Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a0b8344-bc88-4215-9cb3-4a7836dddf4c.roa
File:                     6a0b8344-bc88-4215-9cb3-4a7836dddf4c.roa (raw, json)
Hash identifier:          VG2wosmxLsYnmFttW4/NjtYKT/NWNNQDL73Nz05WiGA=
Subject key identifier:   3B:B0:45:55:10:5D:9F:63:41:13:80:7C:87:24:F9:C1:B8:ED:51:1A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7B7204CE7FBF47202C907E7DB4725FD8D302EDBC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a0b8344-bc88-4215-9cb3-4a7836dddf4c.roa
Signing time:             Fri 18 Jul 2025 00:40:53 +0000
ROA not before:           Fri 18 Jul 2025 00:40:53 +0000
ROA not after:            Fri 22 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        74.127.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:72:04:ce:7f:bf:47:20:2c:90:7e:7d:b4:72:5f:d8:d3:02:ed:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 18 00:40:53 2025 GMT
            Not After : Aug 22 23:59:59 2025 GMT
        Subject: serialNumber=e5874846d8239a40d37617b0e6b964415a0263ee07d388545eda57e74c346709, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:cb:0a:be:f7:ee:32:54:f5:90:97:e3:63:74:
                    7f:ae:ed:6a:8e:16:65:6d:b3:bf:c8:10:36:81:08:
                    aa:8e:85:a6:71:a9:df:a8:3c:65:41:26:8b:9c:18:
                    14:36:cf:df:c1:c1:43:40:9c:02:cf:2c:ba:7e:49:
                    27:c6:54:3c:d8:d3:e3:9b:69:d6:1e:9a:b7:03:b7:
                    4c:36:76:82:19:8c:cf:c6:26:2a:78:36:cc:65:47:
                    87:b3:10:c3:ef:b5:35:0b:e8:7d:23:b2:4a:cf:9f:
                    79:80:c8:0c:79:fc:39:61:0e:98:7f:1c:4b:d4:af:
                    8f:9b:f9:8e:31:0c:f3:8c:5c:c8:3e:69:50:4e:4d:
                    08:59:60:6f:9c:b1:09:df:e6:95:0a:aa:a0:21:eb:
                    61:84:2d:9f:72:ed:48:b3:c1:1a:2f:a3:43:92:7b:
                    94:72:73:76:55:a8:18:cb:36:8b:b6:7e:c0:b1:ab:
                    95:96:22:ef:51:b6:ad:c8:e2:2e:e8:dd:95:fa:3b:
                    79:0e:9f:b7:e2:bc:9f:a1:82:99:60:a7:85:03:21:
                    83:50:66:cd:b6:44:95:85:c6:3f:b0:2d:5d:11:21:
                    5e:00:70:d1:17:80:51:cd:aa:8c:6d:bb:a8:9d:25:
                    58:9c:46:c8:f9:41:38:71:ee:f9:fd:ff:16:08:6d:
                    77:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:B0:45:55:10:5D:9F:63:41:13:80:7C:87:24:F9:C1:B8:ED:51:1A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a0b8344-bc88-4215-9cb3-4a7836dddf4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.127.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         4a:7f:90:48:dc:d7:52:7a:d5:d9:ab:29:c6:b8:c2:c2:21:5e:
         82:c9:d7:8c:23:2d:f6:b2:1e:54:b1:94:e8:d5:86:34:7c:1c:
         a6:8f:ae:83:c4:b2:40:97:2e:c5:ed:25:21:d5:85:14:74:7e:
         b4:87:dc:6a:61:d1:14:b6:56:b7:ba:18:5d:4c:7d:14:4e:5e:
         eb:41:e6:e9:1d:4d:35:f5:f3:c9:ac:fa:91:7f:27:e3:56:74:
         a5:d7:93:c7:75:f8:82:c4:b9:ee:01:4e:d9:f7:5e:0d:aa:6c:
         bc:0b:a1:91:c1:98:4f:49:93:76:52:1f:76:59:b4:b0:4f:73:
         7b:7d:c2:e3:90:2c:d7:9c:b2:c2:34:c7:9c:39:2d:ed:70:83:
         d9:41:13:f1:48:8a:c5:27:22:5a:1d:15:73:97:54:cf:fd:6a:
         05:ba:b1:ef:5b:2f:02:da:0b:1b:0a:af:91:60:a4:de:2e:94:
         b5:4b:c0:59:a0:b0:7b:e6:ee:ae:3d:f8:77:f9:d4:8f:0b:d3:
         49:05:29:3a:1d:7e:86:20:3f:23:7b:f3:0c:36:2d:84:cb:82:
         b6:e5:c2:60:e0:bd:b6:a6:6d:93:44:b7:43:41:05:c0:7e:2d:
         33:9e:08:e5:77:5d:3b:fe:a5:a7:38:0e:92:b3:aa:cc:2c:ec:
         40:7d:18:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:37:44 2025 by rpki-client