Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f74ead99-6790-4721-955a-632492193a35.roa
File:                     f74ead99-6790-4721-955a-632492193a35.roa (raw, json)
Hash identifier:          T95uFD/TtmbcTUYYsfNJxYiwul2FOeqhwi4zLWeAX7E=
Subject key identifier:   12:A9:CD:83:88:00:2A:C4:D1:CD:EF:93:77:07:69:F3:06:91:EB:ED
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       418BE23BAD412ECFD2F599F553F592C07178E184
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f74ead99-6790-4721-955a-632492193a35.roa
Signing time:             Sat 19 Jul 2025 00:01:39 +0000
ROA not before:           Sat 19 Jul 2025 00:01:39 +0000
ROA not after:            Sat 23 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        206.131.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:8b:e2:3b:ad:41:2e:cf:d2:f5:99:f5:53:f5:92:c0:71:78:e1:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 19 00:01:39 2025 GMT
            Not After : Aug 23 23:59:59 2025 GMT
        Subject: serialNumber=917ba56faa597da8fa08054dca9d49d8bdece7abc9c8586154512fcdc0fe0c4f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fb:01:38:89:1d:8c:8e:e8:ca:60:53:b0:22:
                    9f:75:68:fc:24:d3:e3:ba:7f:46:48:28:0f:b8:ff:
                    2a:52:21:c9:e2:d6:ed:b1:b1:f8:d8:a6:f7:0b:56:
                    4b:c4:fb:4b:a4:09:d9:aa:63:8e:b3:5b:94:ac:b7:
                    48:89:6f:67:5a:9b:d3:a5:e6:f9:c7:4e:1e:2e:75:
                    3e:7e:ef:c2:29:33:ae:a8:4c:4c:92:39:7d:36:f2:
                    1b:07:56:fe:1f:23:5c:2d:70:a5:48:7b:c6:93:4a:
                    e9:fe:ad:85:ee:c4:0d:55:f8:2c:e0:ff:ab:40:50:
                    e2:96:17:82:11:d3:91:49:74:97:d3:f9:27:18:46:
                    89:7c:34:68:e8:d1:e4:31:82:7b:76:e4:f0:73:2b:
                    5e:b7:65:60:3a:55:ba:50:8b:48:8c:b3:6f:1a:31:
                    8a:27:8e:be:77:88:7d:35:e1:93:c6:74:76:12:cb:
                    19:44:bc:6b:c7:cd:a7:f4:1f:55:68:c8:bc:c6:7e:
                    48:83:c0:1d:ab:4e:89:ed:3b:1b:5c:4b:e8:d8:57:
                    55:22:2a:d6:d6:89:3d:6e:87:ee:4d:fb:7e:53:dd:
                    9f:72:07:c5:13:60:00:f4:d6:95:35:1a:ce:df:91:
                    d0:87:69:ea:0a:c6:a6:71:3e:27:5d:33:59:ba:f0:
                    f0:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:A9:CD:83:88:00:2A:C4:D1:CD:EF:93:77:07:69:F3:06:91:EB:ED
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f74ead99-6790-4721-955a-632492193a35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.131.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         47:b5:56:54:73:2e:39:24:4a:62:84:79:24:73:0a:34:75:af:
         03:4a:57:2d:19:5c:00:b9:74:59:39:1b:92:fb:40:42:9c:f6:
         11:37:9e:aa:ee:f9:7d:84:38:9c:15:5e:fa:dc:de:85:e0:9a:
         1c:71:25:a2:25:e7:f0:28:f9:c8:53:81:6c:89:ff:e7:cb:ba:
         91:d7:16:27:3c:89:25:ee:71:a6:11:47:02:38:62:6f:e9:7c:
         02:7c:f6:7c:88:23:6a:e9:60:52:64:08:2d:97:df:61:ef:7c:
         42:45:56:38:d3:93:b9:8f:c2:7d:62:6a:5f:56:98:81:33:7d:
         54:47:24:d5:5f:ce:f8:35:4d:fd:cb:f6:1c:10:74:89:92:03:
         27:c6:c5:41:a2:ad:2e:cb:b8:8b:22:1a:a6:ae:fa:ea:71:e0:
         8f:5b:b9:9f:20:bc:7d:57:a2:4c:c4:6d:eb:45:fa:ce:11:ce:
         df:bb:00:a9:19:d1:d5:ee:5b:70:a2:31:e4:8e:29:29:01:ff:
         f6:1d:bc:66:aa:c9:8e:02:f0:b1:59:43:59:08:01:f7:27:ef:
         b6:84:1d:63:ce:70:54:8f:82:4b:84:e1:6b:dd:85:8d:c7:d9:
         2e:25:58:f4:fa:4a:cc:12:19:72:5d:a0:6f:38:26:35:48:72:
         26:e1:96:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:34:35 2025 by rpki-client