Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/37907f75-e7ff-4ab6-93f4-46f58160bbb9.roa
File:                     37907f75-e7ff-4ab6-93f4-46f58160bbb9.roa (raw, json)
Hash identifier:          hdtBmaKpPIJzUqSYDHD/57JeZeis/abOSsok6VffM10=
Subject key identifier:   6D:9A:03:B0:F3:E8:37:BF:E0:B8:6C:82:99:AD:31:F9:03:3E:41:A5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1A2FF1FBA16575006ADE815C319D4DAF7835866F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/37907f75-e7ff-4ab6-93f4-46f58160bbb9.roa
Signing time:             Tue 13 May 2025 00:31:48 +0000
ROA not before:           Tue 13 May 2025 00:31:48 +0000
ROA not after:            Tue 17 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        206.53.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:2f:f1:fb:a1:65:75:00:6a:de:81:5c:31:9d:4d:af:78:35:86:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 13 00:31:48 2025 GMT
            Not After : Jun 17 23:59:59 2025 GMT
        Subject: serialNumber=05b16c4e25dd23ab01a610995e53344efddfcf4d3d6ba80943484be2381bd2eb, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:85:9a:f9:30:f0:9c:2d:2c:fa:e4:fe:13:8f:
                    df:56:9f:86:22:67:7b:e2:0c:9c:30:f0:a8:06:32:
                    67:9e:ac:a7:81:57:c8:9b:9d:23:12:25:dc:b2:10:
                    0f:92:e3:bc:cc:b5:da:45:4e:97:95:fa:5e:74:7d:
                    0c:57:78:93:2a:50:27:45:36:51:5d:e2:80:15:2d:
                    46:e7:72:88:86:37:9e:2a:6a:c9:18:c2:5b:4a:e6:
                    e5:b5:3c:23:b0:74:7a:e4:2d:26:12:0c:87:d7:27:
                    4a:3d:79:0b:0a:37:e0:ca:04:a6:55:05:5a:95:f9:
                    62:79:11:e4:bf:17:04:7a:92:3b:d9:24:b2:7d:98:
                    6e:24:6b:8a:2b:94:e8:78:23:ac:94:b3:50:e4:8f:
                    7c:4d:d9:de:e3:e4:7d:a3:65:db:16:46:46:95:d4:
                    24:4e:82:d0:b6:64:65:ff:ae:a7:e2:62:e8:12:c0:
                    f4:4d:9a:40:b7:3e:f8:a3:0f:ab:14:33:1d:df:7a:
                    1c:e2:e9:89:86:af:98:ec:99:7c:4d:60:2d:a5:76:
                    f6:aa:69:1c:c3:92:c4:96:a4:1b:2c:ae:f3:36:a6:
                    df:38:20:8b:3f:14:29:e7:8a:95:33:43:ab:28:41:
                    4d:4e:55:0d:e1:c5:35:25:84:da:bf:3d:a7:3b:5c:
                    ed:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:9A:03:B0:F3:E8:37:BF:E0:B8:6C:82:99:AD:31:F9:03:3E:41:A5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/37907f75-e7ff-4ab6-93f4-46f58160bbb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.53.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9f:e7:ff:00:30:59:ee:ef:7c:a4:47:72:5c:93:bf:c0:f1:2a:
         84:fd:82:d2:e8:3c:f3:68:cf:49:d3:9c:0c:ca:af:8c:c0:5c:
         03:13:14:3f:7f:a9:99:82:9c:e7:d3:32:6d:25:e6:a1:2c:b9:
         b5:78:06:ce:17:29:5c:95:ef:1e:64:32:51:a6:b5:b9:93:28:
         7a:7e:fc:c9:d1:d8:d9:36:df:2b:5b:eb:90:1c:bd:36:a7:4b:
         ff:4f:87:a1:2d:6d:9e:53:1e:d8:7e:d1:00:2d:14:a5:93:4e:
         00:a5:81:b2:f2:d4:b9:09:bb:4a:d4:00:9b:a1:95:64:e2:7d:
         2b:86:18:a2:b5:92:eb:f6:ca:46:7f:3c:3d:f7:99:df:15:c7:
         93:4b:07:3f:f8:2d:38:cb:f5:4c:9e:f4:bf:6a:e3:aa:e0:bb:
         c7:56:14:d2:2c:01:41:ae:00:da:21:5c:c5:16:6c:ab:03:12:
         d6:02:56:41:90:98:46:b2:7b:f2:86:c9:6c:52:63:6c:8e:27:
         97:82:c9:83:cc:fe:fb:2b:a1:eb:a1:4a:62:ca:f3:62:0a:3e:
         16:7b:b4:7e:cc:bc:77:fe:79:61:92:aa:35:68:ca:3a:a8:1d:
         cb:ea:29:d4:24:ee:d1:72:df:42:1b:a2:bd:c2:4d:0a:6c:61:
         a2:f6:4b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 11:25:11 2025 by rpki-client