Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/96775b6e-d2c7-45b1-b153-6189276f8a53.roa
File:                     96775b6e-d2c7-45b1-b153-6189276f8a53.roa (raw, json)
Hash identifier:          WRAFOs7DSqlrSyJ16/c3W/LoJ+Ir4EvVk5C9iyPwNs8=
Subject key identifier:   5B:98:DE:4E:31:AE:EE:45:9C:3F:9E:24:8E:C2:EE:33:33:DB:BE:71
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       428FB8A40EA00924452A32A3AF9F745329A194C5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/96775b6e-d2c7-45b1-b153-6189276f8a53.roa
Signing time:             Tue 03 Jun 2025 00:11:05 +0000
ROA not before:           Tue 03 Jun 2025 00:11:05 +0000
ROA not after:            Tue 08 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        184.73.152.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:8f:b8:a4:0e:a0:09:24:45:2a:32:a3:af:9f:74:53:29:a1:94:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun  3 00:11:05 2025 GMT
            Not After : Jul  8 23:59:59 2025 GMT
        Subject: serialNumber=ce52e9c08eef9fe0a2c44c17464e6a732f4e644910f8430b2f065aed3eede3bc, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:97:e1:05:49:54:df:55:3f:18:df:ba:4a:cc:
                    d2:61:c2:41:19:c9:63:f7:a3:ac:9f:28:e4:f2:ed:
                    ca:59:1f:c1:39:60:16:90:0b:61:e4:f2:e2:71:89:
                    c3:91:4d:31:6f:1a:28:0e:3c:3b:c9:bc:24:19:4b:
                    d7:79:2d:29:72:09:4d:03:91:ca:38:dd:44:41:d1:
                    ec:3c:db:5b:c3:44:54:9e:5a:e0:9f:bb:ad:3e:78:
                    3d:8f:b7:2c:24:24:f0:98:c8:7b:34:27:18:dc:0f:
                    6d:08:f7:ca:d0:db:02:ab:8f:f2:0b:b2:23:ee:f2:
                    5d:52:5a:ac:65:05:29:31:4e:f6:a4:34:9d:85:89:
                    b3:3b:52:ac:c7:90:11:bd:9b:e1:56:18:2e:7b:33:
                    d8:ba:9d:df:fd:57:cb:0f:25:e6:15:c4:60:f9:7b:
                    ac:47:31:20:c8:2c:d0:32:e5:10:88:bc:f8:93:76:
                    8e:58:6c:c8:a4:da:30:78:b3:dc:07:d3:c8:4a:0c:
                    ea:c2:fe:b4:cf:02:e0:14:4b:89:07:90:b2:36:3a:
                    b7:f0:03:9f:09:f2:2b:13:88:9f:6f:38:4a:18:37:
                    50:9e:bd:be:d9:ff:ab:e8:5e:c0:d4:0c:0d:a3:21:
                    85:a4:8f:31:33:4a:2f:f9:aa:92:fb:ed:c5:5a:45:
                    24:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:98:DE:4E:31:AE:EE:45:9C:3F:9E:24:8E:C2:EE:33:33:DB:BE:71
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/96775b6e-d2c7-45b1-b153-6189276f8a53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.73.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7e:c0:a1:6c:ca:c4:a5:48:07:75:2c:03:ec:ec:d2:1e:ec:67:
         9f:df:f7:60:28:03:ae:d7:fd:b0:ff:11:a2:7a:a6:4e:9c:75:
         11:f9:8a:00:39:f4:1c:60:e4:75:e6:b4:1b:03:85:93:a6:2f:
         b6:55:4e:74:9b:18:bf:35:82:b2:36:60:61:55:76:fb:cb:82:
         36:e2:99:df:60:f2:f3:92:73:87:89:fa:8a:e2:b2:e6:29:c2:
         1c:a8:cc:8d:70:28:3c:8e:40:76:86:57:d8:39:8e:da:a0:22:
         e8:86:1e:fd:f6:cc:00:a9:61:e9:c6:21:1d:d9:21:68:7e:14:
         ab:dd:a2:c7:89:ea:44:ca:65:fb:c3:d4:f6:e3:57:9b:92:2c:
         cd:1f:98:04:e0:62:23:ed:2d:da:b5:c1:a3:db:d2:df:15:ed:
         32:dc:ae:5a:9a:04:af:ea:59:ae:0c:70:d6:42:0c:b9:e3:e4:
         49:1c:c4:2c:23:b9:fd:14:76:05:8d:5e:12:a1:cf:d4:f5:10:
         3d:6a:20:eb:85:51:73:3b:5a:29:b9:fe:43:95:91:5d:94:06:
         18:15:c3:15:7c:06:42:c6:1d:5d:fc:51:52:ac:27:f8:2f:39:
         5b:ad:c9:8a:a3:ef:2c:b2:97:53:f6:90:69:0c:eb:39:e3:2c:
         e1:ea:6d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:49:03 2025 by rpki-client