Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a826b4c5-814a-445f-a0db-f0f6c166ab63.roa
File:                     a826b4c5-814a-445f-a0db-f0f6c166ab63.roa (raw, json)
Hash identifier:          s97wJPaPtSGspQnGqIdffYKoZBQWfNMFRMdcl7tFPI0=
Subject key identifier:   0C:40:8D:1C:50:EF:52:6A:BD:B3:2D:38:6C:1C:CF:E8:1A:1B:2F:8B
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       512B1A11506B10C9A8015B3FC6C8554789C741F8
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a826b4c5-814a-445f-a0db-f0f6c166ab63.roa
Signing time:             Mon 31 Mar 2025 18:30:38 +0000
ROA not before:           Mon 31 Mar 2025 18:30:38 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        173.82.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:2b:1a:11:50:6b:10:c9:a8:01:5b:3f:c6:c8:55:47:89:c7:41:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Mar 31 18:30:38 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7f:21:e7:97:b5:6a:34:db:1a:5f:7a:92:c9:
                    bc:4d:6f:54:38:c7:4b:b0:e2:08:4a:6b:a4:75:7c:
                    38:1f:9d:b7:46:fc:06:ae:16:6b:db:8c:12:ec:30:
                    13:04:57:c6:4b:b3:86:2a:35:c9:83:d6:d5:fa:bf:
                    6c:bc:f6:d2:41:71:08:d6:92:90:f4:fb:03:de:e3:
                    20:5d:2e:5b:99:7b:1c:cf:b9:a0:45:fd:c8:0d:b5:
                    a2:9d:3f:7b:6a:9f:3c:24:ef:4a:70:ba:b5:8c:29:
                    6f:ab:c0:06:5f:19:b9:28:bc:27:d3:07:f5:b9:61:
                    9f:3a:e4:ce:63:51:d4:14:7f:be:f3:a9:61:e2:27:
                    4c:10:bc:98:df:b5:1b:ea:67:68:75:f1:ab:fa:93:
                    e0:14:58:26:35:f8:03:ee:5c:a0:a5:8f:da:5f:81:
                    20:7d:67:44:7f:78:93:9a:cd:db:5b:d1:2e:53:43:
                    49:5b:a8:12:92:c6:bf:fe:52:c6:8c:cb:76:28:ae:
                    9e:6c:a9:b1:c5:4d:f5:d7:db:a5:1c:37:f0:d1:db:
                    0a:fa:af:6c:26:03:50:f1:32:99:fa:72:44:65:84:
                    00:78:d3:da:fd:02:f9:c2:b2:9b:ec:64:0b:03:3b:
                    17:21:b9:0b:4e:5e:c7:3b:a2:58:13:49:70:32:47:
                    01:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:40:8D:1C:50:EF:52:6A:BD:B3:2D:38:6C:1C:CF:E8:1A:1B:2F:8B
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a826b4c5-814a-445f-a0db-f0f6c166ab63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.82.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:a2:bc:f0:e8:03:a5:1b:7f:a6:f5:8d:41:e5:da:ee:3e:8d:
         71:7b:77:73:24:04:fe:52:5a:2e:9a:9f:73:04:0e:d3:63:8f:
         dc:a6:49:a7:3f:ef:e3:b3:22:05:d5:f5:57:ed:63:11:7f:e6:
         81:fc:fb:f8:56:e1:cf:79:db:3f:12:d5:5b:fe:a6:5c:0b:54:
         67:ff:c1:8d:7f:44:55:4e:d4:cb:fa:aa:99:50:0e:63:3d:e7:
         2b:09:a2:d6:c7:b8:a7:8b:6c:0b:4f:41:64:9f:66:de:11:39:
         22:04:14:ff:95:df:cc:1c:13:f3:04:35:a3:0c:44:b1:89:3e:
         88:30:6f:c4:67:a3:cf:75:cd:bc:58:d2:ee:59:90:06:d5:42:
         06:31:f4:ca:68:a9:58:34:9a:74:12:05:90:b4:bf:94:d6:5d:
         20:cf:25:44:da:86:29:d4:66:8a:ff:39:46:ba:a0:de:5a:6c:
         87:8e:2e:04:3d:b7:0b:f0:ba:29:1d:df:b6:18:67:52:e0:60:
         ad:d1:a0:cd:3a:6f:bd:da:4c:89:5c:6a:63:0d:65:2d:08:14:
         f7:62:62:5f:10:8d:9b:e6:c2:7d:2c:3b:9a:40:1b:0d:16:01:
         3c:31:d9:19:1a:53:ad:61:ee:7c:07:4a:ff:e1:eb:67:1d:f9:
         6f:e3:88:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:51:28 2025 by rpki-client