Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f98c6682-15ea-4f71-9c0e-97127590dea1.roa
File:                     f98c6682-15ea-4f71-9c0e-97127590dea1.roa (raw, json)
Hash identifier:          aGKV1v9QbIAwt/MJQuNFpUdTm2G8dLpvKt64vs8LPzg=
Subject key identifier:   AF:EB:76:E0:4A:6A:8B:88:77:8A:EB:BF:4A:53:DE:7B:CA:4A:57:78
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       02B705DE1049EA342AC46639230DF0FAEEEF2678
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f98c6682-15ea-4f71-9c0e-97127590dea1.roa
Signing time:             Tue 05 Aug 2025 00:40:33 +0000
ROA not before:           Tue 05 Aug 2025 00:40:33 +0000
ROA not after:            Tue 09 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        63.176.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:b7:05:de:10:49:ea:34:2a:c4:66:39:23:0d:f0:fa:ee:ef:26:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  5 00:40:33 2025 GMT
            Not After : Sep  9 23:59:59 2025 GMT
        Subject: serialNumber=7d563eb2e7841344c0ce8aba5ac89073223c1108553dae44c9ae48c4606327c2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:93:0c:20:ef:5b:0d:11:8d:e6:2c:62:c3:9e:
                    d3:78:99:ce:19:72:6b:9d:19:98:df:8c:c7:55:92:
                    e5:f1:05:ff:7e:9e:e3:9e:2c:24:5a:68:39:51:41:
                    75:78:59:ef:08:ae:37:dd:bf:ea:3c:50:87:d7:05:
                    80:31:a5:8f:b1:30:6c:32:b7:6b:58:a8:7f:6f:41:
                    49:a8:16:bd:71:b4:20:4c:6d:cd:83:79:e0:22:c5:
                    1c:48:9d:0b:07:62:52:a1:63:8d:29:a5:a1:61:d5:
                    b3:25:37:23:cd:ac:e5:fe:c7:77:78:f2:16:80:4b:
                    b6:2d:c9:7e:d5:a4:ec:08:a0:b8:92:b9:c2:eb:c5:
                    7b:ff:c8:71:6c:a9:29:b6:43:f7:3b:c8:bc:b0:b4:
                    1c:3c:49:e2:c2:88:64:b8:ec:9b:d4:1d:88:f1:13:
                    c9:0f:36:3a:03:84:c6:af:98:13:8b:10:21:ce:e4:
                    d4:e4:da:6a:b6:b5:92:20:db:9b:fe:c1:9e:86:b9:
                    cc:9d:f6:2a:52:2c:19:35:06:c5:aa:36:15:a8:0a:
                    24:77:67:91:4d:ae:84:30:25:11:de:18:c4:af:c0:
                    0e:53:db:28:ee:f6:6d:c7:9d:7b:78:12:b2:40:dc:
                    4a:41:e8:70:f1:98:dc:04:41:4f:17:26:65:5a:f5:
                    f1:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:EB:76:E0:4A:6A:8B:88:77:8A:EB:BF:4A:53:DE:7B:CA:4A:57:78
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f98c6682-15ea-4f71-9c0e-97127590dea1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.176.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         88:f2:62:a8:b4:dc:26:1b:a9:ae:c4:fe:1d:8c:28:0b:1c:fe:
         1f:7e:80:34:d2:18:0c:3d:13:a9:88:96:6f:84:2b:3e:8b:3b:
         9c:df:bc:1d:3f:43:8a:c7:3e:b2:f4:9e:ac:54:84:71:68:ed:
         6c:93:79:97:d9:ea:1d:29:b8:c8:54:ba:39:93:83:ce:1e:ac:
         21:6f:d6:e1:0d:61:47:18:9c:7e:8d:21:d1:ed:e6:1f:8f:7f:
         e8:28:1a:3d:d2:c5:6d:35:74:4f:06:15:99:96:82:34:e8:48:
         61:e4:1e:a6:75:8a:bc:98:b0:3c:97:a4:74:83:32:64:73:5b:
         a4:38:ed:20:74:83:d6:2a:fa:04:30:f2:d9:88:35:69:33:e7:
         5e:f8:34:6f:63:82:ca:d5:5c:38:ff:40:e4:96:93:24:fd:f5:
         a0:07:9b:fd:f1:6c:08:06:e6:79:3f:ad:b2:af:60:ed:1c:c6:
         e2:bc:31:8c:5e:38:50:ae:d9:95:39:2e:5d:6d:0a:59:a1:89:
         8c:aa:2d:a0:1a:15:ed:a4:9b:d1:bb:e9:82:4f:0e:f1:44:9a:
         85:ac:c0:71:77:64:cd:a4:0c:aa:10:65:87:73:3d:11:3b:3b:
         c9:82:8e:30:35:4e:0b:0a:08:cc:80:66:55:0d:ae:4c:e4:9f:
         c4:ae:05:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:09:31 2025 by rpki-client