Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e96848dd-3369-4e73-af27-2bec7ae42c0e.roa
File:                     e96848dd-3369-4e73-af27-2bec7ae42c0e.roa (raw, json)
Hash identifier:          Qiutg4NJL4yREBdNkGuySCQOLEVbmGnjtKBUn/Ebf5I=
Subject key identifier:   BC:7A:76:F6:8E:2C:60:CA:D2:03:78:F2:26:D4:77:8F:15:42:62:9B
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       1319C55E3A583F2372BCE9B0EFF38B2BF9304585
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e96848dd-3369-4e73-af27-2bec7ae42c0e.roa
Signing time:             Fri 25 Apr 2025 17:30:46 +0000
ROA not before:           Fri 25 Apr 2025 17:30:46 +0000
ROA not after:            Fri 30 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        173.82.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:19:c5:5e:3a:58:3f:23:72:bc:e9:b0:ef:f3:8b:2b:f9:30:45:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Apr 25 17:30:46 2025 GMT
            Not After : May 30 23:59:59 2025 GMT
        Subject: serialNumber=d33402f054ddd8c59e0131ffcd601cecd0e523edb25d8f56fca0746903d00cf8, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fd:c5:b8:9e:70:db:ee:de:04:b1:51:90:36:
                    2f:02:40:07:1a:53:7e:96:c2:ba:95:d8:f1:64:d9:
                    c5:e7:cc:1f:22:05:3e:b1:13:2e:3b:f3:77:56:24:
                    26:24:17:30:17:de:fb:71:df:41:ad:cc:59:b0:25:
                    b3:ec:ba:b9:d1:96:de:5f:0d:44:cc:54:03:29:fe:
                    de:61:d1:5c:0a:0a:34:da:34:33:a8:99:35:5e:87:
                    14:6a:d3:43:92:28:c0:71:ff:f6:09:bc:cb:26:87:
                    c9:be:a5:90:d8:c5:fb:e2:92:59:1c:89:3d:bd:d8:
                    8c:89:13:96:6e:33:47:fa:04:a0:4c:7b:86:ce:69:
                    8e:c3:b4:03:32:f4:ca:d9:9f:99:ca:dd:cb:ec:f2:
                    da:60:fe:51:b1:eb:e4:b6:ff:45:93:10:d7:ab:7b:
                    42:f3:d0:f9:c0:42:e5:74:3b:18:18:e4:04:8b:be:
                    d9:e3:dd:c5:de:7f:2b:eb:7b:1f:12:9f:c4:43:36:
                    23:59:9e:9d:42:77:46:07:29:ed:31:28:77:c6:e2:
                    d8:b2:2b:da:34:da:fa:59:e3:0a:fd:f2:a6:38:ba:
                    15:eb:94:10:9d:5e:35:08:76:f3:9a:76:69:82:19:
                    0d:f0:04:f7:2f:1b:20:75:b7:47:cf:02:4a:ea:37:
                    07:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:7A:76:F6:8E:2C:60:CA:D2:03:78:F2:26:D4:77:8F:15:42:62:9B
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e96848dd-3369-4e73-af27-2bec7ae42c0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.82.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:00:a7:78:d1:fc:38:01:42:4d:b0:6f:db:fd:a0:8f:33:91:
         2c:b4:c9:4e:3d:52:09:f1:a7:2f:7d:53:f1:81:54:83:5b:0e:
         07:aa:9a:3a:df:c3:e1:96:48:f4:3e:36:98:13:1c:57:24:b2:
         df:e2:45:e5:09:65:49:12:12:83:86:7a:bf:9c:68:3d:86:6d:
         a2:62:84:f0:a5:9e:cc:b4:6a:df:b7:47:42:5d:8f:c5:8e:2b:
         50:b8:1e:f5:b1:8c:a2:85:06:c8:ed:f5:41:eb:db:91:ab:be:
         3b:44:32:c7:37:93:98:7e:d0:7b:36:93:62:83:d8:f7:59:8f:
         75:78:0e:03:0f:1e:01:d1:2b:1e:d4:75:9f:59:a9:87:cf:31:
         19:a4:6e:74:87:68:05:59:9e:8d:72:2c:00:ba:c7:df:60:14:
         88:8b:bf:2a:33:02:c2:30:13:c5:6f:0f:15:91:6a:e2:9d:04:
         89:a2:52:d2:1f:c3:e0:e2:cd:85:5f:8e:c8:eb:8c:86:90:70:
         21:30:d7:86:51:82:44:af:ab:51:a8:c9:72:d5:1a:18:5b:d1:
         ad:5e:f6:64:49:ca:54:56:ce:fe:78:d3:dd:b3:ca:27:8a:c8:
         14:4b:d7:f1:aa:44:8b:7d:6f:83:3e:4c:2e:31:fb:b3:02:1c:
         07:3e:ff:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:40:15 2025 by rpki-client