Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e7b2c2e7-de4d-4255-9797-e8c7f644bc96.roa
File:                     e7b2c2e7-de4d-4255-9797-e8c7f644bc96.roa (raw, json)
Hash identifier:          9mTBELwwtk/8EBLFjBvz4xHpVYxrWlSazjts+fqe+fs=
Subject key identifier:   27:3F:80:FE:B2:89:89:16:03:92:EA:CE:DB:2E:4C:06:0E:4A:3A:66
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4BB6934AF6335BCA10BCA0BD2EAFB4596F17E0DE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e7b2c2e7-de4d-4255-9797-e8c7f644bc96.roa
Signing time:             Tue 05 Aug 2025 00:40:26 +0000
ROA not before:           Tue 05 Aug 2025 00:40:26 +0000
ROA not after:            Tue 09 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        56.84.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:b6:93:4a:f6:33:5b:ca:10:bc:a0:bd:2e:af:b4:59:6f:17:e0:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  5 00:40:26 2025 GMT
            Not After : Sep  9 23:59:59 2025 GMT
        Subject: serialNumber=e1f8fa531fe0fe33d886c4d8c896661e4c39505559330af1048dce45ba151890, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8a:bc:9c:57:c9:44:7d:5f:20:5f:86:6d:27:
                    cc:de:eb:1f:66:b4:fd:83:4f:7b:5f:7d:98:f5:8f:
                    7b:ad:92:4f:ca:7c:39:f7:8f:36:59:b6:a6:5f:c7:
                    10:49:19:f9:54:f4:f6:a7:5d:72:27:b2:f6:38:51:
                    69:6b:64:30:e1:6c:ad:36:14:b4:fe:c9:f5:55:67:
                    d0:d0:95:af:7d:91:fc:88:8c:db:42:ca:77:b0:87:
                    5b:18:dc:32:3c:77:9e:2e:4e:ed:97:a8:67:91:0e:
                    e8:21:6e:5d:a2:27:b6:46:43:e2:15:61:e2:99:0f:
                    ed:16:b7:39:a3:f6:4a:4d:d8:e8:15:93:40:d7:fe:
                    73:8c:27:ca:5a:7c:30:c9:ac:2c:2c:25:e7:42:46:
                    ff:74:80:86:96:5c:08:56:52:eb:21:bb:18:2d:62:
                    27:2f:2a:21:0a:3f:fd:49:a3:28:be:fc:a8:23:76:
                    b7:90:2c:43:6b:8a:75:99:6b:5d:b0:5d:a5:7b:55:
                    aa:05:d8:c7:be:33:7f:c4:76:09:8e:59:17:ff:59:
                    97:75:11:61:3e:15:02:ac:7e:ea:a7:36:a6:d3:41:
                    e6:9a:5d:96:cd:b3:2d:1b:8e:33:60:c6:06:82:20:
                    dc:7c:55:c2:8d:c1:7a:88:ea:51:b3:30:57:ab:a7:
                    0d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:3F:80:FE:B2:89:89:16:03:92:EA:CE:DB:2E:4C:06:0E:4A:3A:66
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e7b2c2e7-de4d-4255-9797-e8c7f644bc96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.84.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4f:d0:09:b2:2a:7e:48:1f:d7:b4:62:b3:a9:c2:8b:ea:de:76:
         21:43:c6:b3:fe:b1:bc:a9:c2:2c:0f:ac:51:18:52:3c:f9:ca:
         35:b8:09:bc:37:42:0b:a1:bb:8d:e7:4a:5d:24:42:c2:29:1b:
         ac:17:0c:b6:d2:a1:33:db:01:30:ca:fc:de:2b:94:1a:f7:13:
         49:51:c3:0a:67:af:0f:e4:2f:a2:f7:0e:42:c6:9e:17:0f:a2:
         05:bd:d7:65:cf:bb:b5:1f:f0:37:1e:74:61:9c:47:b9:c5:fa:
         eb:37:82:ed:4a:4c:7f:62:e5:6a:f7:36:4d:6c:8c:59:a5:44:
         ae:55:85:f9:97:4b:7b:5f:1d:82:31:c5:f6:11:ea:85:80:b5:
         e1:dd:56:4f:fa:dd:40:84:97:53:31:29:9f:bb:82:d5:1d:c0:
         72:f0:43:6c:5c:71:ea:8d:f0:7c:ac:0e:96:bc:d4:b2:3d:a7:
         c8:0f:ec:9b:e0:58:15:0d:4e:5d:de:5a:dd:1f:b7:7c:7f:b2:
         e9:8b:d3:f6:eb:3d:52:57:bd:e3:43:ff:fb:25:17:68:b1:27:
         e2:72:5c:cc:db:af:bc:9e:a9:a2:9c:38:0d:74:d8:53:41:9d:
         dd:86:d3:92:59:32:ca:07:f9:d9:4e:75:d5:51:24:fa:ca:42:
         0b:73:41:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:09:47 2025 by rpki-client