261A67B01DE5D2FB11228AEB41
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d0e3fb9a-1677-41cb-ad7a-b5231049acda.roa
Signing time:             Sat 12 Jul 2025 00:21:41 +0000
ROA not before:           Sat 12 Jul 2025 00:21:41 +0000
ROA not after:            Sat 16 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        202.5.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:06:45:dc:23:f1:92:26:1a:67:b0:1d:e5:d2:fb:11:22:8a:eb:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 12 00:21:41 2025 GMT
            Not After : Aug 16 23:59:59 2025 GMT
        Subject: serialNumber=4acc5edb39376909d6d56515fb3aaab95b94fbeb0e25a535b5defc32ef87a265, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e1:52:bf:13:b9:35:ea:16:c0:50:5f:6f:68:
                    5e:38:59:f2:f0:07:78:a1:ae:e6:6f:35:10:c2:ae:
                    c0:c5:71:25:3c:3f:62:48:95:f2:b9:60:e9:16:22:
                    50:fe:13:d4:b1:2e:33:02:0f:bf:29:c7:08:a8:8e:
                    19:97:41:64:e5:a3:31:5a:fd:04:88:57:e0:2d:a2:
                    b5:37:ae:a3:fb:16:dc:5e:7f:c5:8b:b3:4a:d1:a2:
                    d1:a8:89:7e:6e:58:13:31:28:10:88:1e:a0:b5:be:
                    26:fb:63:13:04:84:6a:41:11:7d:08:3d:a3:75:21:
                    0e:51:9e:6b:e2:96:5f:ce:40:ac:c7:11:4a:a0:c2:
                    33:fc:72:3a:fa:61:05:87:02:73:9c:08:04:4c:cb:
                    9d:ec:e1:e1:cd:c6:17:93:39:0e:0f:51:58:f0:30:
                    78:b1:fd:6f:b1:3f:28:a4:02:62:7e:16:5e:39:dc:
                    ea:9a:fb:08:56:7a:dd:ef:a1:d2:c4:29:81:33:59:
                    ad:07:08:ef:69:2b:69:30:ea:95:9d:b0:b1:cc:42:
                    4a:a9:dd:d8:9c:09:e0:61:a8:ef:a1:5f:ff:6f:d1:
                    87:97:a1:9a:7d:04:bc:33:1a:8b:18:78:d5:13:ed:
                    c5:93:d2:0d:71:8d:30:40:df:51:0d:1e:62:12:c0:
                    52:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:EE:FD:61:34:0B:23:DB:CC:05:BC:A1:60:42:FC:D8:04:04:F8:F9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d0e3fb9a-1677-41cb-ad7a-b5231049acda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.5.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:2f:6e:85:e1:9b:21:74:8c:af:28:4c:56:03:69:b8:aa:29:
         f6:cb:22:04:43:1b:b0:01:e9:b2:b0:e6:a5:b6:96:d8:9b:a4:
         e2:0a:3b:91:be:9e:7f:66:8c:78:4d:c3:0a:7d:c3:53:2b:8c:
         f2:57:ba:16:13:08:53:8f:c4:bb:7d:11:9a:84:64:30:fd:f1:
         9a:3f:76:80:56:10:05:c5:3b:bd:d3:ca:1c:19:a9:c5:e4:9c:
         b0:fd:b9:a0:9c:e2:3d:77:1f:1e:b9:27:49:69:9f:bc:f1:af:
         fd:f6:8b:55:b6:13:13:f2:29:50:5e:0a:ff:53:3c:76:60:2c:
         61:c6:ea:ec:df:ab:66:60:7a:88:49:57:66:bd:9f:8c:45:f8:
         91:4c:57:80:86:7c:f3:dd:27:29:27:1b:e2:81:31:57:97:e3:
         f5:a4:b5:02:9c:be:85:97:85:dc:8a:80:91:7a:a7:4f:d5:88:
         6a:7e:b4:bb:19:c6:b0:ed:03:64:ff:59:2c:95:f7:fa:ed:1a:
         ae:f7:24:ac:d4:51:82:9a:bd:30:96:d5:3f:3f:ae:37:3e:ac:
         84:4a:e2:15:f7:0d:07:e5:fe:02:24:0f:d5:2f:f2:ba:02:d9:
         31:7b:48:f4:85:d6:3d:e8:40:a9:a2:8c:2e:3b:4b:62:f5:bc:
         cf:1f:f7:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:57:19 2025 by rpki-client