Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/33db650c-726a-469c-996f-9e452d8889fb.roa
File:                     33db650c-726a-469c-996f-9e452d8889fb.roa (raw, json)
Hash identifier:          HLa5dDjDd1ReuILkj8w0Z6EsQ+INbnzXwEJDXXFIVGA=
Subject key identifier:   85:13:55:2D:DE:6A:10:F7:95:A6:1A:06:76:8A:B7:9A:7D:D5:C1:F3
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       41335E28B346427F97F269F99789B42D6FB46347
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/33db650c-726a-469c-996f-9e452d8889fb.roa
Signing time:             Tue 20 May 2025 00:51:13 +0000
ROA not before:           Tue 20 May 2025 00:51:13 +0000
ROA not after:            Tue 24 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        56.12.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:33:5e:28:b3:46:42:7f:97:f2:69:f9:97:89:b4:2d:6f:b4:63:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 20 00:51:13 2025 GMT
            Not After : Jun 24 23:59:59 2025 GMT
        Subject: serialNumber=6f74a302db726f20e628823ca9c637cffff9c493984a56b180eb72d1aa2abf11, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f4:0f:6d:67:7e:c9:2a:92:0d:6e:7e:f0:ae:
                    71:fe:e7:78:0f:01:34:c2:d5:c7:23:0b:06:b2:27:
                    e2:24:c7:8a:a2:f7:b7:c7:ec:6c:1e:1a:72:19:8e:
                    40:68:dc:1d:57:27:c7:d8:97:3e:c1:32:c0:9c:fd:
                    0b:6a:42:28:52:1f:53:c9:75:7b:4f:96:33:98:63:
                    39:79:ee:46:a5:64:6d:f6:41:f4:c6:c3:17:f6:9e:
                    cc:3a:49:a9:df:01:4f:7f:d0:53:53:83:79:f5:07:
                    07:80:83:ad:ba:ca:14:06:4f:3a:1a:e1:d7:52:7f:
                    4c:86:8e:a6:c0:07:44:67:d6:23:8d:d6:a3:74:b5:
                    10:63:af:81:46:1e:d5:ae:de:ce:9a:15:44:f5:b1:
                    e0:3c:ed:2a:c3:24:99:dc:bc:c3:46:f6:11:fa:7e:
                    60:90:f1:94:28:9d:18:05:56:f8:ad:0d:40:55:3f:
                    59:86:9a:74:9c:c9:83:3f:b9:b4:65:92:29:78:1f:
                    ac:64:6d:13:c1:e0:bf:e6:36:10:09:9e:a4:6f:88:
                    53:0d:63:07:d5:2f:c0:f9:c7:e2:12:44:42:db:68:
                    70:e3:41:05:83:56:da:ab:c2:be:e9:95:67:05:bd:
                    17:91:5a:e0:cf:4d:45:81:31:21:f9:7f:65:0a:a2:
                    80:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:13:55:2D:DE:6A:10:F7:95:A6:1A:06:76:8A:B7:9A:7D:D5:C1:F3
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/33db650c-726a-469c-996f-9e452d8889fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.12.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9f:b3:f0:0b:4c:d2:f1:10:f4:9f:bd:b6:4f:37:87:4d:71:33:
         10:48:10:0d:8e:9b:e0:02:b5:7f:92:07:1b:74:21:7f:5f:f8:
         3d:30:56:64:33:a4:55:96:64:a8:87:38:07:ba:09:cb:60:f9:
         1f:ca:43:f4:03:36:79:14:e7:91:47:7a:2b:fa:59:8e:d4:b7:
         32:d5:e6:c9:fa:87:0f:d9:d6:ab:71:2b:00:b4:79:c9:ef:1c:
         04:ed:13:f9:89:fc:42:73:f7:d7:e2:ec:75:4c:3a:bc:dc:0a:
         6a:60:c7:9f:4a:56:21:18:45:d4:b3:0a:f1:74:26:7f:ef:08:
         2a:af:aa:37:a3:9c:75:29:6f:b7:5e:9c:a2:6f:b3:40:2e:b8:
         05:cb:5f:ec:9e:49:89:a0:4f:63:08:cb:8c:7d:19:70:86:a5:
         ae:7e:3f:b4:57:c7:cb:4e:7c:a0:2c:f4:75:fe:c6:a5:f3:9c:
         09:e1:28:48:ca:e9:77:ec:37:37:66:1d:32:1a:42:d9:bc:bb:
         00:c0:4e:94:f5:11:15:ff:9b:2b:57:86:64:18:6e:05:d8:e5:
         d7:71:29:c6:c0:b3:cd:1c:e2:9a:56:18:5b:58:0e:74:87:fd:
         bf:87:2a:05:eb:4b:13:06:1b:1c:ca:2b:55:44:5b:24:78:09:
         33:db:bd:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 1 04:23:25 2025 by rpki-client