Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5b69c114-d1ae-4ca1-9d42-1401c8e8cd37.roa
File:                     5b69c114-d1ae-4ca1-9d42-1401c8e8cd37.roa (raw, json)
Hash identifier:          2tbf3TTWeom7g2uH+UpvaSLh/sQPuyWuH/Gjf3fkICk=
Subject key identifier:   8E:B2:D6:FB:5F:F9:21:14:A3:6F:1A:8F:AE:39:BF:59:48:7C:F6:19
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       20DD8A8618DE7EC8E06839994C3C38170E50F176
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5b69c114-d1ae-4ca1-9d42-1401c8e8cd37.roa
Signing time:             Tue 19 Aug 2025 16:40:09 +0000
ROA not before:           Tue 19 Aug 2025 16:40:09 +0000
ROA not after:            Tue 23 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        173.82.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 21 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:dd:8a:86:18:de:7e:c8:e0:68:39:99:4c:3c:38:17:0e:50:f1:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Aug 19 16:40:09 2025 GMT
            Not After : Sep 23 23:59:59 2025 GMT
        Subject: serialNumber=02c886cb420f0a5d3247a804f7ab3f5e746d07d6eb2a1f86272c4fbe30848f65, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:72:1b:07:5e:e8:25:44:f3:53:6e:29:b4:af:
                    10:f2:9a:1c:e6:a5:58:b3:b8:e5:01:24:44:d3:7d:
                    fd:d2:c7:4b:6e:bc:a9:85:72:cd:34:58:84:d9:4a:
                    35:e0:ee:4a:6c:21:e1:0b:11:0f:5d:c2:96:81:3d:
                    bc:44:42:72:7a:57:7b:f2:d6:d2:a4:2e:97:ca:bc:
                    74:94:fb:35:07:6a:cf:69:d7:5e:b4:21:4b:c8:c9:
                    c0:a3:9a:ef:3d:e1:37:95:90:b2:1a:78:20:f8:ac:
                    73:11:67:63:87:6b:7c:fa:f3:82:02:ed:ed:5c:9c:
                    4b:6b:ce:92:a3:b5:c4:57:61:77:32:45:9b:2f:14:
                    91:91:a4:ee:fa:aa:1e:af:58:31:44:4d:0b:46:f8:
                    f3:fb:14:97:2b:d1:f7:18:0b:2a:9e:81:bd:33:a0:
                    6d:ae:b3:ec:82:33:79:28:55:1a:e8:bb:fe:af:fd:
                    b7:47:49:f6:01:3c:58:3c:a3:b2:fb:1d:60:48:3f:
                    07:2a:87:79:a7:22:72:91:66:29:52:61:63:20:00:
                    91:a0:5f:ea:51:0b:22:60:45:b3:6e:26:66:32:29:
                    c3:77:0c:ac:de:da:3e:d4:8c:86:4c:07:64:5e:e7:
                    eb:7f:a4:c1:73:83:5e:3b:f3:74:1d:83:39:c4:43:
                    7b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:B2:D6:FB:5F:F9:21:14:A3:6F:1A:8F:AE:39:BF:59:48:7C:F6:19
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5b69c114-d1ae-4ca1-9d42-1401c8e8cd37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.82.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:1a:08:42:a1:ad:7c:a4:48:87:cc:89:c4:13:c4:65:10:56:
         a6:e3:6b:69:26:cd:09:5e:9a:f1:29:f5:8e:2d:7d:af:61:c6:
         d4:f1:f0:80:6f:28:40:e5:42:39:eb:d0:46:94:2d:c7:9f:50:
         f4:d6:82:81:59:90:9f:cf:e9:45:3b:28:de:e5:b5:5d:77:30:
         de:59:dd:73:91:b0:74:50:dd:b9:6e:c6:99:44:bf:b3:dd:53:
         b4:2a:56:dd:b5:65:6a:9e:72:b8:38:96:ea:47:2b:4a:99:f5:
         18:2b:e1:d6:39:1c:99:43:40:80:25:8d:cd:0d:bf:37:52:b6:
         dd:90:75:15:90:76:7d:93:c7:7e:35:4f:2b:01:cf:b4:fb:78:
         ea:3f:3e:5a:11:b2:bb:42:1a:8e:f5:2b:36:a0:c6:bc:4c:72:
         7e:2f:24:85:87:0f:66:f7:ee:95:9c:74:f3:01:05:a7:c9:46:
         49:98:44:59:37:49:ab:55:bf:17:6a:8e:31:38:3c:66:4e:31:
         03:dc:e8:54:14:61:1f:0c:0b:39:4d:6f:73:2e:08:e8:5b:b8:
         f8:7a:f2:34:34:39:9b:b0:29:0e:d7:2f:7a:a7:40:af:31:b8:
         58:54:85:d4:0c:71:a6:f7:40:3d:db:d4:33:f8:77:97:68:7d:
         bd:20:c0:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 10:42:24 2025 by rpki-client