Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f87e1452-0bf6-4b5e-a5dc-b482f699f6b9.roa
File:                     f87e1452-0bf6-4b5e-a5dc-b482f699f6b9.roa (raw, json)
Hash identifier:          LUB+djHpv6EdcmUbgSAoBOiD2GIuhiv70byNID72cD8=
Subject key identifier:   FE:1A:97:5F:0D:E8:BE:4C:FA:70:C2:A5:F6:3B:C4:7C:82:F8:57:A5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       61E1C924B55C5E2DC7D1FABE5DB3D1902671D321
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f87e1452-0bf6-4b5e-a5dc-b482f699f6b9.roa
Signing time:             Wed 23 Apr 2025 00:40:23 +0000
ROA not before:           Wed 23 Apr 2025 00:40:23 +0000
ROA not after:            Wed 28 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        162.222.148.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:e1:c9:24:b5:5c:5e:2d:c7:d1:fa:be:5d:b3:d1:90:26:71:d3:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 23 00:40:23 2025 GMT
            Not After : May 28 23:59:59 2025 GMT
        Subject: serialNumber=267047369b72d919b97cf192d3ebb49de20d6ea4320ada40733ab827cc191095, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:cf:c1:0a:b1:df:7b:01:c3:df:d4:08:30:c3:
                    7f:c4:68:f3:d4:51:52:6b:41:9d:09:0c:85:1d:20:
                    b3:a4:79:71:38:b4:59:31:e8:72:3f:d6:cb:68:2d:
                    e6:b5:dc:5e:90:d3:f6:86:b5:21:59:95:35:17:99:
                    df:9c:ea:1b:d8:b9:41:b5:aa:7f:2a:ec:63:3a:c0:
                    f9:d7:8d:80:1f:77:22:e6:04:29:26:ee:2e:01:57:
                    b2:3b:a5:76:8a:5f:1e:d8:78:c1:f9:4e:88:eb:88:
                    e1:cb:db:39:4f:2e:8b:e9:2b:1b:73:aa:c4:57:4b:
                    b0:5f:24:11:c7:12:5a:35:4b:5a:ea:c0:a8:00:b4:
                    ca:0d:23:30:72:6f:c3:54:7b:6c:4d:8e:1b:48:2e:
                    4e:94:bd:27:03:57:1a:b1:49:5a:5a:dc:f7:dd:83:
                    c8:3e:fd:e5:e5:cd:23:3c:08:59:73:00:b3:b6:44:
                    b4:c1:f5:4f:11:ec:3e:cf:84:1d:19:3e:66:f5:d9:
                    cb:5a:ef:5c:e2:fb:19:f5:f1:03:c1:bd:dd:06:8e:
                    4a:be:ca:1f:51:d0:ac:1f:ad:87:86:47:b2:36:da:
                    0e:e0:38:1d:99:e7:cd:78:f0:f3:e3:ab:71:f5:ba:
                    4c:bd:fc:91:a5:67:70:bc:39:14:77:b3:bd:91:4d:
                    e9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:1A:97:5F:0D:E8:BE:4C:FA:70:C2:A5:F6:3B:C4:7C:82:F8:57:A5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f87e1452-0bf6-4b5e-a5dc-b482f699f6b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.222.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:5c:35:6f:f7:4a:6e:fe:07:7a:ad:f4:1f:9e:db:2e:b4:b6:
         ca:37:4e:f1:2b:6b:a2:e2:22:f2:9e:2e:ee:9e:e0:84:f8:19:
         07:e0:5d:3c:c5:16:5c:b1:a0:61:3e:8c:7b:f2:04:9c:98:64:
         66:31:73:b2:ac:e4:05:e4:a6:19:23:2b:48:3c:4c:94:35:a4:
         9a:7d:dd:b4:46:a3:34:27:bc:ff:ca:4e:26:86:c9:16:23:1b:
         23:70:30:52:24:4a:2e:98:53:2e:69:36:a1:4a:47:80:3f:b1:
         04:60:87:89:3a:63:c2:3b:cc:a8:cb:ae:84:0b:6f:1b:d8:19:
         36:e1:24:d3:98:6e:48:fa:fd:36:f3:32:35:9e:91:1a:ac:51:
         a4:cf:3b:c6:ee:40:37:96:93:ab:b9:fe:3e:67:65:db:6c:18:
         2b:c7:ca:e7:0a:6e:c6:0f:39:55:84:75:e0:cd:11:37:65:7f:
         f8:23:b6:a8:73:92:a1:98:d5:cc:ad:d9:59:ca:f2:f8:d4:7e:
         88:2d:e7:f1:a5:3a:29:70:e1:71:78:21:02:07:00:26:3b:34:
         38:b6:14:33:99:93:31:47:76:8d:fc:a9:11:94:9e:32:f9:41:
         e6:11:a0:7d:7c:9f:dc:26:22:19:eb:d3:6f:5c:6c:66:64:5a:
         d3:06:eb:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:14:34 2025 by rpki-client