Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/75da3273-1141-407e-8be6-2c12ada7102b.roa
File:                     75da3273-1141-407e-8be6-2c12ada7102b.roa (raw, json)
Hash identifier:          s/6tpOaKGBGvba/of/Bfl5Aq3rjYJBxBEInvRTEIYQM=
Subject key identifier:   E6:54:1E:53:DC:46:CF:DD:AD:C7:67:03:EB:FD:B0:FC:9E:81:70:4B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       147ED0BD3BB77783DDB2D7A181C81DEF2EAC4DED
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/75da3273-1141-407e-8be6-2c12ada7102b.roa
Signing time:             Tue 05 Aug 2025 00:50:35 +0000
ROA not before:           Tue 05 Aug 2025 00:50:35 +0000
ROA not after:            Tue 09 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        82.176.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:7e:d0:bd:3b:b7:77:83:dd:b2:d7:a1:81:c8:1d:ef:2e:ac:4d:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  5 00:50:35 2025 GMT
            Not After : Sep  9 23:59:59 2025 GMT
        Subject: serialNumber=8c4f78d313be5b06cc21c85ae11f627a7be82a8bf47f98a1aa720c431677717f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:02:d6:82:e9:bf:b3:e0:0f:9f:12:fc:8d:02:
                    85:0c:f8:33:c8:af:ad:29:a3:06:3f:02:ba:78:81:
                    69:b1:9b:b3:cd:3e:16:6e:0c:ea:96:f3:1c:8a:1b:
                    77:58:be:c7:dd:e1:72:ba:cd:28:e0:16:1b:7c:2f:
                    36:86:aa:d3:87:50:6f:fe:cd:4e:4e:0c:bc:b8:08:
                    bb:d4:47:4d:73:5c:2e:b3:2f:17:8d:d4:cc:df:f5:
                    94:27:a2:19:c8:07:1f:ed:30:75:cc:d0:da:83:1e:
                    39:e4:cf:df:fb:06:e3:86:9b:1d:e6:c6:c5:d2:44:
                    19:54:ef:cd:f4:73:d7:e0:a6:ea:8a:fe:da:2d:c9:
                    ba:f5:b1:33:7d:d9:6b:7d:99:24:2e:3e:29:ff:4b:
                    6b:cc:53:e0:b8:25:df:2e:ab:63:82:58:32:21:b2:
                    ac:a8:c3:86:3f:de:09:9a:bd:b1:ca:15:16:3a:cb:
                    44:ed:28:75:74:6f:12:7c:bb:fd:b0:09:26:d1:68:
                    49:a4:ee:a7:78:e4:8e:d0:ba:01:4d:96:cf:a3:65:
                    a1:d3:83:4e:9b:4e:22:a4:1b:68:8b:cf:ab:84:38:
                    85:eb:84:d6:e7:1c:76:bf:50:6d:cb:e0:36:c1:06:
                    08:8a:08:87:24:6c:95:30:14:9b:f4:97:27:d9:c1:
                    7a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:54:1E:53:DC:46:CF:DD:AD:C7:67:03:EB:FD:B0:FC:9E:81:70:4B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/75da3273-1141-407e-8be6-2c12ada7102b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.176.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         57:fa:ab:87:48:9a:69:4e:3b:2b:17:da:26:be:04:21:83:69:
         72:c3:f8:3e:9b:4c:56:15:22:af:1d:68:06:0d:68:f1:4f:49:
         57:17:7a:ab:8b:44:ba:98:9c:b2:c6:f9:86:5c:11:ee:2f:7a:
         9c:d5:a7:1c:51:40:d0:33:12:0c:73:c5:04:59:f5:8d:6d:ad:
         57:a0:15:26:7e:64:98:a9:f3:e6:f3:e8:4f:c4:8c:5c:34:f4:
         8e:6f:75:2d:29:bb:30:72:eb:d9:1f:24:0a:79:35:fe:f2:d1:
         36:66:76:67:f2:51:32:80:15:bc:a2:09:e7:3b:a5:ec:b3:ae:
         1f:ba:79:ae:cd:ef:a0:c5:ef:cd:27:47:7e:ac:4f:b6:e7:93:
         23:1b:ce:44:fe:a0:21:45:ae:50:8b:fc:4b:ee:5f:a3:92:fa:
         bd:76:cf:38:4a:e6:5f:ec:9b:34:96:ed:54:1c:e4:e5:13:9d:
         9e:f0:5c:b8:fc:89:e1:2d:ab:8c:16:fb:e9:6b:a7:91:49:1e:
         21:7e:df:2c:78:18:4d:86:40:4e:3c:8f:40:46:fe:f7:89:3b:
         bd:2f:d2:86:c7:0b:f7:f6:76:21:32:fb:dc:51:18:1a:2a:18:
         d6:83:ce:ed:b9:53:b4:83:38:0e:15:27:62:fc:5a:22:81:e7:
         27:8e:4d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:18:51 2025 by rpki-client