Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3259b213-f7c1-41ae-bac6-e8c5fb358f08.roa
File:                     3259b213-f7c1-41ae-bac6-e8c5fb358f08.roa (raw, json)
Hash identifier:          6+BOO0HIzvRY+v59+DFKtpbiPUPXOmd7xv6aGO+5fKo=
Subject key identifier:   53:6C:E9:C0:12:54:A2:4A:54:6A:6B:2D:5B:F6:DF:6F:F1:C9:34:B0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4CEB2E714087F29D84CB2BC8B8C45A2C06279BAA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3259b213-f7c1-41ae-bac6-e8c5fb358f08.roa
Signing time:             Fri 25 Apr 2025 15:00:30 +0000
ROA not before:           Fri 25 Apr 2025 15:00:30 +0000
ROA not after:            Fri 30 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        69.107.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:eb:2e:71:40:87:f2:9d:84:cb:2b:c8:b8:c4:5a:2c:06:27:9b:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 25 15:00:30 2025 GMT
            Not After : May 30 23:59:59 2025 GMT
        Subject: serialNumber=d8b21c6642a2b96311b7ea0b3716343b50ff7e187a04c098316b6cac741a2ff6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:97:eb:f7:87:df:88:b9:63:6c:7f:25:8f:5f:
                    b6:68:b4:b6:56:87:f2:b3:f7:36:02:9c:c8:e4:31:
                    b1:d9:cb:07:8f:05:78:49:db:69:8b:7a:7f:89:3e:
                    a1:8a:45:87:26:c1:c2:83:4e:de:de:04:d1:10:64:
                    f8:81:fc:17:e4:63:6b:d1:e6:ad:59:e6:39:64:8a:
                    ad:93:1b:b4:9d:8d:3a:90:58:88:17:16:74:ba:91:
                    e4:dc:2f:db:14:ea:bf:39:02:23:84:36:d1:02:da:
                    5f:e2:95:cc:64:04:72:a2:e8:71:4c:a8:8f:5a:c8:
                    1c:d0:37:33:c2:2e:8c:ad:d7:da:ef:b8:42:31:d9:
                    1c:59:07:07:c8:01:09:ae:f7:ab:dd:8e:6c:57:23:
                    bb:de:da:ef:5a:1c:3f:10:fb:30:1b:5d:73:12:43:
                    dd:14:e9:20:ee:76:b6:16:b6:d7:a9:c0:3c:7b:8e:
                    b0:29:2b:63:6e:db:43:02:0a:06:dc:e2:4f:48:ad:
                    62:28:51:b4:4c:1f:ae:e2:df:68:52:10:e6:32:24:
                    a9:ca:9b:9e:0b:99:83:7d:95:8e:28:84:22:a0:f6:
                    a4:1f:0a:4d:4d:80:c4:b5:82:ab:ea:85:c5:fa:82:
                    7b:9d:5e:b8:58:da:43:75:53:4f:27:2e:a5:b2:0c:
                    48:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:6C:E9:C0:12:54:A2:4A:54:6A:6B:2D:5B:F6:DF:6F:F1:C9:34:B0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3259b213-f7c1-41ae-bac6-e8c5fb358f08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.107.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         0a:d1:b2:49:0d:75:9a:ce:69:58:df:1b:36:80:77:d8:18:e0:
         31:bb:5f:5b:61:14:23:b1:ef:59:46:14:96:c0:cd:69:17:50:
         f2:3d:10:97:51:25:9c:53:b7:7e:f9:a6:23:53:2b:e2:92:73:
         a6:22:f9:0e:0b:3d:e5:6d:b6:54:4b:c4:5d:d2:f4:61:60:db:
         3c:df:36:af:ae:b2:e5:72:65:ce:14:a0:3d:35:d0:fd:b8:77:
         8c:c3:bb:1c:bf:60:22:7b:a4:51:ef:66:67:98:24:32:fa:94:
         db:47:a5:30:a5:18:72:c3:17:91:e0:6f:12:77:67:03:2b:1f:
         04:7b:42:8b:c6:f6:98:ee:68:96:df:d7:e0:cb:5b:83:a6:2e:
         ec:06:1f:42:07:d4:03:ca:61:66:f0:a6:92:6b:d5:e5:28:1b:
         36:e5:06:a8:79:67:54:1f:19:a5:7c:6c:de:a0:9c:bb:49:40:
         24:91:b7:cb:aa:67:75:c2:57:dd:85:e6:58:7a:8f:df:75:5e:
         8b:0a:d5:48:99:c1:ab:fe:44:7d:8f:28:60:f7:eb:7e:a1:31:
         7f:c9:b3:38:0a:70:7d:1e:97:24:e7:5d:40:14:35:86:f7:1f:
         ff:ee:2b:ee:1e:84:eb:f4:0e:ef:9f:27:38:b7:97:6c:a1:b6:
         78:dc:72:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:01:49 2025 by rpki-client