Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/9a3e33fb-72cf-452b-86f9-913d47674dfa.roa
File:                     9a3e33fb-72cf-452b-86f9-913d47674dfa.roa (raw, json)
Hash identifier:          tM++xyCMDR3gPp/S1XYKrpxuPCOI63Pn94gyh3d5Gzo=
Subject key identifier:   68:83:47:06:15:F5:BE:46:51:AC:19:BD:CF:8A:DC:4D:CE:27:8F:18
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       4415B006902D2C76558B5B4DF9FFF8CEF049E04F
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/9a3e33fb-72cf-452b-86f9-913d47674dfa.roa
Signing time:             Fri 11 Jul 2025 18:00:08 +0000
ROA not before:           Fri 11 Jul 2025 18:00:08 +0000
ROA not after:            Fri 15 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        173.82.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:15:b0:06:90:2d:2c:76:55:8b:5b:4d:f9:ff:f8:ce:f0:49:e0:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Jul 11 18:00:08 2025 GMT
            Not After : Aug 15 23:59:59 2025 GMT
        Subject: serialNumber=9b97b3fe5385e5f6b95de3e4ab355b61333687e32d90a410ea14c92a5718dfa4, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:60:8c:0f:e4:af:dc:07:38:9c:26:1c:07:7d:
                    2d:35:bd:0e:3f:da:a4:8f:39:a1:d9:ca:55:29:19:
                    d3:ce:de:30:ac:e1:bc:af:c3:e2:29:84:4e:58:d2:
                    95:ad:e3:dc:e7:f5:55:0a:7d:0b:e9:15:01:42:00:
                    b6:53:ea:54:33:0f:4e:16:87:15:22:35:43:05:d2:
                    e8:ae:df:0e:1b:36:fb:f8:29:2d:8a:90:09:6b:24:
                    b4:41:f9:1d:c0:22:6a:58:fb:73:4e:c2:ca:24:82:
                    3d:8c:8f:e6:8a:5b:77:9e:c5:c2:f5:fd:74:a6:dc:
                    ea:55:5c:ef:f6:b8:a7:08:0b:68:5e:2d:af:80:43:
                    14:26:08:60:91:1a:22:38:eb:ce:db:35:68:31:e0:
                    72:85:2c:0f:7c:55:e3:0e:b5:d9:77:73:8f:09:f5:
                    21:fd:f9:65:62:1f:0e:04:53:ee:13:73:19:a1:f8:
                    4f:24:8d:87:ce:51:ec:92:34:9d:f4:b4:ce:f0:ab:
                    ae:ba:47:47:f2:8f:23:09:f5:e3:9e:ef:d8:94:c9:
                    a2:cb:4f:9b:c7:4f:82:fe:91:56:b3:de:3e:44:7e:
                    3f:93:e6:12:52:d3:61:2a:13:f2:1e:7d:9b:f7:50:
                    0e:90:15:53:76:09:99:96:de:a1:14:42:f5:92:16:
                    88:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:83:47:06:15:F5:BE:46:51:AC:19:BD:CF:8A:DC:4D:CE:27:8F:18
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/9a3e33fb-72cf-452b-86f9-913d47674dfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.82.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:57:42:35:19:98:e4:79:84:a0:c0:c8:0f:48:b6:ee:64:b8:
         0a:70:a9:f4:20:cc:9f:bd:39:8c:4f:13:d9:db:30:d3:23:c0:
         4d:1b:6d:a0:dd:d5:08:05:0f:fd:34:a9:6c:a9:ae:ca:9a:0a:
         c3:26:b9:3b:69:43:07:eb:a6:06:3b:87:05:6b:7e:2c:7f:7c:
         83:90:ef:01:c7:35:48:5b:4f:f0:bb:38:aa:a2:85:45:5c:47:
         96:fd:2a:f5:32:1c:e1:33:3a:3e:0a:33:21:68:fc:d1:ee:aa:
         21:c9:ae:3b:89:38:5b:02:ee:19:e0:31:33:d4:ba:ea:c1:22:
         e5:06:62:80:c7:0b:c8:4d:79:2a:07:20:7f:05:52:45:ff:8f:
         7d:2d:c5:c2:8d:ae:a0:d2:73:67:24:89:fc:58:5c:68:46:82:
         8c:dc:93:91:cf:07:50:07:d3:a2:19:fb:9f:06:1f:a8:be:25:
         e9:fe:dd:fd:77:f5:ae:d6:30:43:db:b0:94:f9:5b:a8:5f:1c:
         3e:77:47:14:68:1b:a9:19:5b:ce:ad:ec:79:78:e0:f4:7d:53:
         6e:f8:c2:ef:91:be:7d:b6:f6:4e:d8:0f:4a:9b:2c:fb:b5:5d:
         ba:7c:41:d3:29:24:8b:b2:20:10:e8:1a:cd:88:5f:5a:5e:30:
         a2:86:54:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 21:48:15 2025 by rpki-client