Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e218b04-dfaf-4fdb-9e82-bad8d7e36def.roa
File:                     5e218b04-dfaf-4fdb-9e82-bad8d7e36def.roa (raw, json)
Hash identifier:          GgSnuDKZ+RZth33rgbotWG8WncaNeYC9IvhMxwbvUyo=
Subject key identifier:   E8:CA:DF:DE:07:F0:22:AE:FA:B3:F7:61:8A:72:DA:79:C8:CC:DE:1A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6D93B18E3152FBFF5B850CBA8B5E1B9E01557EBF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e218b04-dfaf-4fdb-9e82-bad8d7e36def.roa
Signing time:             Tue 27 May 2025 00:11:27 +0000
ROA not before:           Tue 27 May 2025 00:11:27 +0000
ROA not after:            Tue 01 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        16.206.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:93:b1:8e:31:52:fb:ff:5b:85:0c:ba:8b:5e:1b:9e:01:55:7e:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 27 00:11:27 2025 GMT
            Not After : Jul  1 23:59:59 2025 GMT
        Subject: serialNumber=659ce2ae8654bff3bbe46f327a9f6253be14384c207c5484f4cf536dd944891c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:7b:d4:7a:e3:0b:3d:9a:50:93:bb:6d:0c:55:
                    03:8f:23:68:66:48:07:1f:5a:a3:d1:84:59:62:e4:
                    0f:fb:77:3f:65:86:9c:1d:2b:9b:d8:4f:6f:57:8c:
                    40:b4:9e:31:45:ec:e4:5e:9c:96:ee:77:00:40:72:
                    b9:3c:c0:47:ed:de:a0:99:aa:3e:17:10:f3:2d:8b:
                    eb:0f:58:41:fd:6c:e8:af:74:38:94:70:57:31:b2:
                    c2:35:ef:6e:3c:d1:a4:9a:39:0c:1c:c9:81:3b:64:
                    34:37:b3:00:70:a3:22:b3:f9:8a:ea:bb:4d:48:a1:
                    e8:67:29:7a:61:46:e8:88:8c:07:59:d6:87:ae:7b:
                    79:ab:05:68:09:35:86:d0:6a:ae:7d:36:4b:13:31:
                    4c:61:ab:18:9e:95:12:3d:cf:c2:cd:22:bd:75:cf:
                    76:19:47:22:6b:f3:f0:b1:37:ec:7f:46:56:61:c3:
                    a8:46:1d:b6:16:61:78:9e:44:a8:20:13:1a:83:d1:
                    a7:af:af:20:94:8d:31:c1:91:31:c8:a7:cd:72:b4:
                    29:0d:83:f3:04:f9:9f:b8:c0:a9:9a:93:86:9c:cd:
                    c9:fd:8f:63:40:23:81:48:7c:67:63:4a:d5:eb:1c:
                    31:ca:0a:4e:05:7f:b8:88:43:95:aa:9d:7e:5b:eb:
                    a2:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:CA:DF:DE:07:F0:22:AE:FA:B3:F7:61:8A:72:DA:79:C8:CC:DE:1A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e218b04-dfaf-4fdb-9e82-bad8d7e36def.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.206.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         1d:a5:2e:9d:e1:5d:e8:c0:28:0c:0a:57:e9:54:2d:9f:53:ee:
         d7:07:a5:6c:1f:8b:eb:a0:bc:9b:8c:7c:60:3d:c5:52:24:f0:
         ff:13:3f:84:a2:df:fc:cf:24:96:25:d7:49:aa:7a:95:c7:f7:
         1a:5f:ef:00:bf:d4:16:b8:76:0f:f9:a8:27:d2:66:79:9a:cf:
         3f:45:33:33:54:5f:33:50:bf:8d:8d:3f:27:b1:72:a4:de:c3:
         50:bf:1b:67:c7:fb:c3:92:0a:c7:86:a4:2c:6e:f0:e5:9d:7c:
         96:b6:64:11:c1:ee:cb:86:f8:24:64:45:eb:36:96:54:58:cf:
         07:94:48:c2:6d:f7:a1:0d:58:bc:e8:8e:ea:35:8d:6c:04:fb:
         55:6e:5b:83:50:d9:31:91:fd:49:32:91:89:7f:26:cc:fb:0d:
         9a:ce:59:68:9c:39:e6:5a:ee:2b:cc:3f:86:ca:f6:53:f2:6f:
         8d:83:32:9f:a3:e0:cc:2a:14:3e:a0:ba:88:91:71:81:09:f8:
         a2:a8:ea:9b:78:ad:c0:08:98:14:78:46:aa:0b:b9:54:b2:1a:
         f4:8c:77:89:74:37:bf:ba:ee:60:21:80:aa:0a:e7:42:54:21:
         63:43:d9:7e:e2:fe:ca:3e:be:98:4f:49:e9:e1:1d:10:39:c5:
         ca:ba:cc:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 1 04:21:47 2025 by rpki-client