Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fb39751f-4342-48a6-a846-07297ed60442.roa
File:                     fb39751f-4342-48a6-a846-07297ed60442.roa (raw, json)
Hash identifier:          zdv55N2iSiJE1eNt7/joTyYSHReQvFbFwYXiUtCYg0I=
Subject key identifier:   E5:18:0F:07:B8:2E:9E:4D:9A:42:1D:AF:9E:9F:5C:8F:8A:A0:81:0E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       320252AE6CD730DAC9450C583F121707EB4381CC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fb39751f-4342-48a6-a846-07297ed60442.roa
Signing time:             Fri 16 May 2025 16:11:32 +0000
ROA not before:           Fri 16 May 2025 16:11:32 +0000
ROA not after:            Fri 20 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        207.36.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:02:52:ae:6c:d7:30:da:c9:45:0c:58:3f:12:17:07:eb:43:81:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 16 16:11:32 2025 GMT
            Not After : Jun 20 23:59:59 2025 GMT
        Subject: serialNumber=420a3863972b0d3728c73f3a27fc26a6d1228f938d0ebaf55b72b441cc3b3ca7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:fc:d7:4c:25:97:66:33:83:a4:01:0c:f0:07:
                    b5:a7:26:3d:b5:17:1d:c8:d2:51:e4:19:fa:5a:02:
                    c6:1e:c1:29:14:d2:e3:03:04:b2:a9:47:ea:fd:87:
                    f8:8e:69:96:7f:3f:07:18:bf:e5:05:54:5c:df:3d:
                    ae:38:ac:48:cf:7c:23:81:b4:84:eb:74:0e:ee:e9:
                    99:b1:f7:bd:02:2f:33:b6:20:e0:74:3d:b0:7c:51:
                    c7:43:24:a3:ba:6b:e9:5b:b6:1c:68:10:ee:59:b4:
                    ea:4f:6f:ab:e4:ce:dd:ff:7b:e2:56:52:d9:38:c4:
                    fa:7a:fb:8e:37:6d:2a:0a:24:ea:b3:a0:9f:3a:e6:
                    e4:5c:49:84:92:b0:d9:df:4d:34:1b:8c:15:1c:ab:
                    ad:5b:f5:fe:03:ec:f6:a5:19:61:58:67:62:6d:57:
                    20:57:43:93:4d:9f:2c:95:f6:ab:5a:7d:25:97:b7:
                    53:ca:24:2b:2d:9b:49:15:0f:28:c3:26:1b:a5:1e:
                    5b:b5:37:1e:ad:7f:ac:b5:4a:32:15:af:39:39:13:
                    2d:05:4f:f6:b1:2a:96:8c:17:1b:9e:93:43:3b:e4:
                    10:e6:bb:ef:de:e4:29:de:78:1b:ff:d9:5b:2b:7b:
                    c1:5d:af:fd:63:3d:6e:db:b6:7f:29:6c:0e:23:33:
                    3d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:18:0F:07:B8:2E:9E:4D:9A:42:1D:AF:9E:9F:5C:8F:8A:A0:81:0E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fb39751f-4342-48a6-a846-07297ed60442.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.36.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b8:68:bd:09:9a:8f:ec:0f:d3:4c:77:6c:32:2a:59:35:73:46:
         0a:69:36:3e:07:8b:ab:8e:1b:65:af:2f:e9:76:a5:02:cd:5b:
         91:7c:9e:cf:ec:46:a5:82:8b:37:01:9c:f6:06:eb:58:53:97:
         dc:c0:e2:22:52:5a:30:eb:f4:ce:24:55:42:19:de:f7:cc:a7:
         cb:e1:b3:79:5a:dd:fe:57:94:68:6d:37:7e:e8:22:b2:f1:62:
         9c:06:a9:8f:2a:f2:ba:60:aa:de:dd:1a:0a:7d:03:b5:80:bc:
         b3:4c:e8:9e:66:76:e4:91:9f:5d:38:7d:95:bd:99:46:3b:82:
         95:7b:a8:a0:40:a2:89:99:68:01:9d:28:c6:58:9a:2f:7f:e6:
         49:2d:c6:42:2d:77:29:cb:39:3f:9d:52:75:74:53:ae:57:3f:
         fd:b1:de:b1:a0:e7:a9:dc:51:1f:fd:81:32:0a:b2:1d:00:c5:
         c2:9e:80:85:9f:e1:2a:3e:df:ec:00:6e:6d:d0:78:88:32:80:
         26:c6:b4:43:53:fb:e5:39:fe:aa:e1:e7:3b:f8:98:a3:1b:04:
         30:8c:c3:2f:15:f3:ea:66:79:7f:5b:e4:0f:6d:d2:0c:5f:b2:
         87:82:ea:a5:23:7a:c4:1b:d6:43:bf:e4:96:d3:1e:fa:38:88:
         c8:f6:e0:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 1 05:28:04 2025 by rpki-client