Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e8f75d51-7cf9-4f48-8b37-9a9b6a2fc55a.roa
File:                     e8f75d51-7cf9-4f48-8b37-9a9b6a2fc55a.roa (raw, json)
Hash identifier:          Pdb+E9GFQ04WWLtB2UvklDt5OzfmIArDFQqUIVCw5aw=
Subject key identifier:   E2:EE:1E:B3:E1:45:E7:C8:39:8F:AA:0C:FF:95:63:54:FC:70:6A:DD
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       449D87C818B96DBFF5B8DD761F40AFD7D7978B83
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e8f75d51-7cf9-4f48-8b37-9a9b6a2fc55a.roa
Signing time:             Mon 08 Sep 2025 15:30:20 +0000
ROA not before:           Mon 08 Sep 2025 15:30:20 +0000
ROA not after:            Mon 13 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        64.252.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Sep 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:9d:87:c8:18:b9:6d:bf:f5:b8:dd:76:1f:40:af:d7:d7:97:8b:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep  8 15:30:20 2025 GMT
            Not After : Oct 13 23:59:59 2025 GMT
        Subject: serialNumber=7c373705907602fa5cb9c1a206a43a578a8d46c5ec5eea7e56c0f3539a202310, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:59:43:74:65:09:9c:d3:84:74:5b:9d:b5:ff:
                    8f:df:0b:41:f6:31:e6:cf:c3:9e:91:1c:c0:1d:23:
                    04:80:72:bd:09:36:e8:61:39:24:af:94:ad:4b:d3:
                    34:05:96:78:02:30:a7:ef:06:e4:b4:b0:e5:46:2e:
                    58:45:f9:b6:53:76:74:df:d3:c9:ab:f3:18:8c:d5:
                    bd:89:d3:22:7f:a1:a4:db:ac:59:16:d5:01:ed:2c:
                    2a:ce:57:c0:d2:8e:2f:4b:55:9b:8d:df:a3:d4:ec:
                    70:15:04:b4:d2:02:a3:8d:13:7f:f4:bd:77:1e:45:
                    16:ec:9d:99:1e:f0:d7:e3:42:a7:38:0b:ae:37:8f:
                    40:7c:87:a8:2e:82:04:b6:31:b3:4e:b0:e0:47:61:
                    4e:a0:44:07:7d:f8:50:c8:30:2b:55:fb:2f:7f:c4:
                    d1:54:3b:6d:1f:22:66:ba:7c:9d:18:84:91:43:50:
                    9e:d8:f9:b6:57:88:c5:0b:ad:ed:a2:2e:a6:88:82:
                    95:d9:d7:80:9f:d7:9b:b7:6a:08:f2:d2:d8:63:c7:
                    aa:35:49:d5:07:bc:a7:ad:4f:0c:d0:88:a7:e7:b9:
                    2d:d2:02:d5:52:80:2d:b3:5b:8f:3c:fe:67:1f:f5:
                    cf:01:61:f7:21:ef:6c:77:4b:ef:8a:62:9b:82:ed:
                    a7:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:EE:1E:B3:E1:45:E7:C8:39:8F:AA:0C:FF:95:63:54:FC:70:6A:DD
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e8f75d51-7cf9-4f48-8b37-9a9b6a2fc55a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.252.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:91:7f:4d:4e:8a:27:57:4f:9d:be:0b:e2:68:6d:10:c0:cb:
         08:43:ac:fd:b8:ed:4f:48:1b:18:67:eb:e2:ad:9d:19:af:f9:
         bf:a1:e4:b4:4c:01:82:50:00:8e:97:57:06:31:97:78:60:30:
         79:a6:5d:26:cf:63:47:af:5c:4a:8f:af:b7:b1:e0:2e:ed:03:
         54:cc:a9:6e:d8:3a:a9:dd:cd:7b:37:d8:82:e0:bd:9f:b0:d8:
         75:c9:46:d9:b8:bb:dd:f6:25:91:4d:40:1e:2d:72:80:ee:82:
         95:1d:2f:33:51:21:77:b6:88:fc:2a:e6:70:fd:c8:b9:cc:5b:
         ca:94:51:94:82:47:87:c7:d2:cb:5a:bb:9f:de:42:13:f4:73:
         61:2b:ee:5b:29:d6:e6:c8:0a:be:6e:6c:d1:02:54:4e:ef:d6:
         b8:43:7f:06:62:9d:d5:c6:22:b1:4f:1d:7a:da:11:74:9f:8d:
         6a:fa:c7:e6:1b:ab:fd:dd:5c:e8:68:c3:a1:e8:46:0c:c0:97:
         9c:52:91:24:fe:02:89:41:49:12:26:08:c3:b3:89:ea:04:07:
         19:19:83:1c:ab:25:39:38:e9:e6:a1:e1:70:3e:c6:ad:ff:2d:
         6b:09:a7:df:d2:4b:6b:6b:1b:bb:bf:f4:0c:ba:c4:ec:cb:c5:
         1f:9f:c6:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 06:35:45 2025 by rpki-client