Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5b10272d-8fe6-40f4-91ae-148c84570cb3.roa
File:                     5b10272d-8fe6-40f4-91ae-148c84570cb3.roa (raw, json)
Hash identifier:          CEBQ1VlVd/Ngzg2+Qb+i4is5s1iC/kfwPupT9xMkYMQ=
Subject key identifier:   39:6C:47:A4:E2:62:E4:05:BB:46:0D:7C:9B:8D:EA:09:50:C4:09:34
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       2EE5243842468FB89D99D191D6DAE8D1961A8479
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5b10272d-8fe6-40f4-91ae-148c84570cb3.roa
Signing time:             Mon 16 Jun 2025 17:11:12 +0000
ROA not before:           Mon 16 Jun 2025 17:11:12 +0000
ROA not after:            Mon 21 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        18.179.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:e5:24:38:42:46:8f:b8:9d:99:d1:91:d6:da:e8:d1:96:1a:84:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jun 16 17:11:12 2025 GMT
            Not After : Jul 21 23:59:59 2025 GMT
        Subject: serialNumber=26bb04fac3ad7321947cf2ffc398ab352883bd396aa747e55fb3e628c153f378, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:80:13:ec:54:7a:00:eb:69:27:b5:82:8d:4b:
                    f6:55:e0:7c:fd:48:de:ed:86:a1:bf:06:9c:6a:09:
                    5f:2e:20:aa:f2:26:7a:38:51:04:55:26:0a:94:af:
                    15:0b:bd:36:1f:36:55:36:e1:87:34:a0:6d:d2:d5:
                    8e:65:81:f1:27:a3:4f:5c:97:10:cc:34:3e:5a:92:
                    2f:fb:28:11:e6:66:b0:1f:23:3e:69:d1:e8:ec:64:
                    64:9a:6a:25:90:28:b3:bc:19:b2:ec:45:8f:f1:fc:
                    f3:ee:a1:97:87:e0:21:da:9a:07:35:bc:bb:d6:17:
                    fa:f0:3a:4a:77:73:cf:15:72:92:bc:8b:f1:0b:e0:
                    c1:7c:db:c7:46:5e:19:6e:16:52:6e:b7:c2:2b:86:
                    86:d1:52:6d:66:08:86:f4:cf:7c:6a:7d:df:a9:cc:
                    03:f2:00:1c:b7:a3:e6:f1:1d:85:32:3c:1d:9b:ad:
                    27:4d:eb:1b:58:db:75:da:71:9f:9e:5b:d0:f5:55:
                    3f:31:b5:d2:30:cc:aa:3d:eb:b6:45:0a:f5:36:50:
                    ae:05:61:36:5e:06:e9:c5:c2:56:4e:9d:d1:8e:0d:
                    91:37:93:60:3f:48:9d:27:57:fa:7a:61:4c:b5:d3:
                    2a:d7:2c:2f:c7:d4:59:d1:d3:bb:c2:2d:7b:77:f5:
                    45:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:6C:47:A4:E2:62:E4:05:BB:46:0D:7C:9B:8D:EA:09:50:C4:09:34
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5b10272d-8fe6-40f4-91ae-148c84570cb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.179.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9f:a7:41:0d:e1:5b:9e:52:52:5d:e3:54:51:ef:e2:34:15:17:
         70:70:06:67:6a:19:50:a6:40:a3:f6:63:8e:1a:ab:21:b4:64:
         f8:52:a3:e1:87:12:a9:26:31:59:23:97:3e:a9:eb:ef:f0:2f:
         0b:71:8a:78:1a:6e:2f:07:b4:fb:0a:e8:67:59:a0:43:54:74:
         82:30:63:91:7c:a0:9f:f8:c5:b2:29:8e:16:b4:b2:19:ba:7f:
         01:40:d1:20:d8:78:2b:ef:bd:ce:5f:34:f7:7c:d6:46:4a:4e:
         16:77:57:0b:58:af:26:a1:d5:ef:19:93:01:a8:b0:01:9c:ed:
         9b:e8:89:78:81:9d:f9:9e:15:7e:12:97:85:bd:b3:a7:59:8e:
         c9:a2:39:52:f5:55:bb:a3:70:c4:87:1d:bc:61:cb:33:3e:67:
         e1:b6:fb:a3:b8:2d:2d:50:e4:7f:3e:ea:05:3f:eb:7a:3e:b9:
         03:25:99:ad:03:bb:83:e2:07:35:9c:00:6f:d2:bb:30:92:6c:
         a7:f1:0d:86:a6:1c:cd:84:61:ef:11:5a:93:ea:16:8e:17:0f:
         c0:68:fd:18:32:99:2c:b6:fd:93:27:26:20:02:ec:ae:a1:23:
         5e:13:f8:1a:f6:61:59:60:dd:cb:a5:db:a4:92:82:c0:cf:4a:
         5b:b7:3f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 23:29:15 2025 by rpki-client