Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6dc0d4c-2b49-404a-839d-69d640bbb6f7.roa
File:                     f6dc0d4c-2b49-404a-839d-69d640bbb6f7.roa (raw, json)
Hash identifier:          hzIOxumLL4AmRMEXOoeMi6dgUDuQgxog110lRLrvou0=
Subject key identifier:   C2:C8:51:23:91:A0:BF:46:44:33:DB:EA:F7:CA:51:B2:92:3E:50:35
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3AEB60C66417704357B441ABFA1DBFFD595E1FE0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6dc0d4c-2b49-404a-839d-69d640bbb6f7.roa
Signing time:             Fri 13 Jun 2025 00:31:02 +0000
ROA not before:           Fri 13 Jun 2025 00:31:02 +0000
ROA not after:            Fri 18 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        16.79.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:eb:60:c6:64:17:70:43:57:b4:41:ab:fa:1d:bf:fd:59:5e:1f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 13 00:31:02 2025 GMT
            Not After : Jul 18 23:59:59 2025 GMT
        Subject: serialNumber=d20f35012ae65c61a68dbdd71ccb701e1322b7c750c9479ffff0d0fac3d001e4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:87:08:0b:9b:cc:b5:fb:55:98:d8:41:4a:39:
                    8b:78:13:9f:ef:d9:ea:fa:dc:d7:7a:e3:aa:4a:da:
                    55:93:fb:58:6d:d5:c0:61:75:13:5f:8c:d7:f4:1f:
                    3c:f4:83:51:35:45:07:07:75:32:bd:e3:7e:50:e6:
                    f5:d9:11:ca:04:d8:e3:23:d8:e9:81:98:b2:d5:76:
                    b8:77:67:4b:10:5e:8b:ed:31:f6:b7:a3:f6:60:8d:
                    73:8a:26:e7:0e:74:12:a8:b2:43:c3:9f:3e:7d:5a:
                    77:4e:3d:97:aa:58:77:1d:54:95:da:72:b0:30:fa:
                    0e:ab:c0:57:68:0b:2e:24:d0:41:85:10:55:8a:d2:
                    d0:27:3c:fe:93:8a:83:29:34:55:62:0d:03:27:65:
                    cf:3d:0f:36:74:20:75:7a:13:b6:f3:10:22:45:79:
                    98:a2:52:63:b1:89:05:e2:d9:17:08:ce:66:2e:f4:
                    fc:42:ad:66:71:9e:c2:a9:4b:23:f3:43:ff:a2:08:
                    3a:01:e6:1f:55:ee:7d:eb:95:f1:33:c1:87:8f:21:
                    d1:2d:c0:18:b0:9e:5f:46:48:9a:1d:1e:85:1e:95:
                    08:01:b1:57:ef:5a:97:73:07:a4:00:51:b9:16:af:
                    60:20:9a:e4:3c:66:1c:77:26:a9:65:3a:18:57:69:
                    39:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:C8:51:23:91:A0:BF:46:44:33:DB:EA:F7:CA:51:B2:92:3E:50:35
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6dc0d4c-2b49-404a-839d-69d640bbb6f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.79.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4a:88:8b:1a:92:e0:7a:e0:fe:d9:f0:0b:06:fd:6c:25:e3:da:
         e8:df:2f:f8:37:76:fa:c7:42:cc:5a:0a:0c:47:a9:ef:de:ea:
         9c:66:bf:75:57:60:6f:6b:41:6e:40:57:7c:00:18:c5:e3:d3:
         ac:fa:90:8a:d9:c6:7f:d0:fc:44:98:0b:f2:12:5a:4f:70:f6:
         90:20:8c:1f:91:9f:54:ac:cf:7e:a1:43:ad:36:98:d9:20:a6:
         3d:7d:ea:a5:48:c2:22:a1:83:f7:07:7c:3e:2b:95:67:68:42:
         d0:35:82:e0:30:87:b2:99:a8:c6:db:77:43:fe:ab:ac:c6:a8:
         19:6b:7b:0f:12:6c:73:dd:ef:3c:7a:28:d5:21:34:43:b7:a5:
         4b:13:06:b3:52:60:58:4c:3f:ac:e6:2e:85:8d:65:47:02:9f:
         e9:a7:d8:f6:3d:78:2e:59:5d:e0:b8:54:b5:f4:8a:de:e8:ae:
         5f:da:73:e4:d9:32:b4:10:ac:cf:8b:a8:34:3d:9a:20:ca:1d:
         9b:32:ea:35:8f:22:86:3a:8a:1a:22:f7:e4:72:a9:97:09:36:
         24:fb:37:f6:6d:de:81:d9:e5:0e:76:d5:fa:ff:7c:3f:c1:c7:
         a4:e4:d5:cf:09:00:41:4c:78:0b:23:c8:12:d9:55:7e:f4:06:
         48:bc:e4:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:41:35 2025 by rpki-client