Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/17721a9e-0a8f-4b71-a56e-234b61d375d3.roa
File:                     17721a9e-0a8f-4b71-a56e-234b61d375d3.roa (raw, json)
Hash identifier:          p0gkQB3644fxuJOFMKQSLDIuoqa5wvrhjOXSMTe9K7g=
Subject key identifier:   47:2B:EF:C5:CC:73:B6:72:66:47:F6:C0:1F:70:D6:66:9F:6C:45:A7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7DD99D78FD1902BF2B5F1F6BDE12141AAF09CB90
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/17721a9e-0a8f-4b71-a56e-234b61d375d3.roa
Signing time:             Tue 27 May 2025 00:10:57 +0000
ROA not before:           Tue 27 May 2025 00:10:57 +0000
ROA not after:            Tue 01 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        16.142.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:d9:9d:78:fd:19:02:bf:2b:5f:1f:6b:de:12:14:1a:af:09:cb:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 27 00:10:57 2025 GMT
            Not After : Jul  1 23:59:59 2025 GMT
        Subject: serialNumber=d6d3c9ae798956cb6144ffa070739c88ecab95e47d9beac27adc4e519797ab33, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:36:f5:ed:fc:86:af:c8:68:72:02:99:e5:02:
                    84:0d:9e:69:5a:0d:60:ae:fe:c0:69:0b:be:76:ef:
                    fb:f6:5b:1f:3b:af:2c:3f:c3:33:56:93:f2:8b:13:
                    7e:62:59:ad:0a:1e:27:05:91:35:0b:e5:7b:e9:05:
                    ee:cc:56:cf:76:4f:48:47:c0:f1:17:07:fc:90:23:
                    69:51:7d:7c:b5:11:ce:f3:f0:15:a7:45:5c:5f:92:
                    59:76:9c:ab:a5:a5:ce:52:5f:29:55:08:ef:53:de:
                    3a:4b:0a:66:f9:b8:af:07:ee:a7:24:f2:b4:c1:3a:
                    e9:a7:9c:fa:6a:76:de:ee:d1:54:71:27:bd:79:63:
                    ab:ae:09:4f:3a:59:bd:17:68:fa:fa:ed:17:ba:eb:
                    63:57:77:da:e0:2a:f9:b3:01:a5:41:5d:b4:74:f6:
                    11:aa:8d:d1:3c:b5:04:62:7f:28:80:71:42:95:92:
                    62:fa:ba:c3:8a:38:7b:53:3d:b1:67:11:6d:c6:6f:
                    cd:c7:3f:50:5a:93:b1:cb:f5:19:63:b2:5a:f2:10:
                    fa:39:d8:82:31:5b:42:7c:2b:15:d4:46:ba:03:0c:
                    dd:1a:c9:e0:b8:d5:00:97:f9:92:33:cf:4f:b6:68:
                    77:c0:27:f6:e3:38:8d:e5:c2:83:13:5c:5c:9f:83:
                    80:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:2B:EF:C5:CC:73:B6:72:66:47:F6:C0:1F:70:D6:66:9F:6C:45:A7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/17721a9e-0a8f-4b71-a56e-234b61d375d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.142.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         74:64:3f:32:9d:79:7d:54:2f:5c:41:60:0d:be:24:a8:55:b0:
         ea:f9:c2:fd:b1:14:a1:13:d2:0f:01:37:06:c9:68:1b:64:0e:
         80:5e:a6:24:bd:69:ee:53:2f:6d:c6:d6:d9:e4:37:9c:df:c8:
         96:70:27:6c:d4:25:ee:55:bb:3b:fd:09:aa:f3:8c:6b:60:0c:
         d3:de:dd:31:4f:04:57:88:5c:a2:a3:d9:4d:16:1a:47:ce:d8:
         88:f4:f3:a9:60:bd:bf:fd:1a:72:87:2d:60:c2:9e:da:04:fa:
         00:d5:47:cb:6d:b6:c5:8b:4a:a0:e0:81:62:b0:29:16:23:8e:
         25:8a:1d:f5:e4:f7:cd:6d:d8:41:77:f8:b0:65:72:fc:e5:d4:
         1d:4b:70:57:20:c8:0a:a8:f1:f6:e0:3b:b9:10:c6:35:6f:7f:
         b4:e5:00:8e:a2:63:55:92:2a:18:ca:03:b9:fb:63:99:f0:31:
         6f:4e:c0:9c:8e:db:c4:fd:16:a3:e1:c9:f1:0b:5b:5c:9d:bc:
         2b:3b:d8:c4:39:fb:bb:04:b8:70:3f:89:4d:8d:81:f1:92:22:
         bc:9a:2b:ce:4a:5f:a8:ae:b8:4e:79:e2:65:de:2e:36:d2:7b:
         24:b6:ec:43:24:28:11:8e:aa:bb:30:06:12:9c:56:1f:5c:8d:
         ee:5b:64:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 1 04:28:31 2025 by rpki-client