Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/37907f75-e7ff-4ab6-93f4-46f58160bbb9.roa
File:                     37907f75-e7ff-4ab6-93f4-46f58160bbb9.roa (raw, json)
Hash identifier:          x7Y4MWsrMHPKgwr6wAx2QWj2b6sZNC2QNPiWasmPHGM=
Subject key identifier:   06:F3:AB:A6:53:23:3D:26:89:DD:F5:AC:9F:B3:81:25:C7:8B:93:AC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5FD53F0736749421B75FA0ACA699E8213F2FCD3B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/37907f75-e7ff-4ab6-93f4-46f58160bbb9.roa
Signing time:             Fri 18 Apr 2025 00:32:04 +0000
ROA not before:           Fri 18 Apr 2025 00:32:04 +0000
ROA not after:            Fri 23 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        206.53.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:d5:3f:07:36:74:94:21:b7:5f:a0:ac:a6:99:e8:21:3f:2f:cd:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 18 00:32:04 2025 GMT
            Not After : May 23 23:59:59 2025 GMT
        Subject: serialNumber=160ad017958b52e0e15f869e65d52d131bd2c3db6acdf5b55e3af536b1a08574, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:55:50:6f:24:11:94:62:17:1e:b2:b7:c4:f4:
                    a7:44:8e:a2:30:99:c9:43:ed:02:d0:aa:88:94:7a:
                    b7:94:e2:f1:e6:ad:75:e7:e2:65:06:32:0c:46:23:
                    9f:2f:99:2d:d5:b3:f3:15:cf:01:81:fa:3f:d4:e9:
                    fc:23:0b:f6:21:3b:38:8a:bc:c8:bf:f3:ce:7e:06:
                    08:4c:c2:30:34:f8:ad:2a:fa:d4:30:69:9a:78:82:
                    5c:e8:b8:31:69:59:d7:6d:3c:a1:21:e3:6e:45:68:
                    87:43:2d:24:b6:56:05:b2:9e:76:d3:89:0f:f3:ad:
                    07:60:99:26:0d:f6:bb:c7:5e:e1:ae:a9:71:72:4d:
                    98:87:f4:7e:94:43:d8:d7:2a:c2:4d:8a:bc:0f:ed:
                    59:10:67:2e:b3:74:24:cc:0a:12:2d:93:d6:51:8f:
                    dc:30:6d:57:ab:49:e1:96:09:7a:84:55:45:36:77:
                    b2:89:cd:c2:50:08:e5:75:68:f9:57:52:f4:9e:e1:
                    5f:00:41:cb:d8:c6:22:c5:73:7d:0e:85:ad:2d:e7:
                    b7:50:85:e7:19:20:57:25:e0:5d:26:c5:93:ea:65:
                    5c:9f:fc:f0:87:f4:7d:73:e9:e6:c7:c1:ad:c8:0e:
                    9c:11:94:bf:3a:e3:5d:89:34:9f:f4:1c:6b:dd:78:
                    ea:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:F3:AB:A6:53:23:3D:26:89:DD:F5:AC:9F:B3:81:25:C7:8B:93:AC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/37907f75-e7ff-4ab6-93f4-46f58160bbb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.53.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         90:f4:b8:f7:62:93:c1:b5:b3:5b:66:63:67:32:c1:2c:af:c5:
         49:44:50:34:db:75:08:ce:67:54:ec:1b:a4:a8:a9:13:54:89:
         13:c6:c9:7c:9d:87:0a:7f:b5:37:0a:15:78:86:a6:0c:93:d0:
         ef:a7:c4:00:e8:21:26:c0:38:ac:5a:96:e2:3a:d5:17:9f:7c:
         2f:29:aa:2a:5f:76:0c:34:29:10:12:8e:54:98:04:20:3e:b4:
         5b:80:3d:8b:e3:c4:8d:8d:09:fb:6e:56:09:b5:26:74:15:30:
         a7:66:62:2c:c9:bb:04:2c:75:66:51:95:3f:f1:60:06:9d:9c:
         ff:69:6a:d6:69:c3:70:3d:48:ba:cb:46:6c:74:e8:17:7a:b0:
         28:aa:bd:85:0e:c0:22:25:e6:0a:16:61:1a:ed:cf:4f:d9:e6:
         a0:c8:06:72:14:af:05:3d:07:09:ca:de:19:53:3b:76:1b:8c:
         a6:4f:cd:20:bb:ba:36:26:b9:03:84:d7:d8:b7:69:34:b8:c5:
         d7:db:55:f3:a8:54:06:e3:ee:b8:ee:05:8d:31:66:a6:82:43:
         69:79:6b:51:bc:b4:58:e4:84:d2:91:b6:7d:4d:c8:1d:a3:6d:
         4b:3a:e2:0a:42:29:e3:95:e6:e7:c8:d1:84:3d:b7:e8:59:11:
         a0:96:24:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:52:54 2025 by rpki-client