Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1807722b-6239-464f-b361-a2bdd368c5eb.roa
File:                     1807722b-6239-464f-b361-a2bdd368c5eb.roa (raw, json)
Hash identifier:          EbUNcwVI/s8cGa4CyfE6VkV7ZAW6GszbVapiydmQYS4=
Subject key identifier:   37:19:57:F6:29:4A:61:9D:FD:6D:BF:AE:F7:CD:D7:5F:3F:9D:48:CB
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       017606DF7030302B780970033893399E65757981
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1807722b-6239-464f-b361-a2bdd368c5eb.roa
Signing time:             Tue 15 Apr 2025 00:50:24 +0000
ROA not before:           Tue 15 Apr 2025 00:50:24 +0000
ROA not after:            Tue 20 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        173.82.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:76:06:df:70:30:30:2b:78:09:70:03:38:93:39:9e:65:75:79:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Apr 15 00:50:24 2025 GMT
            Not After : May 20 23:59:59 2025 GMT
        Subject: serialNumber=73bf97ec546655c55416fe36ac4676cfa88da9ab4c412ac043ebe01fadcbd66f, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f2:a9:ff:f6:6f:d0:b1:05:22:6b:bc:b9:8a:
                    14:dd:e2:e4:ff:04:c1:70:76:2a:35:4c:7a:7f:eb:
                    f5:6c:d4:19:e2:73:ed:fe:15:58:f3:a0:42:be:0f:
                    2a:7e:58:97:40:e9:f6:a4:1b:ad:38:4a:e0:57:29:
                    41:2e:b9:94:07:2e:f7:b6:b2:7e:43:b0:54:e9:db:
                    a8:50:69:78:d5:3b:b8:39:a2:38:d9:99:92:13:3a:
                    e1:e5:39:95:61:d5:21:71:58:35:4e:49:8a:74:b2:
                    c3:bc:fe:bd:e9:d1:71:87:05:c1:e5:15:01:92:0a:
                    a7:d7:42:b8:7e:68:45:19:1f:d4:26:fa:cf:69:ec:
                    a6:9c:b4:de:8c:83:d7:9b:10:a9:9a:11:2d:98:02:
                    05:f0:ef:09:d8:98:97:96:28:ee:cb:6a:cb:dc:9c:
                    61:14:05:ae:79:1b:b7:a0:ce:d1:0c:aa:48:8e:b9:
                    52:c0:bc:32:d3:0d:fb:76:27:62:a0:07:61:3b:72:
                    28:6a:28:17:a7:05:6b:95:57:fb:45:7f:dd:87:1b:
                    83:54:ec:6f:90:63:24:4a:79:c8:60:2e:7d:98:e5:
                    92:71:6b:67:8d:1b:4e:b2:32:d7:7b:85:f8:6a:bb:
                    42:62:11:23:d8:4b:5e:ff:c4:63:1b:af:79:ef:d6:
                    22:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:19:57:F6:29:4A:61:9D:FD:6D:BF:AE:F7:CD:D7:5F:3F:9D:48:CB
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1807722b-6239-464f-b361-a2bdd368c5eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.82.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:eb:98:1d:9d:24:6d:57:a4:19:22:28:85:ec:1f:fc:db:2b:
         0d:cc:70:0f:41:d1:49:2f:02:44:69:a9:c8:24:3a:5f:e1:57:
         64:a2:af:26:ee:10:ce:23:2e:ea:61:c0:3f:bc:5d:67:eb:11:
         de:02:93:25:86:0b:74:bd:51:16:d7:4a:1d:0a:78:78:d6:a1:
         1b:13:d5:5a:da:09:e6:ad:f1:e7:df:99:68:ef:c6:6e:d6:e4:
         c1:68:cd:0d:d4:14:d4:9f:e1:c5:f5:aa:04:14:92:94:e7:13:
         59:9b:38:cb:03:69:fd:d6:54:d0:62:25:cc:a9:2b:9f:b9:fc:
         17:c4:e3:0a:50:8b:99:a3:1c:9b:45:27:23:3d:00:3d:a4:bc:
         75:a9:09:a9:53:11:8b:63:67:f1:2a:3d:94:97:4c:17:63:d2:
         fd:2c:d0:a5:90:ac:58:4f:09:de:2d:2e:5f:66:3e:28:c3:b6:
         46:56:f0:6a:52:d6:b2:6f:8b:ad:84:b1:61:72:17:29:38:13:
         70:66:97:ad:b5:c8:a3:b2:3a:02:22:90:bd:c8:37:f1:05:e3:
         84:6c:5e:03:63:b8:9b:bd:82:b3:70:5e:d0:04:12:b8:dd:53:
         e3:c3:3e:c5:25:e0:9b:23:c9:33:b8:aa:59:d6:dd:fd:2b:0c:
         c2:45:b8:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:10:43 2025 by rpki-client