Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/273d0c5c-87cf-415f-ae65-00356d8e0ae8.roa
File:                     273d0c5c-87cf-415f-ae65-00356d8e0ae8.roa (raw, json)
Hash identifier:          IQOFs+0bAuJCJ0yTNpDjdzNw+gP78xTRdPjo2XSVZWk=
Subject key identifier:   A5:32:16:7B:CA:98:8F:A4:69:3A:76:D2:A3:7E:40:97:6C:40:EB:3D
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       7482B138A5DF8D7165D6F2F1F36053990B35E7DF
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/273d0c5c-87cf-415f-ae65-00356d8e0ae8.roa
Signing time:             Tue 20 May 2025 17:11:21 +0000
ROA not before:           Tue 20 May 2025 17:11:21 +0000
ROA not after:            Tue 24 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        52.94.76.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:82:b1:38:a5:df:8d:71:65:d6:f2:f1:f3:60:53:99:0b:35:e7:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: May 20 17:11:21 2025 GMT
            Not After : Jun 24 23:59:59 2025 GMT
        Subject: serialNumber=85f93ae344c58655decfde23da3b5aab928fd5a928e0d8509a4e9015b3db3cc5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:51:30:3c:57:1a:cb:36:c2:6e:b2:4b:f7:47:
                    e6:cf:28:ba:b2:89:a9:3d:61:df:ad:d5:a2:58:4c:
                    b3:59:e1:17:be:22:fd:26:2a:15:ce:c2:4d:50:26:
                    d5:7c:8c:4c:07:aa:97:fa:a4:4e:40:17:f7:52:2d:
                    e7:44:af:88:b4:bb:62:90:5d:57:4d:a7:b7:2c:f1:
                    da:60:38:35:0a:2c:61:1d:33:4a:42:6a:31:61:a5:
                    33:be:ea:15:9c:0b:35:61:67:3f:cf:2b:0c:e5:73:
                    1f:49:fc:f7:d9:d2:b2:0f:44:75:ca:93:1d:d3:47:
                    7b:ce:32:fc:da:27:7a:e5:04:a5:a3:00:98:80:fa:
                    4d:8b:d5:7e:f6:97:a7:23:4f:33:05:48:a7:bd:08:
                    40:e7:69:58:b0:b6:c1:95:6e:54:de:c6:c9:61:45:
                    d2:18:97:d4:09:c9:98:14:ac:09:cb:17:9a:72:ba:
                    7b:82:2c:46:c9:c9:bb:f4:1b:16:fe:ee:6f:a5:ff:
                    56:e8:76:7d:ce:f4:4f:15:66:82:4c:dc:92:27:0a:
                    f0:88:46:1d:80:56:21:d7:39:b4:9b:51:c6:6f:cd:
                    e7:3b:40:66:22:15:b4:7a:c9:9e:82:b6:72:d4:db:
                    c4:40:f0:7b:b2:51:37:3d:bc:9f:ff:64:48:b8:79:
                    ed:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:32:16:7B:CA:98:8F:A4:69:3A:76:D2:A3:7E:40:97:6C:40:EB:3D
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/273d0c5c-87cf-415f-ae65-00356d8e0ae8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.94.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:1e:2b:2a:c7:b4:32:66:15:b4:33:4a:28:1f:3d:20:cf:f6:
         31:4f:ab:2c:ed:2b:a0:27:58:08:7e:00:1f:c9:0b:85:66:14:
         c9:3f:07:f0:cb:6b:a0:d7:58:5a:56:73:d6:2b:51:83:2f:88:
         20:c1:0b:51:ce:89:40:e9:79:1f:77:0b:db:67:bb:83:21:be:
         dd:7b:60:65:b5:7e:a5:8b:a3:f1:33:eb:cc:cc:d6:0a:5a:f8:
         c9:4f:a1:9a:cc:7d:51:5e:25:ac:0c:14:0e:ed:de:42:7f:ba:
         09:51:e6:29:75:c2:ae:6b:71:f3:e2:6e:7c:c5:81:36:1e:11:
         2d:ed:ea:59:30:8d:93:b7:6a:47:9f:98:07:61:b3:cc:e2:81:
         59:ea:3e:08:4a:7e:fc:f6:f0:fe:f3:70:fe:87:21:ee:fd:bb:
         2b:a9:37:d6:75:ca:6e:03:74:d4:71:e1:d3:17:62:43:f9:b1:
         ea:78:7c:a5:8f:8c:ae:bf:90:f1:ad:f6:25:a6:7c:87:9f:3c:
         b3:4a:e7:cc:28:79:96:50:56:91:f0:67:97:c4:26:73:07:8d:
         d5:28:48:c1:6e:a3:92:68:1d:27:da:1a:b4:d3:33:3a:3d:36:
         df:7e:1e:3e:72:22:d1:7b:93:70:c7:4c:55:6c:e7:17:f0:ff:
         1d:72:1d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 03:53:35 2025 by rpki-client