Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94513e26-aa15-4586-bd55-6b68d61713d8.roa
File:                     94513e26-aa15-4586-bd55-6b68d61713d8.roa (raw, json)
Hash identifier:          TAfDH/emc85myUYfav3xBKS5LNGvJYDqeZxv2wXjy4g=
Subject key identifier:   79:FB:6E:09:07:2C:96:3A:AA:6F:7E:82:11:B2:A7:EF:E2:63:2C:BD
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0A9399F04617172008589E5F2923CB6E88FBFAF0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94513e26-aa15-4586-bd55-6b68d61713d8.roa
Signing time:             Mon 04 Aug 2025 15:31:24 +0000
ROA not before:           Mon 04 Aug 2025 15:31:24 +0000
ROA not after:            Mon 08 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        162.222.148.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:93:99:f0:46:17:17:20:08:58:9e:5f:29:23:cb:6e:88:fb:fa:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  4 15:31:24 2025 GMT
            Not After : Sep  8 23:59:59 2025 GMT
        Subject: serialNumber=ce8ffa9f6ecc8ee990343f37800986be863392cce5b21a20d48d5a91996de719, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:77:30:3c:6a:22:48:87:b5:1a:59:6e:11:0d:
                    95:96:a6:04:18:ab:ac:10:b4:8d:01:0c:74:34:5f:
                    99:60:94:be:93:d3:0a:a3:d6:01:df:6f:41:43:24:
                    c2:3d:8b:33:aa:cd:08:4e:42:bb:e1:9d:dd:4f:03:
                    3a:78:c1:70:a3:12:ba:ba:9e:63:9c:2b:76:1c:b1:
                    43:d2:1d:74:fd:ea:03:20:a9:9e:c2:82:44:0b:a2:
                    16:18:25:97:78:cc:64:22:55:73:d8:6e:e9:ab:4f:
                    49:86:58:b0:e5:be:8e:81:e4:97:da:5a:7f:00:cd:
                    68:d4:a4:44:60:87:38:f5:e0:a9:b3:f6:6c:00:a6:
                    07:98:a4:e0:db:26:30:b7:22:b5:c2:80:71:ea:50:
                    9d:af:7f:cb:d4:f1:1a:e6:67:f2:07:b2:ee:cc:5d:
                    94:f4:54:e7:13:94:53:e0:97:b7:6d:23:4d:26:a1:
                    01:8d:71:49:5d:d6:6b:a6:fb:2e:2f:02:fc:8b:d0:
                    18:9c:ae:88:7e:3d:ef:6e:e2:02:12:7b:84:2e:46:
                    cf:f6:1c:e3:97:7f:46:2a:83:33:12:c6:12:57:b4:
                    b0:36:3a:3f:fa:bc:41:74:7c:04:6e:5b:b0:e2:1b:
                    87:16:6b:62:88:dc:07:f2:ec:e0:f2:56:81:cf:15:
                    d5:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:FB:6E:09:07:2C:96:3A:AA:6F:7E:82:11:B2:A7:EF:E2:63:2C:BD
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94513e26-aa15-4586-bd55-6b68d61713d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.222.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:cf:05:44:5a:95:4b:0d:62:c7:80:be:ea:cd:2c:75:a5:e1:
         be:29:45:71:04:39:77:c5:33:6e:a6:ba:d3:6d:8e:9d:2b:dd:
         4d:6b:c0:a3:9d:ca:a9:16:d5:09:63:92:ce:03:c1:f6:ef:b6:
         15:a4:42:cf:c3:dc:50:fe:07:ed:75:90:fd:a4:75:07:3a:31:
         36:62:57:46:70:78:ec:0b:f8:e8:ba:3e:b6:97:dd:e7:67:dc:
         e7:83:a6:35:6a:b4:19:e2:8c:91:40:58:c5:bd:08:39:32:d3:
         7d:66:37:a1:7f:0b:0c:c5:e3:78:8b:0d:1a:98:38:ca:03:c7:
         ee:80:85:cd:68:fd:b2:b1:03:fd:bc:ed:ba:90:19:da:a6:4d:
         9a:0a:6d:38:da:0e:55:59:f7:e5:7c:f4:f2:fe:68:5d:05:51:
         0a:58:40:f6:af:b2:5f:5a:4b:dd:96:21:06:e9:aa:e4:f7:0f:
         3b:9a:d7:c9:20:db:9f:4e:87:c6:43:6a:df:e7:46:ad:c1:63:
         21:3d:fd:7d:34:7d:04:b0:91:77:4e:42:9d:81:5b:cc:b3:a6:
         5b:f6:59:f5:11:da:5d:0c:6f:61:80:8a:08:eb:db:c0:cc:be:
         06:64:28:f1:a8:f5:3b:e0:c4:99:f6:e4:6c:c3:5a:06:2f:85:
         14:87:bc:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:47:54 2025 by rpki-client