Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fb408e9c-286f-4c45-ba9c-96b90f2ca36b.roa
File:                     fb408e9c-286f-4c45-ba9c-96b90f2ca36b.roa (raw, json)
Hash identifier:          PAhSJQUWvsI9PozO1XUNF60EN2imDDVqG8NzLfYHE/s=
Subject key identifier:   FF:C9:A6:63:6F:78:FA:68:F9:F8:1C:21:B5:1B:98:42:53:AE:4E:2C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0E178253D52C6793977760A7837C45689BD9B30E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fb408e9c-286f-4c45-ba9c-96b90f2ca36b.roa
Signing time:             Wed 07 May 2025 00:40:22 +0000
ROA not before:           Wed 07 May 2025 00:40:22 +0000
ROA not after:            Wed 11 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        50.16.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:17:82:53:d5:2c:67:93:97:77:60:a7:83:7c:45:68:9b:d9:b3:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  7 00:40:22 2025 GMT
            Not After : Jun 11 23:59:59 2025 GMT
        Subject: serialNumber=7544e9745477379f616f51825aefe96c7a24f07d447d0585d4666ee307cf672b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:02:34:58:8b:33:9a:e8:a9:60:ee:74:6e:67:
                    6d:6e:b1:ca:4c:36:69:9e:56:10:2a:d2:06:93:55:
                    79:2d:7f:a4:ec:06:2e:39:cb:0d:82:16:93:03:b7:
                    96:ad:30:98:ff:e8:6a:b7:22:6b:77:c5:04:28:91:
                    30:af:df:07:67:5e:18:67:b4:07:32:cb:28:76:7a:
                    24:2e:46:ff:96:db:77:c8:c4:84:41:fc:37:fb:74:
                    8b:01:25:0c:8d:cb:35:86:60:44:5a:45:5a:88:2b:
                    4c:7a:fd:75:9d:ca:c8:73:e5:1a:10:86:d6:f4:69:
                    58:41:91:f0:7a:ea:e8:66:6d:b7:e7:ac:6e:e5:45:
                    05:59:31:8a:d8:3d:e6:4f:74:6e:f5:43:62:67:6a:
                    f7:ad:5f:20:6a:de:0f:dc:1e:be:9d:70:e1:eb:a0:
                    20:28:2f:af:f2:d7:af:3e:5f:8f:ef:26:1f:61:4f:
                    d3:93:55:75:6f:82:5b:b7:6d:37:39:e3:2c:f6:15:
                    0c:d2:9b:b7:2e:e3:9c:c6:e3:fa:c0:cd:06:17:7c:
                    f1:7d:3f:25:50:68:2d:94:ba:f4:76:e9:02:70:66:
                    77:9b:9e:92:23:b8:8d:4b:c6:a9:2e:a9:44:69:ab:
                    1e:d9:7f:a1:71:eb:5b:9a:d0:c2:aa:2f:6e:48:08:
                    cf:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:C9:A6:63:6F:78:FA:68:F9:F8:1C:21:B5:1B:98:42:53:AE:4E:2C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fb408e9c-286f-4c45-ba9c-96b90f2ca36b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.16.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         22:2c:e7:4b:a1:68:de:89:e0:ee:32:53:29:94:2c:23:49:1e:
         d4:99:13:47:3b:5f:88:4a:8c:2c:6a:2f:35:6c:bd:26:0e:ce:
         c2:14:83:4e:8c:8c:b4:3e:29:51:7f:ee:30:7e:18:6d:0c:58:
         ac:b0:27:a7:64:43:92:f6:0d:5a:c1:3d:b4:90:b6:42:fa:b5:
         60:4b:99:73:df:19:d6:96:7a:b1:55:4a:bb:0a:e2:a5:b0:a4:
         6a:6b:ca:a8:3f:26:2e:db:26:d0:bb:10:e1:bc:c6:8f:0f:07:
         01:a6:b8:10:68:7b:5c:db:8a:ba:e0:2b:5b:78:f6:4f:bf:f2:
         06:f3:99:81:f5:1f:54:2f:57:c7:63:e8:01:32:12:90:62:a8:
         e2:61:db:86:58:13:78:c3:cd:6d:85:ae:0f:e1:43:59:65:d7:
         0b:ec:5d:80:b7:dc:a8:6a:a1:a8:89:ea:58:9c:96:75:65:4e:
         0b:7c:6b:36:04:10:7b:79:67:29:4f:7a:35:ae:35:d8:a4:7a:
         c4:dd:80:cd:cc:99:95:ce:24:51:1d:2b:f4:c4:8e:33:77:fa:
         7a:51:8d:ac:d6:a7:a9:b7:f8:e2:40:dc:92:e0:88:66:92:b1:
         af:da:90:75:26:62:5b:28:66:cb:e3:10:8c:e1:50:e1:ab:ec:
         24:6f:4b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 1 04:31:08 2025 by rpki-client