Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e0e8d25e-8735-4880-bcc8-79e6b0fc8a6e.roa
File:                     e0e8d25e-8735-4880-bcc8-79e6b0fc8a6e.roa (raw, json)
Hash identifier:          A1dGCsYeI75Wt4HXxReQqgeX/3bwqFNfqL71c8fpQso=
Subject key identifier:   26:4D:96:47:BF:3F:4A:66:87:FD:DC:AA:D8:B1:16:9C:0E:59:1D:7F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5E9E8267450A9C2DCF2B0FD527C5A767DD28590E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e0e8d25e-8735-4880-bcc8-79e6b0fc8a6e.roa
Signing time:             Sat 30 Aug 2025 00:21:02 +0000
ROA not before:           Sat 30 Aug 2025 00:21:02 +0000
ROA not after:            Sat 04 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        56.154.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Sep 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:9e:82:67:45:0a:9c:2d:cf:2b:0f:d5:27:c5:a7:67:dd:28:59:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 30 00:21:02 2025 GMT
            Not After : Oct  4 23:59:59 2025 GMT
        Subject: serialNumber=f2686bb3b5012c3a7048284b26f093a7d0102d41f64bacb4ff10661cd280eb6a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c6:25:37:e4:f7:3a:3d:af:ea:8a:c7:39:16:
                    ae:74:58:3b:4a:6b:fc:13:0f:f6:d7:d6:fd:96:f4:
                    98:08:f4:01:ca:c8:e8:de:94:81:07:48:bf:5f:b6:
                    e6:88:a9:b9:29:1b:ac:51:f8:77:58:24:15:9e:1f:
                    b9:ea:65:87:f3:13:37:c0:b4:9a:ba:61:6b:81:75:
                    a6:2e:f3:4c:b7:df:e7:0f:62:34:79:6a:79:48:c0:
                    b6:2b:c9:ff:90:50:05:d4:b5:9f:66:ab:38:1d:56:
                    de:67:0c:e2:5d:17:bd:94:36:2d:6d:86:7b:a4:d5:
                    d8:12:cf:96:12:74:3e:c1:32:39:27:1d:e4:cf:0c:
                    e7:82:fa:a0:c7:42:f5:6d:fe:ff:8b:0a:8f:cf:f7:
                    1d:40:fd:ac:73:03:36:c9:ef:2d:bd:8b:2d:7f:a3:
                    78:27:21:ce:a8:6d:1b:4d:9b:5f:a5:0b:55:09:9d:
                    77:99:74:05:8a:29:62:81:4d:9e:8b:5e:29:4a:5d:
                    08:a9:8f:92:c2:09:2d:3d:9b:52:66:16:fc:09:c8:
                    30:45:f1:42:5e:dd:bd:86:56:af:db:45:ef:1b:0c:
                    c6:09:23:1b:d5:9d:ae:76:bb:5f:f2:88:79:13:3f:
                    18:0e:1c:b8:fb:e3:58:bb:a3:93:41:d4:14:b1:c6:
                    5f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:4D:96:47:BF:3F:4A:66:87:FD:DC:AA:D8:B1:16:9C:0E:59:1D:7F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e0e8d25e-8735-4880-bcc8-79e6b0fc8a6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.154.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         07:6e:d3:82:05:4c:6c:49:b7:46:90:44:12:4f:0b:8e:e1:bf:
         b5:d5:03:c2:cd:56:15:cb:c6:73:a2:1b:bf:5e:71:a1:7c:d6:
         c3:0c:4d:2c:6e:a4:6b:e8:43:1d:94:d6:3a:3c:6e:42:ef:3f:
         0a:57:ab:39:50:ce:bf:44:c9:7f:ca:7a:4e:17:38:5e:88:1d:
         76:24:8d:32:8b:eb:d2:4d:1d:b2:f4:83:23:fd:6f:46:60:f9:
         12:7c:ee:61:e4:53:20:db:d1:77:0d:69:b1:19:c4:77:c2:ed:
         a3:72:e7:ba:9d:8f:7e:6e:26:16:05:a7:de:59:fd:c8:fa:99:
         04:67:ec:37:a0:ff:06:8e:06:50:7d:9c:e8:b6:2c:66:72:25:
         71:2d:da:1f:d4:13:71:78:97:f3:ee:2f:cb:f4:62:a5:c3:5f:
         25:c7:67:24:3f:a3:e3:2e:5c:e9:52:61:ba:1d:0f:10:f9:39:
         db:6b:8d:e4:67:67:8f:f1:a7:61:7f:c0:6c:ad:60:cc:c8:f0:
         1b:31:e2:07:85:25:0a:7c:e6:60:e8:e6:9c:69:87:32:4a:f5:
         e3:9c:79:82:2f:3a:b3:00:2d:43:86:38:50:33:02:34:4a:31:
         0d:5f:23:0a:49:09:72:80:aa:31:ac:d6:46:4f:54:b8:17:f4:
         ca:b2:12:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 16:40:56 2025 by rpki-client