Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/77610582-9300-4986-8bb9-f106c336d9e5.roa
File:                     77610582-9300-4986-8bb9-f106c336d9e5.roa (raw, json)
Hash identifier:          fKG9TVu8X0vGZJLbbIEhK5g4ONwX8QxhUQw0SvcDJuc=
Subject key identifier:   89:14:20:DD:D1:53:1A:D2:CC:A1:CC:FC:46:AE:32:B8:E5:E1:CE:52
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       57A79145CF102164E2EB0B85B00F336B658A3E66
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/77610582-9300-4986-8bb9-f106c336d9e5.roa
Signing time:             Fri 09 May 2025 15:01:53 +0000
ROA not before:           Fri 09 May 2025 15:01:53 +0000
ROA not after:            Fri 13 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.80.0.0/12 maxlen: 12
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:a7:91:45:cf:10:21:64:e2:eb:0b:85:b0:0f:33:6b:65:8a:3e:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: May  9 15:01:53 2025 GMT
            Not After : Jun 13 23:59:59 2025 GMT
        Subject: serialNumber=41a74532f9b9cd9ad0ce8a0c80a1c33cc948a856d79f02be06cfdb509fda6841, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:52:f7:fa:4d:82:47:e8:ec:7a:47:6f:fd:4c:
                    34:c2:ec:18:d4:62:f6:5d:62:e1:67:54:6a:d2:6f:
                    12:30:41:b1:2b:ab:73:46:40:2d:ae:8b:db:cf:ac:
                    f3:00:f2:54:75:e2:46:46:ae:1d:98:31:de:a8:a7:
                    28:71:9e:35:63:3c:ce:e6:b7:78:1b:52:30:be:4e:
                    d2:e7:3b:a0:1f:34:a1:5d:7b:68:a1:86:06:62:37:
                    7e:24:53:c0:92:af:01:14:2a:f8:60:dd:48:af:02:
                    8c:94:90:2b:16:da:3b:80:a4:ba:9a:be:d2:17:25:
                    94:6f:3f:c5:5d:43:7e:f7:e9:bb:95:a7:f4:62:36:
                    bc:81:b6:0a:fb:03:ba:66:0c:3b:d3:48:9b:9d:6d:
                    4f:ff:fb:34:da:29:b6:6a:7f:0f:d0:43:4c:19:f4:
                    aa:d1:ab:35:80:fc:68:34:0b:84:23:18:ef:d9:07:
                    da:8e:d3:7d:1f:fc:cc:56:c8:61:68:f4:0b:c5:4c:
                    7d:d5:8b:b4:9a:cd:ae:ac:b8:df:09:20:8c:f1:2c:
                    f1:28:f8:05:2e:64:a2:57:d7:c4:b7:af:56:f6:bc:
                    5e:6e:d4:1f:d5:ae:64:0f:d6:fd:b3:e1:e4:00:0a:
                    bf:03:2f:a8:75:04:dd:aa:a0:a5:a2:2a:59:4c:f1:
                    5c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:14:20:DD:D1:53:1A:D2:CC:A1:CC:FC:46:AE:32:B8:E5:E1:CE:52
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/77610582-9300-4986-8bb9-f106c336d9e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.80.0.0/12

    Signature Algorithm: sha256WithRSAEncryption
         4b:7b:41:80:23:ce:7f:0a:09:80:22:0d:15:e9:74:a6:05:3f:
         a3:fa:eb:fb:59:98:5a:45:6f:43:f9:82:3e:28:84:75:91:b5:
         57:76:78:99:eb:93:04:c5:1b:d4:fa:d2:a5:a1:43:05:4c:4a:
         56:3d:88:e2:43:e2:8c:f0:59:20:d6:6c:88:bf:a6:e0:ec:19:
         c3:d2:9b:ca:4f:ec:c7:2b:0c:96:5b:a4:84:31:8a:8b:b2:67:
         f4:f0:c2:d0:d9:ad:a3:2d:84:55:29:8c:8c:a7:75:a7:31:22:
         49:a2:a2:d1:b8:a2:c0:21:0e:3c:72:84:0e:dd:f0:13:d7:dc:
         a3:62:ef:79:59:82:1e:bc:ed:aa:b0:61:a4:11:b9:02:fb:cf:
         69:21:f6:c5:6c:17:06:13:0f:f4:2b:50:fe:4d:83:9a:37:ca:
         59:06:58:a6:d9:e6:c6:5b:9b:44:c2:da:88:e2:59:37:2b:fa:
         7f:ca:90:a5:37:50:ba:3b:e8:22:83:74:70:98:6b:c0:ab:70:
         c6:19:99:bd:c3:22:31:8d:1a:0b:71:45:ba:51:1e:e4:ea:a8:
         4c:54:7e:aa:d6:e6:cc:12:b2:09:d8:ec:35:19:cc:8b:85:c6:
         ec:6a:69:3b:5f:e5:b4:5e:90:52:33:11:f9:b7:12:79:25:b3:
         50:5a:73:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 17:03:48 2025 by rpki-client