Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a51c6524-05cd-4515-90ee-87b113d6ce7d.roa
File:                     a51c6524-05cd-4515-90ee-87b113d6ce7d.roa (raw, json)
Hash identifier:          6jnZWb71lto618R/FP4WhC0g5Uhk2IEq08lKbF6GoIE=
Subject key identifier:   5C:EC:38:14:9D:5D:B3:61:CE:64:6B:BE:28:6C:E4:50:F7:B5:49:BB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6631F2AB441ECC0563DE24C8D110BAE44653870B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a51c6524-05cd-4515-90ee-87b113d6ce7d.roa
Signing time:             Fri 13 Jun 2025 16:01:49 +0000
ROA not before:           Fri 13 Jun 2025 16:01:49 +0000
ROA not after:            Fri 18 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        146.77.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:31:f2:ab:44:1e:cc:05:63:de:24:c8:d1:10:ba:e4:46:53:87:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 13 16:01:49 2025 GMT
            Not After : Jul 18 23:59:59 2025 GMT
        Subject: serialNumber=ac68d222051d033ead76ecfa61f232b1680b6bf9035f71d20608a7669db9cdd1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a5:40:2c:86:d3:01:19:c9:c0:be:c6:fe:61:
                    27:6a:e3:3c:64:71:e4:5a:29:86:44:ab:22:85:56:
                    2e:27:34:3b:c3:48:4e:69:e3:b4:7f:c3:51:e4:09:
                    43:91:a1:67:54:92:d8:56:f0:27:eb:f5:30:4e:bc:
                    e7:bf:20:83:29:b2:46:5d:79:42:f4:bc:a5:1c:84:
                    7c:bf:67:5c:59:60:4b:f9:63:50:0e:8e:b4:fa:f1:
                    e0:6f:48:e5:e8:0e:05:b5:dd:0c:84:14:b1:8f:dc:
                    8d:74:2b:55:c1:ac:50:78:d5:db:ec:c5:e0:7e:08:
                    06:e2:0b:16:c0:23:6a:30:5d:bd:07:f6:d3:96:fb:
                    87:13:0c:26:eb:62:0d:7f:03:6e:6b:2b:f5:16:26:
                    ff:ee:31:97:71:4d:8f:89:9c:de:56:4b:b7:9f:03:
                    90:9a:44:63:ae:91:cc:76:f3:ea:d8:ad:5d:8b:2a:
                    3a:d7:99:ee:9f:ee:d1:54:8a:0f:c7:b6:97:6d:63:
                    6c:02:e8:d7:60:eb:3e:ba:82:ad:b8:81:15:00:b9:
                    60:13:a9:94:6c:61:ec:52:03:a9:8f:e5:1f:c9:bc:
                    d1:21:fe:67:24:a9:98:3f:4e:a2:29:24:d4:b4:82:
                    f6:cd:2a:b4:87:22:bf:e2:93:b3:64:e2:7e:16:ae:
                    78:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:EC:38:14:9D:5D:B3:61:CE:64:6B:BE:28:6C:E4:50:F7:B5:49:BB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a51c6524-05cd-4515-90ee-87b113d6ce7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.77.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3d:a2:06:2b:51:a1:87:02:64:d9:a4:09:75:e6:08:f7:92:c8:
         2f:ef:15:d3:79:0d:29:d8:07:67:f1:56:45:02:12:10:dd:92:
         fd:92:24:5a:79:d6:1f:27:01:60:51:bc:11:aa:23:33:b0:5a:
         41:25:eb:8e:83:3a:9b:a4:8b:bc:cc:aa:72:21:e3:85:7d:62:
         1f:d1:b8:ae:5c:3d:4d:41:a7:89:84:2e:8e:6b:44:6e:16:e2:
         04:12:dd:ff:ea:6e:b5:fc:ad:0f:50:5b:0d:a6:66:27:9f:a2:
         00:b4:d8:54:0e:42:0c:2b:b3:62:f0:f4:19:1b:c3:36:22:84:
         f2:46:e7:67:a6:df:a5:06:7a:73:bc:71:5e:6e:c5:b8:71:fd:
         f7:66:78:b4:21:ed:74:a0:c6:88:2c:9a:0b:f7:fc:62:8a:a3:
         b8:68:e3:47:47:2e:72:1d:97:d9:8e:ff:8c:f2:5f:68:83:79:
         09:6e:4e:33:fa:8d:6f:8c:88:5b:23:24:3d:60:e4:be:c2:8f:
         88:27:8d:b0:b4:0e:e7:ce:fb:89:c0:87:b7:5f:3a:b3:b1:67:
         b2:02:36:e9:f6:7c:f8:8e:4b:e6:99:78:12:c7:eb:56:81:e2:
         cf:42:c3:4a:0d:31:7c:72:17:33:18:56:d2:60:e0:83:36:e9:
         ab:1c:7e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 07:02:54 2025 by rpki-client