Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e4274e13-b3eb-47ca-8f50-e130d402b187.roa
File:                     e4274e13-b3eb-47ca-8f50-e130d402b187.roa (raw, json)
Hash identifier:          17qhrscr1vtOJLpgYwX/EYbsFa10ang6SDdo0I5D9zk=
Subject key identifier:   D6:83:10:75:5D:32:3E:F3:39:07:86:D7:1E:69:BB:30:BD:66:F5:3E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       20161491E56D7F2C44332ECD6F8DB6EE1DB0391C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e4274e13-b3eb-47ca-8f50-e130d402b187.roa
Signing time:             Fri 18 Jul 2025 00:32:00 +0000
ROA not before:           Fri 18 Jul 2025 00:32:00 +0000
ROA not after:            Fri 22 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        56.167.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:16:14:91:e5:6d:7f:2c:44:33:2e:cd:6f:8d:b6:ee:1d:b0:39:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 18 00:32:00 2025 GMT
            Not After : Aug 22 23:59:59 2025 GMT
        Subject: serialNumber=61e40dfb05aa766f62e3c862eb6ad48c972358259911cfcae0be89bd043587b8, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:fe:b8:12:55:42:e1:37:ab:6c:26:1f:66:0b:
                    47:61:08:8c:d1:86:91:f4:95:28:41:98:23:c3:81:
                    b9:02:35:9b:2b:bd:5a:52:5f:03:77:ce:a2:80:8b:
                    fa:73:fe:61:df:70:c9:f7:d6:a5:79:6a:78:97:cb:
                    c3:f8:eb:a0:b6:1c:b0:3d:f7:d8:b6:54:fe:04:b8:
                    68:ba:77:62:68:e8:21:c1:25:64:76:d4:45:53:2c:
                    d3:ef:b3:0b:42:8d:b8:91:d8:b5:55:eb:62:2f:63:
                    fd:b0:2b:71:48:1d:17:2b:d9:d8:94:5b:4d:91:5e:
                    19:e0:d8:88:4e:b7:ef:66:53:bd:9c:4a:a5:3a:26:
                    53:cc:e0:96:9d:91:86:a7:eb:55:0d:62:a2:d9:41:
                    d1:7d:00:66:75:6f:33:dd:ca:2e:d6:42:24:63:7f:
                    a7:38:e8:8d:3c:d2:12:21:f1:e0:66:5a:7c:2b:3e:
                    1f:f1:6f:88:a7:29:16:83:05:04:95:d1:30:c1:05:
                    f9:f7:e2:99:13:3e:a7:a8:d6:8c:a3:61:37:49:3d:
                    b8:d0:54:a7:c3:17:65:89:5a:52:bb:7a:2d:ff:ad:
                    71:95:54:b8:02:d7:36:50:30:c0:4f:89:96:e0:9f:
                    cd:7a:c3:b7:6d:7e:4d:b4:2c:20:4b:b7:8f:62:9b:
                    fd:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:83:10:75:5D:32:3E:F3:39:07:86:D7:1E:69:BB:30:BD:66:F5:3E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e4274e13-b3eb-47ca-8f50-e130d402b187.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.167.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5c:1b:2a:30:6b:25:7d:78:ea:c5:0a:5e:04:49:8d:0a:dc:0a:
         83:ed:5b:f8:67:76:c4:97:af:f9:7f:ca:7d:21:31:62:12:33:
         37:51:8c:12:c8:d9:e7:38:46:bd:81:8b:3e:59:33:8b:68:12:
         7b:bc:fe:1d:d0:04:d6:70:bc:f0:8e:d3:a4:63:a4:20:a4:1f:
         63:7e:19:98:ba:1a:33:29:7d:97:df:7c:81:4a:a2:60:e9:74:
         b6:19:f7:96:ba:65:fe:ed:6e:5e:c6:e7:46:48:b2:79:42:04:
         02:dd:c8:f4:e2:2b:9e:d0:89:7e:f2:f6:a6:6b:ec:a9:12:df:
         92:4e:65:51:22:f8:d9:58:1a:47:0f:e5:bf:73:4b:eb:08:5a:
         94:37:26:f2:da:33:8a:94:46:09:b6:00:15:09:84:fb:9d:63:
         81:28:75:bd:72:23:5f:62:a3:af:a6:8f:8c:ea:22:7f:0c:57:
         9c:50:a0:b8:04:b6:6e:3b:73:63:c6:01:1a:80:77:54:eb:53:
         22:2d:51:4c:13:b3:a7:e3:5b:d7:fd:ff:5a:34:be:f9:09:e3:
         98:8a:0f:49:06:b1:3f:44:9a:ad:60:4f:25:d9:89:47:cd:dc:
         b2:00:51:67:97:f1:14:52:b2:00:e9:96:e7:0e:6a:00:44:15:
         ce:6d:f1:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:48:35 2025 by rpki-client