Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ada1d9bd-7daa-4d9c-8bb9-2b7e36a27483.roa
File:                     ada1d9bd-7daa-4d9c-8bb9-2b7e36a27483.roa (raw, json)
Hash identifier:          9Jfg8pZlg7KqIFDDDQCommoYY5QSbFPswX9gSm2X+vE=
Subject key identifier:   C5:4B:CC:54:4B:B3:FB:D5:5D:68:B7:5F:93:11:C7:77:44:A7:79:23
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7B574DD1B45686B67FF599625D504B6274025F3E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ada1d9bd-7daa-4d9c-8bb9-2b7e36a27483.roa
Signing time:             Wed 28 May 2025 00:51:27 +0000
ROA not before:           Wed 28 May 2025 00:51:27 +0000
ROA not after:            Wed 02 Jul 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        99.77.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:57:4d:d1:b4:56:86:b6:7f:f5:99:62:5d:50:4b:62:74:02:5f:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 28 00:51:27 2025 GMT
            Not After : Jul  2 23:59:59 2025 GMT
        Subject: serialNumber=ce0da87521853c80eef2e82a52c4405ef56a578d46ac95fb6af9bb4df1df2b9e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cf:b8:f5:57:be:57:8d:9d:15:fd:22:c4:9c:
                    31:b0:7d:b8:b4:9b:4d:a7:30:47:37:b3:91:ad:d8:
                    54:3f:4f:33:f9:c1:bf:ad:b4:19:92:62:82:3e:bd:
                    ba:79:76:5d:3b:ac:bd:6f:d3:bd:ca:5c:c6:5a:38:
                    09:ce:85:b2:68:df:e3:36:84:c8:20:ab:98:80:6d:
                    e4:95:6d:ec:53:b3:65:0a:60:df:73:90:27:d8:18:
                    14:55:80:0b:8c:32:af:cb:89:48:20:fd:a3:79:57:
                    12:5d:22:3f:db:d9:2c:1d:ae:5e:e5:d3:ba:9c:31:
                    8c:49:e0:8c:40:28:01:12:0b:a8:91:8b:84:5f:b8:
                    31:0a:e7:21:f4:51:2c:33:36:94:9c:9c:a4:92:af:
                    17:e8:d6:16:2b:9d:70:48:49:e8:37:47:c2:46:84:
                    ea:c7:0e:ec:01:d6:a9:9b:92:43:4a:7b:0d:d9:b4:
                    cd:0a:e6:be:c0:a9:22:86:e3:6d:e1:3b:75:fb:54:
                    16:12:49:d6:e6:fb:96:54:b3:16:ed:95:ef:a8:d0:
                    56:c9:9b:45:79:fa:b4:7f:b1:dc:d3:0e:91:ba:93:
                    38:69:ea:c1:9d:4a:a5:5a:43:13:d6:af:72:94:5d:
                    0b:5f:9c:4b:bc:8b:bd:7a:e6:d0:e2:61:0c:9d:ff:
                    56:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:4B:CC:54:4B:B3:FB:D5:5D:68:B7:5F:93:11:C7:77:44:A7:79:23
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ada1d9bd-7daa-4d9c-8bb9-2b7e36a27483.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.77.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:79:86:24:9a:3a:2d:94:8e:eb:c7:33:e9:3a:d6:f4:2f:f1:
         da:31:0f:b1:c9:4d:6d:b1:27:b5:4c:a4:16:9f:55:71:30:01:
         86:cd:5e:9d:08:67:03:1c:a2:63:d7:25:9b:e7:d2:58:ee:8f:
         25:09:fa:78:b5:56:ca:9f:f7:88:a4:2c:44:f8:7a:05:6f:75:
         af:fb:0c:ac:8f:88:48:ce:c7:f4:66:75:ef:fc:39:95:6f:aa:
         2e:35:da:9a:35:96:ed:b4:e7:5d:f8:8a:68:1b:29:18:99:19:
         e6:6e:74:74:28:87:e1:c3:c7:f4:f8:de:03:f2:2a:59:07:45:
         9d:90:19:20:d1:78:f9:46:21:60:5a:de:a0:cb:46:53:4e:66:
         f4:62:70:d3:d1:4f:70:a6:2d:76:50:29:da:f5:65:de:fa:bd:
         35:42:bf:7e:a0:27:11:d3:bb:91:35:3f:d1:2a:f1:6f:dc:94:
         2a:24:fd:09:88:8a:0b:a1:76:e1:f4:95:ba:de:6a:7a:04:31:
         7e:9f:07:58:13:c5:97:e1:7c:72:d9:15:92:e4:fc:d1:72:53:
         6f:0b:54:17:ec:85:d8:e9:98:9a:72:4a:64:5a:65:e3:1f:c7:
         43:34:08:13:88:7f:68:bd:b1:3b:ee:d8:d5:e6:e9:1f:26:17:
         8c:96:c9:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 1 04:22:40 2025 by rpki-client