Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9251918-220f-463e-a002-9fff11aface6.roa
File:                     e9251918-220f-463e-a002-9fff11aface6.roa (raw, json)
Hash identifier:          GYTxw+grmBCfabL8eOuRMQmPN038cGW8AyC373k5Wh0=
Subject key identifier:   25:5B:16:89:3B:2F:97:56:83:65:DB:EA:94:07:39:98:2A:85:7B:08
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       740E64408A3B5A48E03F7DDE3FE9FF84D2C6614F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9251918-220f-463e-a002-9fff11aface6.roa
Signing time:             Wed 06 Aug 2025 13:40:56 +0000
ROA not before:           Wed 06 Aug 2025 13:40:56 +0000
ROA not after:            Wed 10 Sep 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        63.184.0.0/13 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:0e:64:40:8a:3b:5a:48:e0:3f:7d:de:3f:e9:ff:84:d2:c6:61:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  6 13:40:56 2025 GMT
            Not After : Sep 10 23:59:59 2025 GMT
        Subject: serialNumber=432210c9cc283a56416c1620d4c1a03af9bf40bdde9150cf2082fc970a942dce, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9d:94:fe:43:59:11:02:e4:f9:ea:71:61:24:
                    e9:1f:e4:0d:61:9a:9f:1d:64:23:86:e0:3c:f6:78:
                    89:9b:e3:78:80:f0:9d:6f:35:70:4e:73:77:ce:da:
                    1b:6a:a3:9f:eb:e6:39:7d:02:9f:d8:73:93:ac:7c:
                    f3:83:24:87:7c:c9:47:06:c9:4d:3f:fb:58:c6:c0:
                    5e:2e:eb:6f:22:37:64:ef:a3:c3:20:1d:b5:5e:20:
                    a1:e6:47:05:f4:cd:e9:16:94:cc:80:68:2a:f2:92:
                    eb:0c:a8:50:8f:87:0a:3a:2b:ff:c5:d2:b8:ac:76:
                    be:03:5d:b7:a6:6c:b2:5b:ef:96:3b:3c:80:86:6a:
                    49:5a:ed:86:cf:bd:10:79:75:7a:4b:97:a1:67:66:
                    07:80:f4:37:17:c8:d3:b0:1c:f2:7c:e0:12:90:89:
                    74:99:5a:09:e7:71:ad:62:7b:05:95:82:39:f4:9b:
                    c3:bb:14:46:6f:0d:9d:01:4d:85:c9:57:cf:e3:36:
                    4d:12:98:af:8d:1e:bd:8a:7d:a5:6b:0a:9c:46:de:
                    a7:fa:2a:a2:01:9c:20:78:03:c9:bc:9e:14:5a:c9:
                    ac:dd:09:5a:b6:e5:f9:21:ff:31:21:55:c2:48:cb:
                    a2:20:b7:03:8e:d2:1e:09:92:28:eb:fe:96:ef:92:
                    62:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:5B:16:89:3B:2F:97:56:83:65:DB:EA:94:07:39:98:2A:85:7B:08
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9251918-220f-463e-a002-9fff11aface6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.184.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         69:84:e1:5b:d1:ce:52:8c:4f:f3:ca:24:35:4c:96:bd:d0:5e:
         8c:44:6f:d5:25:6b:5a:56:6a:51:68:8d:d3:39:c5:d4:20:5d:
         d3:94:ed:b2:80:4a:ac:be:4f:07:95:bb:43:74:ac:e2:36:3c:
         82:9a:22:70:4e:91:a3:da:f9:b0:04:a9:72:92:eb:48:39:b0:
         44:4d:15:a6:90:2e:8c:03:60:5d:80:f2:13:8c:17:2f:bb:b7:
         c4:82:8e:90:14:91:28:25:b5:c7:be:be:1a:fb:62:7b:11:0b:
         53:e9:55:e2:ae:9a:47:b2:6c:b2:d4:f3:81:9c:cf:9c:82:63:
         39:38:a0:44:11:5a:c9:d0:8e:d5:c6:cc:bb:c4:72:67:ed:74:
         1a:f4:4c:32:60:69:96:1a:cb:0d:49:11:33:b5:2b:ed:33:e7:
         1d:00:0a:28:f1:ea:7a:aa:11:30:29:c3:f2:80:49:25:b8:7e:
         33:7f:77:84:c0:17:4f:0e:93:5e:df:2c:83:e5:3f:b4:1e:12:
         aa:f1:5f:d3:0f:68:85:92:62:11:7d:4d:36:52:63:59:3a:76:
         2f:b8:20:60:37:de:03:77:03:45:94:30:4e:95:8a:35:33:a1:
         5d:cf:2f:63:aa:8b:db:47:d2:05:e2:ea:d1:29:2a:bf:3d:f4:
         37:9e:e9:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:50:41 2025 by rpki-client