Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f5a87ad-a2f0-4cfd-a04b-5bb17bf668b7.roa
File:                     1f5a87ad-a2f0-4cfd-a04b-5bb17bf668b7.roa (raw, json)
Hash identifier:          +dfWQNbgcD064O8QJ49rwBsmi98rE+XE3oib2Mq03Pg=
Subject key identifier:   57:F1:E2:C9:33:DF:E5:8D:D0:31:63:9D:FD:99:D5:B4:44:CF:CD:84
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7BC8C3537334472F5F863C67237E0B5F531E2685
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f5a87ad-a2f0-4cfd-a04b-5bb17bf668b7.roa
Signing time:             Wed 21 May 2025 00:01:50 +0000
ROA not before:           Wed 21 May 2025 00:01:50 +0000
ROA not after:            Wed 25 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        207.9.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:c8:c3:53:73:34:47:2f:5f:86:3c:67:23:7e:0b:5f:53:1e:26:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 21 00:01:50 2025 GMT
            Not After : Jun 25 23:59:59 2025 GMT
        Subject: serialNumber=627c8e49ff66d489948aefc1370af7cd9649e446276c69e1f4f6e8c3094dc6e9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:80:ec:42:fd:03:03:22:9d:21:0d:af:e4:60:
                    e5:89:d6:11:64:ac:16:3a:c4:d7:26:b9:17:af:59:
                    63:da:50:5c:a8:52:aa:bd:03:82:5a:19:5f:3e:ee:
                    c9:bd:d4:93:25:97:90:35:e0:62:11:9c:64:fa:ce:
                    4a:fc:41:35:bd:2c:46:04:cd:0a:f1:46:55:0a:b0:
                    f4:90:dc:cf:9b:24:8f:7a:49:6b:49:68:40:0f:e8:
                    aa:dc:4b:0b:51:03:a8:13:2c:d5:59:79:b5:0b:42:
                    30:0d:70:e6:d1:6c:90:25:83:4e:44:7c:f5:40:e2:
                    e8:24:f1:a0:36:cb:06:06:14:b8:a4:89:a1:24:64:
                    31:b3:1b:a0:51:8b:fe:e2:51:5a:7e:10:f2:57:d9:
                    ff:da:b4:1b:9f:9f:c2:40:80:41:c2:7e:3d:8b:0b:
                    30:27:bb:e5:f4:c2:c6:d2:89:ee:b9:02:07:9b:f7:
                    f8:6e:d5:db:a6:79:e7:62:af:32:8e:e5:aa:02:e3:
                    58:33:90:d7:ba:ad:05:b1:d8:70:57:29:74:dc:4e:
                    89:d0:46:23:09:05:bb:ad:53:d0:f1:cd:ad:0f:70:
                    48:53:27:06:90:54:65:d7:f7:80:94:8f:31:14:68:
                    47:6f:4e:67:03:1c:73:48:23:89:e2:68:1d:98:06:
                    b5:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:F1:E2:C9:33:DF:E5:8D:D0:31:63:9D:FD:99:D5:B4:44:CF:CD:84
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f5a87ad-a2f0-4cfd-a04b-5bb17bf668b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.9.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         c7:80:d9:f2:cc:97:d1:ed:6c:20:3a:42:ba:06:fd:df:63:c4:
         9b:61:18:c7:02:c9:06:ad:14:38:73:d7:d4:dc:6e:05:b3:90:
         f2:c3:0e:2f:c5:c2:fb:b1:5b:db:d3:31:03:66:01:12:81:7a:
         8f:2c:6c:40:2d:00:75:a9:37:f9:4b:1f:b8:df:6d:91:c0:f4:
         3d:c8:39:9d:50:c1:78:3f:a4:39:47:90:a2:09:1a:aa:6d:7d:
         53:b5:2d:dd:15:97:27:c8:a0:3f:58:15:59:21:09:60:81:10:
         3c:c3:dc:18:12:cf:67:2a:d9:d9:31:82:5f:9d:bd:8d:45:79:
         1d:3c:d1:c4:35:fa:6f:21:0e:bd:b6:fb:4c:64:a9:cc:e1:e4:
         7a:63:f1:cb:8c:35:b1:39:e5:ea:ae:66:7b:e1:d2:24:92:16:
         73:1e:07:12:ce:3c:3a:ae:b3:c4:37:43:2c:81:45:09:3d:c4:
         0f:53:4e:b7:a5:27:4b:34:c1:f8:48:74:18:c0:39:c1:4d:f6:
         3b:60:95:0c:69:c0:01:af:58:b2:16:bd:0d:66:fb:d4:ea:a3:
         df:c9:f7:d5:86:fe:fa:1b:d0:f2:a2:9e:52:b2:e6:88:4e:2c:
         17:f4:1e:3b:a6:38:e1:e2:5c:3b:99:7b:6b:d4:75:26:52:17:
         ba:42:8a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 1 04:30:59 2025 by rpki-client