Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e8f75d51-7cf9-4f48-8b37-9a9b6a2fc55a.roa
File:                     e8f75d51-7cf9-4f48-8b37-9a9b6a2fc55a.roa (raw, json)
Hash identifier:          zizxNhzxBxAapZBnJCM0GcPYG4uqv8yJGwK7KCVFHTE=
Subject key identifier:   B1:2B:36:6E:39:EF:D2:6D:AA:EF:7A:C6:A1:47:B7:79:7F:0A:5B:08
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       46DACE95DAB57E0B6E34CA8AA328C356C68530B3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e8f75d51-7cf9-4f48-8b37-9a9b6a2fc55a.roa
Signing time:             Wed 13 Aug 2025 00:30:35 +0000
ROA not before:           Wed 13 Aug 2025 00:30:35 +0000
ROA not after:            Wed 17 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        64.252.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 21 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:da:ce:95:da:b5:7e:0b:6e:34:ca:8a:a3:28:c3:56:c6:85:30:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 13 00:30:35 2025 GMT
            Not After : Sep 17 23:59:59 2025 GMT
        Subject: serialNumber=583d6afb5fe226ca7d2767605d78cd9aa78548e2a62c45a0019e17e73dec7e88, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3a:84:ac:32:88:c3:f6:91:25:85:95:a0:50:
                    47:b5:a1:6e:e1:23:fc:0c:de:0b:12:e0:1d:fd:e3:
                    c2:16:e3:48:c2:23:e1:d5:88:0c:3d:3f:1e:88:69:
                    67:d3:be:d8:5a:d0:e4:e0:40:70:05:0d:97:93:ed:
                    14:11:60:1f:91:38:b1:b6:02:dc:8c:86:4c:dc:75:
                    d4:fe:1b:3e:89:fa:e1:2e:38:6c:72:13:e4:21:57:
                    11:d3:fa:c0:ae:60:c7:7d:c8:33:0f:89:ad:8d:4e:
                    18:8f:e5:f5:5f:22:d8:b4:e0:4f:43:20:09:10:d4:
                    5a:e1:63:35:8b:8a:56:92:c7:f1:8d:42:d9:74:33:
                    82:eb:14:74:ee:72:b2:9b:68:05:ed:34:ab:db:40:
                    c9:1e:11:91:be:0a:3e:f1:d3:19:76:03:7d:17:9b:
                    f2:b8:45:5b:8c:a8:0b:71:06:ce:fa:a5:97:8a:89:
                    21:c6:22:34:af:92:8e:97:84:ff:93:b8:07:c0:a0:
                    91:53:03:76:84:d4:30:db:e3:8f:83:76:78:21:e0:
                    21:cd:02:39:32:94:ad:ef:3a:ef:64:e0:50:51:e0:
                    9e:a5:2e:e1:ec:8e:26:57:49:47:e3:f3:12:ce:ef:
                    6b:1e:2d:83:3a:0e:93:d9:a1:7e:99:30:f7:86:49:
                    3d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:2B:36:6E:39:EF:D2:6D:AA:EF:7A:C6:A1:47:B7:79:7F:0A:5B:08
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e8f75d51-7cf9-4f48-8b37-9a9b6a2fc55a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.252.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d6:a5:68:e3:7a:5c:88:9f:82:7e:98:a9:75:21:65:67:fa:79:
         31:7a:f2:5a:71:ac:b4:3c:cc:a4:6e:1a:a5:31:09:74:26:1a:
         f4:f5:33:3c:6b:fe:86:8d:9f:9d:7a:39:45:83:32:8e:ea:30:
         84:71:d8:50:89:c8:13:9c:70:8f:3a:c0:0f:b9:a3:47:cc:67:
         9f:0f:26:5e:33:ca:39:ee:21:0a:58:70:a2:bd:59:a4:28:41:
         91:da:6c:8f:26:ae:dc:2c:2e:ec:8c:86:72:d5:32:61:30:92:
         87:d6:c8:7a:9a:75:fa:64:61:72:28:f1:cf:ab:05:16:20:bc:
         f2:96:e2:3f:ed:9d:6d:b8:50:e6:fa:d6:bc:8d:b7:49:d8:5e:
         d5:be:42:4a:ec:24:5a:02:76:58:99:ff:64:e4:0d:71:3a:8c:
         e3:c4:17:30:50:19:02:ba:68:7f:eb:83:3e:aa:3b:fd:ad:f5:
         4a:19:8b:b0:64:82:67:df:c7:10:92:4a:5c:1d:72:33:dd:2c:
         24:29:ac:83:6e:a3:6b:5a:be:0f:30:82:b4:63:fb:ef:96:6b:
         f3:25:92:5d:60:ab:8c:b9:e6:c0:53:58:2d:a7:08:e8:a8:de:
         32:55:2f:d7:9f:c9:f0:74:45:6b:1c:65:49:45:ec:f4:b2:29:
         da:08:07:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 13:13:26 2025 by rpki-client