Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a826b4c5-814a-445f-a0db-f0f6c166ab63.roa
File:                     a826b4c5-814a-445f-a0db-f0f6c166ab63.roa (raw, json)
Hash identifier:          TRgob8ETCNZZsnKcYWL2GTGjoi2xD2rw4XZsm+ZnIgk=
Subject key identifier:   35:28:6F:9A:B3:BA:F8:49:52:AE:7B:DC:B1:B5:3B:9B:40:26:81:1D
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       30A477CBE3BC4047E47EB7E17B4A115B0A87AC57
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a826b4c5-814a-445f-a0db-f0f6c166ab63.roa
Signing time:             Fri 25 Apr 2025 17:30:08 +0000
ROA not before:           Fri 25 Apr 2025 17:30:08 +0000
ROA not after:            Fri 30 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        173.82.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:a4:77:cb:e3:bc:40:47:e4:7e:b7:e1:7b:4a:11:5b:0a:87:ac:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Apr 25 17:30:08 2025 GMT
            Not After : May 30 23:59:59 2025 GMT
        Subject: serialNumber=48c54c97183c176a72b60bd8d3b035c732e83623428d07c3dc31bb31a0c32a00, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:05:72:d9:8f:f5:66:6e:d1:b9:5d:b1:01:7d:
                    7b:d6:10:9c:1b:4b:6e:6c:30:e7:83:8d:66:84:99:
                    7f:64:7c:53:ee:1d:1d:21:ad:c7:57:4b:66:eb:cf:
                    93:73:f8:2d:0f:a4:57:b0:c6:fd:20:ca:75:43:df:
                    cc:dc:b3:33:d7:93:9a:08:ab:92:32:c9:15:bc:e6:
                    7b:99:c4:05:ab:ac:97:79:17:6d:6d:88:60:87:f9:
                    32:41:ee:23:56:89:48:cc:06:9a:cb:56:12:fd:20:
                    5e:02:94:fe:e9:dc:8d:1b:6d:f2:88:8c:2d:3d:7b:
                    38:f4:4b:4a:90:01:e4:8c:12:b0:a6:e8:85:86:12:
                    29:3a:11:04:48:f1:ad:5b:8b:ab:fe:e8:92:49:a3:
                    69:27:70:14:d2:25:23:63:82:f7:8e:d4:9a:07:0c:
                    02:a0:48:ea:29:0a:0b:b7:e0:f9:49:3d:9f:88:e1:
                    ed:5a:4e:7f:ca:c9:08:57:58:52:c2:1a:d8:da:d1:
                    39:9a:6b:b4:9f:7d:3e:b2:0b:31:0f:b3:27:cd:61:
                    25:4a:95:dc:a5:8e:be:2a:a4:16:a1:db:b6:bc:2b:
                    a2:2c:6b:1a:1f:1b:57:5a:d2:c5:da:33:14:4a:9f:
                    bb:29:5f:5d:0b:8c:1d:f7:6b:5b:02:2c:5a:5b:1c:
                    3b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:28:6F:9A:B3:BA:F8:49:52:AE:7B:DC:B1:B5:3B:9B:40:26:81:1D
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a826b4c5-814a-445f-a0db-f0f6c166ab63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.82.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:f2:85:92:be:97:5c:f0:c8:e0:9b:fa:ca:70:56:41:b4:08:
         a9:c1:ee:f5:72:0c:ff:ca:ff:df:8c:c5:72:df:47:a1:eb:1e:
         ee:df:af:9c:45:31:9c:62:c6:6f:cb:2a:60:f5:02:25:52:0e:
         f5:df:52:80:5e:52:e5:f8:e3:a3:08:b8:e0:dd:dd:3c:00:7f:
         52:6e:09:17:06:8c:06:93:30:e5:52:c7:49:1d:60:42:48:07:
         ad:9a:a1:1b:44:2a:72:01:1e:97:91:14:53:dc:87:a7:23:64:
         cc:1d:a7:8b:73:6f:d1:e7:c8:65:c7:6e:87:be:77:d3:ec:bd:
         0c:e8:5e:52:5c:80:71:42:9d:53:d3:b2:06:a7:18:91:c0:fd:
         f8:34:31:b4:f4:28:65:f8:bf:f9:4b:1f:06:19:75:dc:62:f3:
         5e:c2:44:cb:82:06:c4:46:ab:8c:7f:a6:1d:30:3c:cb:d6:d2:
         65:37:75:3c:f1:c5:98:b1:0b:eb:07:6e:d3:9a:2d:c8:56:6e:
         24:c9:28:af:40:d8:1f:8d:89:88:92:f4:4b:10:3a:cd:e8:11:
         cd:3c:64:db:4e:76:76:b3:66:7a:a3:8d:33:8d:03:3d:0d:b5:
         61:c8:b5:62:fd:fd:93:a5:ef:ee:b6:44:d8:af:05:09:2c:0a:
         45:d2:c4:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:45:04 2025 by rpki-client