Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fbc52a03-e4e6-48a0-8f85-9d9f1f9d01e9.roa
File:                     fbc52a03-e4e6-48a0-8f85-9d9f1f9d01e9.roa (raw, json)
Hash identifier:          GsQ15bPm98WtsmJ+DtKUg6yPGY6oG6ginZtbNv6NkU0=
Subject key identifier:   A1:D0:E7:84:D4:D6:A0:D9:8A:B0:E6:18:A4:70:2E:D6:56:C6:75:19
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       64235CC42FB21D2ADCC44F98E963D26E38B992A5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fbc52a03-e4e6-48a0-8f85-9d9f1f9d01e9.roa
Signing time:             Tue 15 Jul 2025 00:10:18 +0000
ROA not before:           Tue 15 Jul 2025 00:10:18 +0000
ROA not after:            Tue 19 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        65.80.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:23:5c:c4:2f:b2:1d:2a:dc:c4:4f:98:e9:63:d2:6e:38:b9:92:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 15 00:10:18 2025 GMT
            Not After : Aug 19 23:59:59 2025 GMT
        Subject: serialNumber=d1265886306a04eee718199e18c3b596ff8fa1a7a8942bbe2f2f40397e133c46, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:94:d2:db:6d:66:cf:01:ec:3a:66:2e:53:24:
                    c7:80:1d:83:30:11:05:e0:a8:ba:eb:e8:73:9b:c3:
                    62:49:fe:fc:73:52:b5:e3:34:d3:29:df:72:9e:d2:
                    c0:77:f1:85:7e:01:84:46:47:93:19:64:b1:67:e6:
                    46:46:0f:dc:e4:f2:db:ac:8b:9f:35:ff:37:bb:7f:
                    54:5a:05:bb:bd:52:6c:45:3d:9c:ae:b9:03:b6:2e:
                    b6:29:fa:57:2e:d7:24:11:66:33:31:61:f4:d3:7c:
                    7e:11:44:59:28:b0:d5:3a:a4:fe:6e:17:63:d3:b5:
                    08:7e:9e:4f:cc:77:cd:9d:11:bd:1f:0f:86:12:70:
                    f0:36:e4:e9:c0:78:01:d8:e1:d9:14:e9:ca:a5:8d:
                    9a:b5:21:7b:d5:02:60:11:5e:3b:3f:73:ee:39:71:
                    a7:74:81:14:7a:93:d6:c3:50:94:f2:49:fd:e6:60:
                    8d:9f:8f:be:24:7e:b0:6e:d9:1c:16:06:86:d0:e1:
                    01:eb:d2:36:69:a6:f2:b3:54:e3:57:bf:25:1e:ad:
                    0f:f0:72:83:07:44:e2:b7:3c:56:9e:9e:0c:34:83:
                    46:cc:2b:7f:80:70:37:31:f0:f6:cc:93:a8:e2:cd:
                    e8:a2:99:40:fc:43:a8:fe:8f:51:f0:61:0c:c4:d8:
                    67:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:D0:E7:84:D4:D6:A0:D9:8A:B0:E6:18:A4:70:2E:D6:56:C6:75:19
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fbc52a03-e4e6-48a0-8f85-9d9f1f9d01e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.80.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         57:6d:b0:33:bc:b5:69:96:9b:2c:64:02:f6:fd:89:bc:6a:7b:
         67:ee:fc:14:54:88:2b:b9:f9:51:0a:9e:b8:56:e3:33:6e:5e:
         3b:ef:3a:4b:63:4f:55:a1:b9:79:fe:a3:eb:b8:a8:c3:16:d5:
         aa:e3:ee:a1:de:3f:51:fb:c2:b4:da:c9:aa:0e:c5:19:7b:50:
         70:79:07:a8:0e:63:c6:5d:66:7f:68:2a:17:c5:6b:e6:9c:f0:
         ce:97:1a:c9:58:f7:d4:7d:79:2e:c3:b6:9f:fd:ee:cc:3d:bc:
         8b:3a:e4:3f:e3:cb:19:b8:ab:f2:eb:df:54:0d:57:78:0d:c4:
         64:13:1d:92:8d:62:ac:52:b7:f2:2c:12:19:80:0d:f7:0d:5c:
         ff:8c:f3:1f:06:1b:b1:ea:57:e5:66:65:8b:75:2d:5e:a1:0f:
         3e:f4:cc:af:60:d1:9c:ca:f5:af:69:4e:17:e8:90:31:1f:64:
         d6:08:6a:ab:f3:1a:cd:42:c2:0b:ff:46:e3:08:29:dc:79:99:
         2a:2c:4e:97:32:e6:e9:be:3d:0f:26:65:8a:e9:54:78:12:88:
         f9:73:4f:f5:96:93:ab:a8:62:b4:df:58:d4:d2:bd:03:98:54:
         05:89:e9:ed:9f:aa:4a:cc:9d:5f:c5:82:68:73:50:b1:da:5d:
         77:04:fd:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:18:08 2025 by rpki-client