Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e58eb1f8-ad27-4ff7-a49b-c3ff172827a1.roa
File:                     e58eb1f8-ad27-4ff7-a49b-c3ff172827a1.roa (raw, json)
Hash identifier:          erazYFyWWWmORmQNSv4u6lliZjQVyQ34RZCeFlD81aA=
Subject key identifier:   2D:1A:D8:97:DE:23:95:8E:04:EF:08:3C:D5:04:CA:84:23:8F:CA:58
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6E79E00A0EB65FE3A2B10260BCC793FB49C84A90
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e58eb1f8-ad27-4ff7-a49b-c3ff172827a1.roa
Signing time:             Fri 16 May 2025 16:00:39 +0000
ROA not before:           Fri 16 May 2025 16:00:39 +0000
ROA not after:            Fri 20 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        13.194.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:79:e0:0a:0e:b6:5f:e3:a2:b1:02:60:bc:c7:93:fb:49:c8:4a:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 16 16:00:39 2025 GMT
            Not After : Jun 20 23:59:59 2025 GMT
        Subject: serialNumber=6eab459b213d2d96bda958e547816e6318c8a58796e17c563dd32babaebb749f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:28:65:ed:5a:40:15:5d:52:2e:01:b7:6f:f8:
                    a3:89:51:a5:2d:02:2c:5c:34:7b:09:98:c6:f7:5d:
                    03:a3:c0:52:bc:3d:ce:a1:35:35:2b:2c:5c:c0:31:
                    06:f9:7d:9e:96:3b:8a:20:46:5a:02:f7:ac:87:4c:
                    ba:79:fc:20:c0:11:4c:d8:fc:29:e8:90:76:25:62:
                    cf:08:34:e3:56:89:1f:d4:4b:ea:b0:49:88:29:1e:
                    bd:f1:9e:85:d5:82:d2:6b:d3:5f:62:1b:30:42:5b:
                    6b:2b:7f:47:24:f6:80:0d:b0:98:00:ec:87:c3:c1:
                    31:ce:87:6e:b0:e5:c4:a5:c4:da:11:fe:b8:7d:05:
                    f3:c5:40:1a:a3:10:56:6d:4e:92:b3:88:6c:86:8c:
                    3d:5d:bd:a4:7e:a6:63:20:bb:2b:a0:39:3d:b9:ed:
                    a7:88:91:2a:c8:9b:6b:8b:c6:af:49:23:c6:a6:c3:
                    ba:44:f6:38:7f:50:b6:d6:d7:e7:cd:12:3e:cd:f7:
                    27:90:48:cf:b5:6a:b2:01:6a:dd:c5:16:3b:df:d7:
                    5e:c9:54:ad:a9:77:75:ad:07:a0:5a:d2:8c:ff:22:
                    61:46:12:64:ad:33:2d:51:12:b2:7c:6a:31:7b:14:
                    21:c3:5d:b4:34:6b:2a:bf:b5:b9:06:c8:89:ae:23:
                    96:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:1A:D8:97:DE:23:95:8E:04:EF:08:3C:D5:04:CA:84:23:8F:CA:58
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e58eb1f8-ad27-4ff7-a49b-c3ff172827a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.194.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         4d:d3:88:56:9d:13:53:4a:4d:05:85:c1:df:ac:0e:93:fb:0b:
         70:93:97:d0:7e:fd:ea:6d:25:49:b7:b2:4c:c6:31:00:05:60:
         5f:43:9f:af:10:90:6a:3f:be:ce:90:87:d8:1c:a3:c5:eb:dc:
         68:8f:33:1d:cd:6b:78:82:2d:18:97:7c:3d:c1:8f:e2:75:48:
         2e:01:7b:86:0b:57:36:6c:39:af:8c:c1:a4:52:87:c5:c8:be:
         3d:30:96:b5:dc:5d:50:e2:f5:21:ec:4b:4b:1d:cb:36:dd:51:
         80:8f:e4:c5:7c:2d:f1:55:1e:c4:51:0d:5e:1e:bc:2c:c3:05:
         d2:8a:aa:7a:4a:bb:d3:d9:a3:73:57:89:3d:63:2f:3d:62:b4:
         65:52:d6:18:3a:e2:64:0e:e3:44:b7:de:2f:f9:6a:87:23:6a:
         ee:fc:ef:be:03:5b:88:33:08:52:fb:5c:d3:06:cd:8a:70:d1:
         4b:bd:d0:e2:4b:26:6f:b1:32:15:99:52:19:e2:04:62:9e:d4:
         26:8a:c1:36:bf:d6:95:e2:2a:c8:1a:fa:5b:49:45:dd:ef:f4:
         51:55:0c:6f:bd:04:c3:2b:68:38:e7:2b:2e:b6:c1:64:87:a9:
         00:f7:d8:59:1e:4e:55:09:58:97:77:b6:c6:c5:f3:aa:ad:55:
         78:85:41:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 1 04:23:20 2025 by rpki-client