Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da94c098-b098-48ba-b22f-f15736f15d14.roa
File:                     da94c098-b098-48ba-b22f-f15736f15d14.roa (raw, json)
Hash identifier:          V/ox46UruxXCIFB48NhiZ2WNVTnlnR2ZcR6ZuXaNREk=
Subject key identifier:   51:AC:F7:15:5D:DC:29:6F:DA:D6:B1:58:EE:53:20:30:5D:B3:CA:CC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7D8B7D591B07A235A307DB730B9DEE2DBA6AB859
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da94c098-b098-48ba-b22f-f15736f15d14.roa
Signing time:             Fri 13 Jun 2025 15:01:01 +0000
ROA not before:           Fri 13 Jun 2025 15:01:01 +0000
ROA not after:            Fri 18 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        1.178.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:8b:7d:59:1b:07:a2:35:a3:07:db:73:0b:9d:ee:2d:ba:6a:b8:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 13 15:01:01 2025 GMT
            Not After : Jul 18 23:59:59 2025 GMT
        Subject: serialNumber=eea90ba1b0f9693edec388ca056b06ea6634ed2ce65f0ec04d032c43109dc296, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:5c:52:14:a2:59:1c:b3:0a:73:15:95:ad:f5:
                    d6:65:d0:81:c3:85:53:c7:31:36:78:91:cd:11:d0:
                    43:02:08:02:8d:81:51:9b:8a:a9:a5:4a:86:18:78:
                    90:11:4e:fd:86:f5:a2:b1:a9:e3:98:5f:b2:bc:b0:
                    db:27:71:d8:0e:6d:ca:0a:4a:cf:83:b5:25:b3:85:
                    de:44:11:b5:94:8d:ea:86:a8:fe:36:2c:c2:6d:c3:
                    82:74:cd:1f:65:16:4d:d7:a5:59:12:a4:f1:e1:01:
                    ea:f1:35:5a:8f:78:f4:dc:81:0e:30:2f:5e:ac:6c:
                    99:6a:26:87:ff:46:89:a7:17:31:ee:2e:73:9d:be:
                    1c:38:b3:fa:a9:6d:37:e3:79:5a:9f:ac:ed:bd:d0:
                    83:7a:8b:91:22:ae:e5:6a:e1:ee:b6:12:a9:2d:42:
                    64:94:86:c0:25:55:8a:49:a9:42:29:26:f4:13:c4:
                    a9:bb:02:78:0e:25:ef:4b:bc:5f:ff:10:3b:1c:42:
                    ae:fc:ff:74:23:89:88:91:0f:34:b3:c8:a0:e3:55:
                    c3:7b:d7:19:43:57:d0:82:4d:3b:33:e3:e4:ef:c8:
                    47:7a:f7:92:f8:d7:a4:0b:aa:77:2c:f5:81:93:f4:
                    5a:3d:90:6b:91:57:6c:23:f0:27:53:80:6e:e0:cc:
                    ac:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:AC:F7:15:5D:DC:29:6F:DA:D6:B1:58:EE:53:20:30:5D:B3:CA:CC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da94c098-b098-48ba-b22f-f15736f15d14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.178.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:64:36:15:bf:0e:03:4a:61:bb:18:75:82:74:e2:b4:53:da:
         e1:28:51:7e:a5:33:69:75:3c:6b:19:cb:b3:6b:a2:b7:41:be:
         34:0a:d9:bd:26:e7:69:84:c5:28:35:46:6e:6d:60:87:0c:34:
         b9:f1:48:67:78:d7:b0:0d:bf:b7:f7:10:58:c8:01:f8:26:4e:
         d7:87:d1:c7:6d:d5:2e:48:43:64:9b:c5:04:90:1b:61:83:e5:
         08:1f:aa:37:24:0d:d1:67:04:4b:9d:83:85:0d:78:8f:78:28:
         3b:82:ee:ea:49:c5:2a:5c:a4:a6:39:fe:9d:88:ac:8a:5e:44:
         a3:71:37:24:af:9f:44:88:17:a8:d5:46:79:3a:14:af:b1:84:
         09:5b:3d:65:a4:1d:55:e4:c4:72:27:12:8f:3b:ac:a2:e7:34:
         c2:77:91:b2:e6:a3:a9:6d:5e:78:c9:98:05:25:29:3a:ce:34:
         06:85:fc:d1:91:99:4b:8f:d4:3b:05:b2:f0:e7:cd:44:c3:13:
         7f:d1:5b:f8:e7:12:3f:c7:de:01:e1:89:c1:da:40:81:0d:31:
         25:84:dc:64:78:e5:54:55:c4:2c:b6:45:5a:be:a6:4b:3b:e4:
         ad:0a:69:34:54:69:df:55:f0:55:37:b6:3a:f0:a7:54:88:ba:
         1e:26:25:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:32:20 2025 by rpki-client