Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/66ab72fb-4dc1-41a1-bd04-f0a9af2d4bea.roa
File:                     66ab72fb-4dc1-41a1-bd04-f0a9af2d4bea.roa (raw, json)
Hash identifier:          +jcoN7oRZIkfgFK6KKD+DGg7bTKg6f03lw2cXdXLhX0=
Subject key identifier:   09:10:89:30:96:60:5C:34:14:49:DF:FB:21:22:AB:EC:D1:DD:BF:17
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4875062F16BFE3507EBD90D63D188F71AB797114
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/66ab72fb-4dc1-41a1-bd04-f0a9af2d4bea.roa
Signing time:             Tue 02 Sep 2025 00:01:39 +0000
ROA not before:           Tue 02 Sep 2025 00:01:39 +0000
ROA not after:            Tue 07 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        15.240.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:75:06:2f:16:bf:e3:50:7e:bd:90:d6:3d:18:8f:71:ab:79:71:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep  2 00:01:39 2025 GMT
            Not After : Oct  7 23:59:59 2025 GMT
        Subject: serialNumber=d7c0cdbb022326a32a7ad7bffcc459d8411d59187b1e9bb9bfb356efe0fae30b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d4:82:6c:99:5c:93:31:cf:88:3d:41:33:c8:
                    41:71:35:df:f4:ea:2f:22:65:e0:ba:ef:bb:6c:a0:
                    ed:41:4a:87:1e:f5:71:6c:6b:5a:a3:b2:45:a8:b0:
                    c6:7f:d1:a5:52:09:07:c0:42:9f:ad:4a:50:02:07:
                    e1:27:0d:a6:99:c0:2e:17:df:76:28:a0:48:96:4b:
                    76:ac:e5:f7:2f:db:49:07:cf:91:82:5f:b7:a2:a8:
                    ed:44:a4:c8:64:9d:48:a5:4f:29:d6:ae:56:8b:2a:
                    35:e9:8a:0a:fc:34:ac:fd:36:c1:ac:98:ee:23:ce:
                    dd:26:02:71:87:4f:90:8f:5a:e9:84:f6:da:fd:5a:
                    9a:4c:ff:74:db:06:95:f8:fc:ae:55:69:85:8c:80:
                    1e:21:6b:8f:a2:bd:ab:8d:86:15:c4:f1:0b:d8:61:
                    fc:22:29:ef:88:0f:dc:7e:98:d0:7e:d5:d1:75:26:
                    f0:30:71:ed:a4:13:d2:a1:7d:02:7d:d8:90:b6:5f:
                    11:8f:58:cd:b5:a5:73:8f:26:dc:6e:27:60:53:62:
                    ca:ae:51:21:4f:59:2b:b7:f1:56:33:c1:65:d9:d9:
                    5c:66:98:bb:7f:20:c3:3c:b4:ce:a7:32:56:df:e5:
                    b2:bc:88:70:04:b7:e4:72:88:6f:09:6b:a7:3f:4b:
                    7c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:10:89:30:96:60:5C:34:14:49:DF:FB:21:22:AB:EC:D1:DD:BF:17
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/66ab72fb-4dc1-41a1-bd04-f0a9af2d4bea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.240.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         0b:23:9c:2c:38:5e:df:e8:6b:65:2d:0f:a8:fe:63:a4:82:65:
         b5:14:a2:3d:8e:88:5a:06:97:c0:4d:db:b7:c3:80:14:49:29:
         56:26:e4:83:85:53:2d:5b:43:42:40:a8:a2:fa:6d:8a:63:7f:
         88:63:81:f0:b0:d1:f4:cb:80:a6:bb:47:76:e9:a2:d5:09:2b:
         8c:09:43:e5:64:e0:59:7d:12:67:6f:67:82:e0:78:46:40:f0:
         3a:8e:98:07:95:54:07:57:2a:fb:c1:b9:38:b1:14:c8:f1:85:
         3d:14:23:e3:ce:27:41:1f:4d:92:48:1b:ec:85:0e:7f:30:b2:
         a7:5a:99:cf:bf:25:28:cc:68:44:68:4e:cd:67:7a:d4:18:fe:
         ff:57:eb:4f:95:af:f1:37:a9:75:4f:00:44:64:aa:ea:61:ed:
         66:ab:95:54:92:3c:42:63:05:9b:b2:ab:84:44:b4:d5:4c:2b:
         5e:e5:5f:7a:16:fb:44:9f:a3:28:ee:f0:62:2d:5f:19:23:7c:
         06:e3:29:32:41:3c:80:5b:11:d6:51:19:d4:5f:ae:dd:1e:6c:
         ed:4e:4f:77:70:43:2c:84:8d:0a:d6:79:2d:eb:a6:4c:3b:51:
         2f:77:e6:51:2d:48:57:bc:e7:d0:ce:7a:b6:f5:87:b7:c3:22:
         c9:06:4b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 14:08:31 2025 by rpki-client