Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d79f801b-3499-4a1e-bd4a-c93dc95bbbab.roa
File:                     d79f801b-3499-4a1e-bd4a-c93dc95bbbab.roa (raw, json)
Hash identifier:          o26j9kTA6m7jbogLRK2l8C2gv5wOIlDk4pVC+r9ui+8=
Subject key identifier:   0B:D4:56:5B:3F:E4:57:B3:82:8F:22:9B:A1:23:0F:0E:48:45:8C:8D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       26995D879D6CBF1C9F878AA7599C266D2A50A96D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d79f801b-3499-4a1e-bd4a-c93dc95bbbab.roa
Signing time:             Wed 27 Aug 2025 00:31:28 +0000
ROA not before:           Wed 27 Aug 2025 00:31:28 +0000
ROA not after:            Wed 01 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        16.107.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Sep 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:99:5d:87:9d:6c:bf:1c:9f:87:8a:a7:59:9c:26:6d:2a:50:a9:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 27 00:31:28 2025 GMT
            Not After : Oct  1 23:59:59 2025 GMT
        Subject: serialNumber=9d6e79df7d421db1ea782c9b647060bd8666d45fcb87acbb69fb6a2503e5e664, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:cf:bf:d1:40:64:9c:06:4e:17:49:f8:21:d5:
                    08:3e:b2:5c:9a:8e:91:a3:64:12:27:c6:72:d2:65:
                    e6:25:30:a4:4b:15:ab:9b:06:59:91:d3:94:f2:0e:
                    73:27:76:68:5f:2b:b8:b6:cb:95:31:37:40:17:81:
                    8c:b7:ab:2a:bc:30:8e:7d:09:24:0d:cc:b6:9a:28:
                    b9:4c:ab:61:7b:72:d7:03:65:70:04:f1:47:7b:1a:
                    31:7d:2b:75:7d:5f:e1:53:c9:ed:c0:5e:d4:03:00:
                    9b:f5:24:3c:a3:7d:8d:bf:35:6c:38:ee:b4:c7:c7:
                    07:9f:e6:35:d2:e8:19:d5:f2:2a:88:a6:a3:87:1f:
                    43:17:c3:72:1b:95:d9:5e:62:c6:8a:6b:11:98:24:
                    49:3a:0f:ab:6b:0d:f9:80:27:5d:b8:fe:75:d1:d1:
                    7f:a2:6a:a7:82:d0:4e:48:e5:00:7f:17:2c:81:71:
                    5c:f3:fd:b7:14:70:80:f0:d6:9d:db:b3:da:c4:60:
                    4b:6e:c9:95:c2:dd:73:b4:41:0a:0b:c2:44:23:5d:
                    4d:51:88:a9:32:a0:39:09:d4:eb:d6:e7:14:01:73:
                    5e:a5:23:14:bd:1b:e0:31:12:26:57:41:53:1e:d6:
                    7e:00:65:57:02:8f:2b:a3:d6:7b:3d:94:69:9f:89:
                    4e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:D4:56:5B:3F:E4:57:B3:82:8F:22:9B:A1:23:0F:0E:48:45:8C:8D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d79f801b-3499-4a1e-bd4a-c93dc95bbbab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.107.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         60:19:00:17:1a:49:de:39:a0:8b:4e:fc:45:34:fc:a5:ad:5d:
         9a:88:d4:36:5b:ad:c9:55:95:da:c2:50:5c:1f:43:ac:5d:64:
         2c:19:0c:b7:e5:52:c2:8a:35:6b:fd:f7:a3:7d:73:d9:89:41:
         9e:ed:0c:07:57:63:60:72:6a:78:50:3c:05:74:4e:a3:fc:c5:
         5d:ba:c4:e0:ed:77:bc:22:27:02:5a:21:58:31:0d:4f:33:7b:
         dc:d3:30:37:ec:33:8e:c9:82:be:94:96:84:5b:26:89:56:ee:
         31:86:65:34:12:5e:44:92:cf:9e:a2:4a:e3:e5:e8:cc:b0:21:
         81:1b:d7:49:fa:f6:77:9c:41:d6:55:91:ac:91:ae:7e:26:c0:
         7e:ba:09:f0:1c:0c:1e:9a:93:a1:67:c5:7d:15:0c:38:53:14:
         95:a8:7d:65:4f:ec:9a:d2:a8:25:67:76:56:68:4f:5f:50:8c:
         71:39:bb:0e:a9:56:c2:31:48:98:7d:17:d7:aa:bb:72:d4:6c:
         59:ac:28:b7:ba:80:0a:21:f8:0b:ae:78:d3:fc:59:43:79:c6:
         72:e5:22:42:5a:29:d6:b5:0a:55:14:24:e5:e9:0a:bf:3d:3b:
         41:5e:bb:43:b5:c8:4a:10:e3:2c:a9:2e:f2:8b:35:e4:b3:2a:
         d8:ec:09:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 16:25:48 2025 by rpki-client