Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c85cdbd-6214-4c47-8eaf-a92a7648fdc0.roa
File:                     4c85cdbd-6214-4c47-8eaf-a92a7648fdc0.roa (raw, json)
Hash identifier:          a3qFOIiC2RrnPRwHGYjClvoFVKKpvJSpCu1bPs2ICgA=
Subject key identifier:   49:11:30:E4:19:A0:1B:DA:50:A9:69:96:22:DB:AC:08:88:55:87:5C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       27279ABF3681D04F168F204AA019D5BADA97062C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c85cdbd-6214-4c47-8eaf-a92a7648fdc0.roa
Signing time:             Wed 03 Sep 2025 00:10:19 +0000
ROA not before:           Wed 03 Sep 2025 00:10:19 +0000
ROA not after:            Wed 08 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        56.155.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:27:9a:bf:36:81:d0:4f:16:8f:20:4a:a0:19:d5:ba:da:97:06:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep  3 00:10:19 2025 GMT
            Not After : Oct  8 23:59:59 2025 GMT
        Subject: serialNumber=3e80d4aee637f393393bef4bdc0f3cb48dda4b9368d810ae6342c641e7bda0de, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:36:e4:2c:ec:d7:95:76:4d:ae:6a:f4:5c:a8:
                    26:16:6d:5e:6c:f1:ac:a7:78:72:ba:96:f7:46:af:
                    45:c3:00:1a:bc:bd:7b:45:6e:ce:c9:d1:33:46:ce:
                    2a:d4:4c:01:9f:c9:3e:9e:60:32:2a:1b:49:e3:2b:
                    40:f2:f7:f1:6a:23:76:19:f5:64:59:63:b9:b9:4e:
                    c9:a2:d7:85:fc:18:2b:56:e9:ef:a9:93:50:0c:75:
                    b8:64:17:d7:44:58:d0:58:1a:d3:82:2f:3d:ad:6c:
                    d1:60:c6:7e:81:39:dd:75:a9:6f:3d:68:34:59:b2:
                    bb:13:2a:ff:35:0f:dc:38:2e:6a:42:f4:7b:50:d7:
                    70:3a:32:9c:c7:c3:6a:d2:88:58:28:80:1b:1b:03:
                    5f:de:75:17:50:8f:7a:8d:0e:13:70:33:d3:19:de:
                    cb:5b:93:bb:1f:cd:53:0e:4c:ce:3b:a8:c1:ec:04:
                    59:db:dc:d2:94:30:ec:9f:83:15:fe:10:62:5c:27:
                    7e:e8:fa:59:f1:0c:89:e6:25:26:8a:74:65:88:71:
                    f1:b7:44:41:02:02:6a:ec:26:3e:e3:8d:42:ab:44:
                    b8:11:06:fc:16:95:a8:4a:43:04:96:9c:2c:4a:20:
                    92:f3:35:2c:30:2d:ab:13:a8:a3:a9:24:5f:ce:3f:
                    57:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:11:30:E4:19:A0:1B:DA:50:A9:69:96:22:DB:AC:08:88:55:87:5C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c85cdbd-6214-4c47-8eaf-a92a7648fdc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.155.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         82:eb:1f:e6:56:0b:4a:fc:79:f1:1d:9e:22:b6:89:56:44:1a:
         52:bc:84:19:c8:4a:86:ae:ef:b1:83:06:51:62:f9:10:59:a4:
         e6:c4:f8:55:5d:f2:b2:6f:77:28:c6:a5:ff:1a:b4:de:76:8c:
         e2:be:dc:d4:a3:31:ba:9e:fd:01:f3:97:80:1c:04:00:9a:a2:
         b9:a1:28:a0:cf:b7:9a:28:67:85:2a:6b:e6:c6:5f:2e:e9:5e:
         eb:a4:09:10:30:07:7d:fe:0c:87:d7:89:0c:ae:25:e4:12:9b:
         1b:24:cf:96:44:c1:55:0f:06:74:8f:ce:a7:bc:87:cc:46:0b:
         d9:da:b7:3f:bf:df:57:88:b9:5e:0d:86:61:eb:da:8f:cd:98:
         3d:da:34:33:da:42:31:1b:46:aa:39:26:31:0e:38:3e:c7:bb:
         4a:04:49:9f:ec:02:d2:f5:c6:ba:69:c6:7f:76:04:d1:2c:a2:
         74:72:40:00:a7:83:4c:ce:c8:1c:b0:ee:8d:8b:cf:57:96:ec:
         25:72:f1:f4:5b:ca:60:24:a2:ba:5b:25:0b:06:b7:c8:a4:6d:
         47:94:4b:be:a1:08:16:f4:ad:56:c2:e9:86:e1:cb:1f:c8:f4:
         0e:4f:85:e2:a9:c2:88:7e:56:f8:30:09:bb:5a:fd:87:17:5c:
         39:86:03:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 14:19:33 2025 by rpki-client