Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5caee27d-582e-4205-bb1f-60952cb4c9cb.roa
File:                     5caee27d-582e-4205-bb1f-60952cb4c9cb.roa (raw, json)
Hash identifier:          xayHGw+heJVbUpyzemRxNULJE5Mfpay3UBMgObJzvsk=
Subject key identifier:   9C:07:79:A8:D9:33:54:90:65:37:E3:18:39:0A:34:89:19:FA:CB:36
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4974F3F198624DD9BBEBCC0D8E329AF9478BDFA6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5caee27d-582e-4205-bb1f-60952cb4c9cb.roa
Signing time:             Wed 06 Aug 2025 00:10:24 +0000
ROA not before:           Wed 06 Aug 2025 00:10:24 +0000
ROA not after:            Wed 10 Sep 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        16.61.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:74:f3:f1:98:62:4d:d9:bb:eb:cc:0d:8e:32:9a:f9:47:8b:df:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  6 00:10:24 2025 GMT
            Not After : Sep 10 23:59:59 2025 GMT
        Subject: serialNumber=febbea3920eecaaaa217385a19c22fa143d799ec5ab702d134ab8879fbb789ab, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a2:5f:86:72:2c:e5:4d:2a:e6:2b:86:c5:6a:
                    eb:98:9b:00:c5:d3:12:a4:28:a8:7f:28:b1:56:a1:
                    dc:d8:1d:13:fd:8c:bc:f0:9d:46:37:24:6a:ca:7a:
                    c8:7b:ec:78:94:14:80:32:ab:6f:a1:92:7c:ed:f9:
                    0a:24:be:2d:c8:d1:a7:0d:0d:51:93:20:3e:76:23:
                    de:b5:6b:73:f9:c2:b5:e6:df:8f:38:a7:83:4e:99:
                    8b:fe:3b:44:80:6e:1d:cb:36:c5:8a:12:6f:91:df:
                    ee:e8:05:52:dc:e3:29:c6:3b:dc:23:df:13:d0:10:
                    02:cb:55:29:cd:6f:3e:24:90:e4:41:86:df:f4:0a:
                    93:6c:e1:a0:56:27:8f:53:37:cd:24:12:e9:e3:9c:
                    70:c7:38:a8:1c:32:fe:7b:12:4a:1e:de:8a:16:76:
                    ca:fa:ef:e3:06:34:ff:bd:df:18:04:f4:91:e9:d9:
                    58:18:fb:c7:c0:c4:92:7d:d3:05:c2:3a:bf:73:a0:
                    96:be:f9:33:5e:e5:92:48:54:23:03:42:b6:e9:37:
                    d4:b1:67:a0:2d:6c:5a:14:54:ea:51:40:68:ec:92:
                    9e:7d:99:11:ce:e8:05:b1:a4:7e:10:b5:83:12:f0:
                    51:79:4f:c5:0a:2c:25:da:8e:ff:b9:8b:9a:06:8a:
                    67:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:07:79:A8:D9:33:54:90:65:37:E3:18:39:0A:34:89:19:FA:CB:36
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5caee27d-582e-4205-bb1f-60952cb4c9cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.61.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b9:5c:85:f1:af:07:9d:43:23:2e:ab:db:fe:b7:fb:22:27:29:
         45:55:d3:2c:9f:11:45:83:db:34:21:83:5a:9c:0d:f8:5b:c7:
         48:f3:a2:39:e3:69:8c:0d:fd:aa:dc:ce:e0:c0:3a:2a:7d:5c:
         4a:71:a8:2d:5b:1c:08:e1:34:0b:4d:e9:72:d4:4e:9d:48:91:
         a7:b9:a3:df:94:15:f0:7a:cd:ac:20:ee:5d:ca:50:3c:18:d6:
         f0:12:75:17:37:cb:c7:28:5f:b3:04:8b:dc:18:2d:c7:a7:bf:
         2c:7c:3b:c1:ba:27:48:ca:4c:28:cd:38:8b:cd:50:21:ce:91:
         99:1b:46:80:0d:cb:52:54:96:04:0b:a5:0b:c6:c5:a1:53:fd:
         0d:98:5b:14:78:0e:28:de:ac:6f:71:59:f6:15:70:c5:3e:91:
         4e:9e:12:3e:d6:a3:05:6d:9f:e0:f6:59:72:e9:b0:36:de:db:
         ba:96:05:56:e9:d7:13:f5:c2:c5:bf:54:38:76:bf:b9:57:de:
         d2:07:2a:e7:ad:f4:2e:e4:0c:6b:32:ee:8f:b2:3b:c3:43:0d:
         e9:f2:e4:7c:ca:45:6e:e0:ff:61:23:48:94:53:8e:b1:a3:62:
         5d:98:b5:f5:b3:29:35:2b:c4:d0:85:60:9a:c9:5f:9e:8f:2f:
         d0:65:37:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:03:16 2025 by rpki-client