Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b2ba44e-fd81-42fb-85ce-0e8a0c8d5c37.roa
File:                     6b2ba44e-fd81-42fb-85ce-0e8a0c8d5c37.roa (raw, json)
Hash identifier:          i7Zmbmy5hXc1ZMFPSwf6nZBrrXeA/ebYJp5vxXIfXd8=
Subject key identifier:   13:D9:6C:41:44:F2:18:61:E9:4E:18:D1:FD:FE:B1:EF:AD:85:61:B3
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       34EC2DCA611F5EE94AE192E48AAFD07A3D3CB222
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b2ba44e-fd81-42fb-85ce-0e8a0c8d5c37.roa
Signing time:             Wed 16 Jul 2025 00:00:57 +0000
ROA not before:           Wed 16 Jul 2025 00:00:57 +0000
ROA not after:            Wed 20 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        13.166.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:ec:2d:ca:61:1f:5e:e9:4a:e1:92:e4:8a:af:d0:7a:3d:3c:b2:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 16 00:00:57 2025 GMT
            Not After : Aug 20 23:59:59 2025 GMT
        Subject: serialNumber=8ca688eb88ecad92280b2b00d03f196e442845e709a5014103819bde68eeda51, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:45:4b:08:7e:f2:ac:f4:da:2b:50:50:35:b2:
                    64:a5:f4:6f:c5:fc:67:79:ff:e3:be:2a:70:c2:91:
                    7b:ef:d0:ed:be:ab:4a:08:52:79:17:c4:5a:09:48:
                    b9:aa:c0:0c:87:db:76:93:cd:2e:9a:19:d8:12:a8:
                    f3:83:41:a2:cd:24:a1:08:93:d6:57:a6:a9:d8:37:
                    f1:d0:c1:aa:f1:81:f7:16:13:05:f0:cf:9a:f7:9d:
                    0d:b7:b6:16:80:c9:76:c2:3f:73:c1:65:f7:a2:c8:
                    b6:51:99:8a:b5:6d:d1:4c:a8:48:19:b4:17:25:9f:
                    77:e2:bd:0a:47:c0:6c:c5:45:31:1f:da:5c:38:d0:
                    e4:85:57:4b:d4:f7:42:2f:96:52:32:33:83:ec:e4:
                    7a:05:b9:f0:ec:c6:51:b1:65:e8:ce:ac:c2:95:4f:
                    b7:da:0c:c2:1e:f2:11:ed:5c:0b:ad:20:56:fa:d3:
                    03:ae:1f:f1:6d:23:d1:d2:a8:b9:4c:a6:1f:58:27:
                    6b:df:19:52:ad:86:81:47:b9:78:33:7e:5e:6d:10:
                    40:24:38:53:0c:40:88:06:1b:a5:cf:8a:10:9c:0b:
                    da:dd:e2:8c:65:31:43:c1:e4:ec:57:95:e9:20:03:
                    59:92:3e:b9:70:ef:18:df:4e:43:7b:3b:66:51:3d:
                    28:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:D9:6C:41:44:F2:18:61:E9:4E:18:D1:FD:FE:B1:EF:AD:85:61:B3
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b2ba44e-fd81-42fb-85ce-0e8a0c8d5c37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.166.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         2d:33:a9:96:dc:c5:d3:c1:6b:b5:27:5f:d0:ae:f7:2b:62:e6:
         1e:f5:78:59:44:4d:de:4c:0b:09:79:df:c7:8c:5a:05:29:65:
         00:ab:91:6d:7a:81:56:09:04:60:9d:73:57:81:ea:41:72:20:
         0c:cc:77:26:87:86:93:bb:11:d4:61:f6:47:67:d8:b4:e2:37:
         a1:6b:b2:8e:cd:08:26:9a:c4:db:a6:61:61:49:e8:fd:b5:de:
         95:e1:24:0c:1b:50:41:07:a2:2e:d1:58:91:2b:7a:3f:6d:c5:
         1f:37:b1:ff:13:83:6b:fd:aa:38:3d:98:ce:3b:04:59:9f:cb:
         6a:ba:80:37:2b:aa:a4:62:ea:d6:4a:d9:da:fa:2c:d3:f7:7f:
         c5:8a:a7:d9:e8:95:62:13:22:75:4d:d9:1a:f2:c7:19:16:c7:
         41:4b:af:60:52:d2:8f:ce:0c:38:bc:7e:3e:34:b9:01:9e:1b:
         84:8a:04:5b:c1:05:84:39:5c:71:47:df:cf:c8:74:bf:1f:95:
         8e:31:8a:9b:ea:f6:48:1a:46:11:a8:61:5b:d8:39:fa:a8:5f:
         ec:8d:9c:ec:60:7c:dd:5b:0f:67:2e:75:0a:49:d1:32:1a:b1:
         37:92:0c:bc:6d:4b:58:3d:8e:17:a0:df:11:aa:35:c9:b1:0f:
         53:17:0f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 21:52:46 2025 by rpki-client