Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e55c985-9370-45ae-94ef-029873555580.roa
File:                     6e55c985-9370-45ae-94ef-029873555580.roa (raw, json)
Hash identifier:          56ztPFENmix/W9YdUgg1z9HITFJgKkuPuVo7KHa340c=
Subject key identifier:   F5:CC:0D:97:D1:1E:96:D2:31:0D:A1:B0:CE:E0:EF:5A:2F:2D:81:72
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       742B8A24D4CB2F9F84B0C47EE581E963049F1B79
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e55c985-9370-45ae-94ef-029873555580.roa
Signing time:             Wed 06 Aug 2025 06:07:57 +0000
ROA not before:           Wed 06 Aug 2025 06:07:57 +0000
ROA not after:            Wed 10 Sep 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        40.238.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:2b:8a:24:d4:cb:2f:9f:84:b0:c4:7e:e5:81:e9:63:04:9f:1b:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  6 06:07:57 2025 GMT
            Not After : Sep 10 23:59:59 2025 GMT
        Subject: serialNumber=5e07349bd9ceae567bbfaaa3424c75df2099451875991ed6479b4b628a612c84, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fc:73:5b:e8:0d:5d:0d:c6:c7:f8:f7:4b:c7:
                    67:cf:08:14:9d:83:26:65:57:5d:1a:e4:78:6f:0d:
                    4c:6d:6c:25:80:34:55:d9:bf:76:62:5e:2b:f9:47:
                    fa:ba:a3:dc:0a:03:92:bb:0f:b6:87:72:a8:52:4b:
                    b4:ed:3c:fe:bc:7e:0f:e0:46:43:72:ac:17:0a:3c:
                    c8:95:3f:31:f5:9b:63:06:75:c6:e2:69:57:45:6c:
                    03:62:39:30:1a:b5:82:3f:9a:74:9c:76:76:65:d1:
                    9d:fd:6f:8f:2a:e1:0a:56:56:24:96:48:91:60:6f:
                    50:4b:90:1a:cf:96:e4:3f:f5:51:31:af:3d:7a:37:
                    a0:19:90:dc:c4:fe:84:ec:b5:dd:93:ef:ca:05:8c:
                    99:73:94:98:ea:44:97:c3:44:97:76:5d:f5:f1:5c:
                    d1:66:85:5e:20:44:8a:64:00:9c:e0:81:b1:f0:a6:
                    86:70:ae:d6:d1:f0:07:3e:a9:94:10:1c:93:a6:e4:
                    3c:a1:7d:50:d2:2f:5b:fd:fc:14:4a:0b:23:df:16:
                    b3:8a:ba:10:a7:e6:cc:32:d5:c2:c7:02:90:b7:9b:
                    70:c3:e3:c4:fb:1b:54:89:ac:f9:0d:a5:96:25:9a:
                    4f:3a:4a:75:76:47:10:bc:9e:43:36:bd:1e:bf:fe:
                    03:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:CC:0D:97:D1:1E:96:D2:31:0D:A1:B0:CE:E0:EF:5A:2F:2D:81:72
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e55c985-9370-45ae-94ef-029873555580.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.238.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         57:b9:e8:b9:24:52:97:8c:b1:bd:7a:7f:54:ea:ef:7c:ef:14:
         d7:b7:78:45:36:b4:32:14:93:60:f0:d8:c0:c7:7c:49:55:6d:
         10:7b:48:76:ab:1e:e0:8a:8e:07:6d:24:bb:98:27:76:3a:fd:
         06:6c:7f:8f:32:93:a2:4f:52:0b:52:4b:5c:47:67:3f:70:24:
         bd:50:23:ce:79:1a:6f:08:37:89:a3:e5:ba:ed:d1:68:fe:af:
         92:b6:43:d7:ca:ff:07:79:20:a9:53:f6:1e:0b:36:84:45:ff:
         54:9b:99:61:4e:31:81:61:40:45:97:03:11:86:63:c3:5d:9e:
         26:9e:41:4c:d5:8d:e2:e2:f3:6b:5b:8c:a6:ca:21:28:0b:2c:
         ad:de:28:4f:c3:89:59:a4:6b:ba:fd:31:c0:e3:98:97:15:11:
         5b:d9:60:3d:9e:43:c1:bb:ea:97:0c:6f:3d:97:f4:24:2c:05:
         9d:dd:80:2a:65:db:70:cf:b3:49:f1:7f:b1:0e:19:68:74:8c:
         51:e5:87:b9:b3:0f:49:fe:f1:19:21:e1:99:15:fc:e9:f0:fb:
         67:c1:5d:5d:2e:e8:0a:77:e6:48:df:18:67:1c:03:26:0f:a9:
         f0:ab:cc:ae:35:c4:5f:95:81:0f:28:72:5c:c2:c9:b3:b3:81:
         11:f0:7c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:13:56 2025 by rpki-client