Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8f52c4e0-4179-48c8-90f5-2aa2db4bb0d9.roa
File:                     8f52c4e0-4179-48c8-90f5-2aa2db4bb0d9.roa (raw, json)
Hash identifier:          OMLHxxt7GkjrqaW6sehmrWcXrE0Zo/HjKKDHCSoZ5XE=
Subject key identifier:   EF:FC:42:9B:80:7E:59:A2:7B:E9:AE:0A:C6:81:78:CC:EE:03:36:58
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2F4A96D5476DE7F7B0F076105DC68B94F6945A34
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8f52c4e0-4179-48c8-90f5-2aa2db4bb0d9.roa
Signing time:             Sat 19 Jul 2025 00:21:52 +0000
ROA not before:           Sat 19 Jul 2025 00:21:52 +0000
ROA not after:            Sat 23 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.113.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:4a:96:d5:47:6d:e7:f7:b0:f0:76:10:5d:c6:8b:94:f6:94:5a:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 19 00:21:52 2025 GMT
            Not After : Aug 23 23:59:59 2025 GMT
        Subject: serialNumber=f86bbe7c7ffcba5588f2ed21e994bb9ac12e558f77337427da6934db0af9d73a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:8f:2b:49:da:db:ab:9d:6a:56:94:2c:fa:a1:
                    67:08:90:d7:5e:6d:96:31:91:6d:73:75:58:c8:24:
                    b2:c1:41:c1:07:b8:10:d9:55:07:a8:76:ea:06:ae:
                    b9:cc:1d:b7:a5:04:a6:9b:80:2d:73:fa:3b:1f:1b:
                    49:b1:4e:89:58:f9:f4:b2:c2:10:52:12:01:91:07:
                    f4:c8:75:ac:54:1d:4d:2d:80:08:5b:1e:c7:2f:68:
                    30:ab:b7:87:0c:a7:1a:46:62:45:ae:28:a3:fa:8f:
                    0e:7a:42:f3:eb:21:cb:5a:4f:9c:21:b8:72:6c:b5:
                    08:f5:76:53:26:e4:34:12:a0:95:a6:ca:3c:a1:13:
                    dd:3e:ce:66:3f:c8:0a:25:56:c0:ea:72:b9:88:0f:
                    3b:6b:02:9b:cf:c8:c3:b0:96:51:1d:fe:3f:1e:2b:
                    3f:4d:9c:f5:cf:12:5b:77:6c:c1:ca:6c:a8:ff:be:
                    96:76:53:14:23:24:48:f1:0f:96:b2:fa:1e:cb:fb:
                    f3:ca:6f:3d:9c:86:25:d0:1a:36:f3:59:06:d4:8d:
                    47:c3:26:24:50:13:a2:12:9e:a7:15:f8:d3:39:68:
                    cb:58:2c:a7:23:0f:c5:61:a6:e2:c7:7e:e9:5d:c4:
                    62:42:f0:8c:5a:64:7e:ac:a9:19:94:c7:6a:41:2a:
                    c4:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:FC:42:9B:80:7E:59:A2:7B:E9:AE:0A:C6:81:78:CC:EE:03:36:58
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8f52c4e0-4179-48c8-90f5-2aa2db4bb0d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.113.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3a:6f:df:25:d4:22:0d:aa:75:80:1a:69:83:36:73:5c:9f:87:
         ec:79:02:81:8c:43:1e:2a:1f:9b:8a:01:0a:88:f5:55:af:a4:
         6b:27:0d:02:a7:ff:37:82:57:e9:56:88:8c:b9:f1:09:7f:a8:
         5d:cb:78:e3:51:ec:89:20:42:fe:c6:05:00:7f:eb:85:cb:d2:
         a1:de:ff:a3:36:27:25:ce:f8:7b:d6:cb:c0:d8:e7:f7:2d:56:
         fc:29:bc:43:9a:2c:19:d0:2e:02:38:4d:86:28:f8:62:c1:e2:
         64:d0:49:c8:2b:55:e7:ad:6b:88:7d:33:e9:5c:7b:82:9c:7e:
         46:c2:d5:cf:7a:ba:5f:5f:4e:a5:2b:42:b4:c8:2a:a4:db:9a:
         4a:af:a1:0e:97:bd:61:c8:42:ce:b5:7e:02:6e:b9:94:f0:11:
         91:e8:d1:26:ae:63:5f:0a:64:d6:08:58:70:66:95:f0:88:44:
         76:24:1d:8e:a3:74:81:98:82:09:6d:c3:bc:f8:43:a5:a8:12:
         79:73:c3:d4:55:1d:b5:c9:6a:93:f2:05:53:e7:59:b1:bb:ec:
         62:f2:c8:18:a5:a9:81:a8:cd:f5:9a:01:2c:a0:5c:c5:b9:70:
         05:ba:c5:d7:f1:0d:04:7e:4f:44:8f:eb:15:7c:81:23:07:7e:
         21:08:a1:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:17:33 2025 by rpki-client