Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a4d0f55-3bb6-430a-8ccc-2c0cbf50d74a.roa
File:                     2a4d0f55-3bb6-430a-8ccc-2c0cbf50d74a.roa (raw, json)
Hash identifier:          wnaBIZ2AKFPd0Jh8UbiQFYvXHKuEZObuc1/gvSBVfiA=
Subject key identifier:   F1:67:BC:0F:29:4A:0D:1B:A7:13:C0:57:AE:40:1C:D2:8D:FD:C2:79
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3A2F6202B6171E8A5C0142CCF97BCC497F473A5E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a4d0f55-3bb6-430a-8ccc-2c0cbf50d74a.roa
Signing time:             Wed 28 May 2025 00:02:09 +0000
ROA not before:           Wed 28 May 2025 00:02:09 +0000
ROA not after:            Wed 02 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        146.206.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:2f:62:02:b6:17:1e:8a:5c:01:42:cc:f9:7b:cc:49:7f:47:3a:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 28 00:02:09 2025 GMT
            Not After : Jul  2 23:59:59 2025 GMT
        Subject: serialNumber=43b00225c721335e715e41c06f4506a1725511b41a86e643b0d065a5bfd72362, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:61:15:d9:2e:de:50:44:99:ff:d1:96:1c:61:
                    41:4d:39:d6:42:8f:96:ef:15:fb:b0:e2:46:b1:c9:
                    b6:f8:46:22:b4:95:aa:95:40:db:00:f2:05:e5:00:
                    68:a1:69:e6:4d:c6:c9:41:e0:6a:3e:49:c4:52:31:
                    11:ac:3e:d1:1d:d9:e2:0a:14:03:e4:1f:f7:27:d9:
                    ef:07:6d:23:2f:48:b1:bf:31:64:e5:23:97:d9:30:
                    e8:4e:ee:c5:f1:69:fe:aa:28:49:87:e5:80:11:aa:
                    8f:42:91:31:98:f0:25:bc:cb:1a:bf:14:ac:03:24:
                    04:90:f7:0c:cb:e9:35:5b:cb:cb:82:84:22:e8:7f:
                    45:ed:6a:67:7b:4d:53:af:40:b5:c9:da:9a:60:d2:
                    a9:d5:4d:3d:0d:d7:1c:f1:61:d7:7e:25:5a:21:37:
                    0a:e0:f4:d6:f3:82:d9:30:3b:49:da:9b:82:79:2b:
                    66:b9:8c:75:2b:6d:c9:6b:d2:6c:68:df:b9:23:84:
                    6f:ed:cc:a8:32:83:c5:d0:d4:c1:39:ec:e5:cf:9c:
                    65:27:26:bb:44:1b:cf:3e:8c:48:e4:5a:a3:18:23:
                    18:a6:54:ce:e7:76:23:3e:92:8a:ec:d1:d8:69:5b:
                    58:66:62:09:39:9a:2e:81:44:c2:43:d5:29:4b:ee:
                    f4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:67:BC:0F:29:4A:0D:1B:A7:13:C0:57:AE:40:1C:D2:8D:FD:C2:79
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a4d0f55-3bb6-430a-8ccc-2c0cbf50d74a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.206.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         68:0e:1a:ac:d1:fc:d5:91:e7:f8:c8:f0:0d:8b:33:9b:5b:cf:
         ae:de:0d:b8:94:40:b9:a6:54:ea:91:81:aa:1e:01:1d:25:6d:
         e8:c1:31:11:6e:f1:d1:69:67:45:86:de:cf:e7:1a:84:9c:bc:
         d9:5a:6d:d3:3e:01:4f:ca:72:6b:41:09:ae:e4:c2:de:34:34:
         21:1c:6e:b7:89:d8:f6:26:eb:96:37:d9:8e:a9:c7:6a:22:0d:
         c7:c5:14:4c:91:f8:16:40:eb:1a:ac:f7:3b:93:b3:a5:58:d3:
         96:b1:1e:d8:80:cc:ad:6d:34:4a:16:18:28:04:e0:db:53:52:
         d1:fe:20:2c:c7:a3:3c:b7:56:33:e9:ac:d9:9b:bb:82:10:f0:
         a3:c1:b9:aa:11:88:4d:cc:52:e7:cf:5a:b8:b9:94:b4:34:b7:
         41:43:ac:fb:1d:75:cb:56:19:37:ef:79:a1:86:c8:d5:85:a7:
         db:22:3d:54:91:a3:5b:fe:db:5f:61:e7:8b:f2:9b:55:30:fb:
         90:7f:ab:79:c4:00:42:46:a3:15:82:26:35:e9:d4:47:7b:a1:
         c9:d2:c3:3b:48:ba:72:f4:ff:31:6b:35:02:35:eb:3e:4b:2e:
         d7:69:74:65:65:0f:c9:0f:ca:f8:58:2d:e3:18:15:a5:3e:15:
         69:93:cf:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 1 04:25:09 2025 by rpki-client