Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/27e99577-d3d4-4681-953c-071c09e6aecd.roa
File:                     27e99577-d3d4-4681-953c-071c09e6aecd.roa (raw, json)
Hash identifier:          8KugfyNxcTrypwWU8S7yHaQD1+ZCigHQNXgoqhT4xuo=
Subject key identifier:   C6:C6:93:56:C3:24:F5:EC:28:6B:83:82:A4:EE:8F:87:74:C6:B0:66
Certificate issuer:       /CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64
Certificate serial:       6382374C0248E1E5B6F046FBB5F7047FA5926C76
Authority key identifier: FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/27e99577-d3d4-4681-953c-071c09e6aecd.roa
Signing time:             Mon 04 Aug 2025 17:40:20 +0000
ROA not before:           Mon 04 Aug 2025 17:40:20 +0000
ROA not after:            Mon 08 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        184.169.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:82:37:4c:02:48:e1:e5:b6:f0:46:fb:b5:f7:04:7f:a5:92:6c:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64
        Validity
            Not Before: Aug  4 17:40:20 2025 GMT
            Not After : Sep  8 23:59:59 2025 GMT
        Subject: serialNumber=a422c50b274eec1fe52fa522001856453453e6e7faa434f674119e78d3fbce27, CN=71c3876e-b944-4600-92c7-cec33d89523f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:20:2c:13:2e:87:9c:34:fc:f4:96:13:4d:67:
                    b3:b7:24:94:77:c0:01:4f:d2:55:b7:7f:4c:84:06:
                    d8:b2:2d:40:ef:4b:9f:8a:fe:ba:53:7c:a3:87:24:
                    2f:d5:40:33:23:c8:b0:0d:29:71:dd:f7:ae:58:24:
                    f1:be:e3:e0:30:0e:6a:40:77:80:97:39:c7:af:25:
                    31:c1:d7:7e:22:67:01:72:6e:6d:09:37:c7:28:5b:
                    fa:6f:c5:3d:65:ee:04:e3:c5:de:90:c3:14:9b:d8:
                    7e:9a:27:34:bb:13:f2:eb:55:f0:40:60:0c:6e:b9:
                    cc:22:28:51:7f:d8:da:b7:92:d4:2d:92:f1:6a:ea:
                    3f:9d:55:1c:0c:fe:dd:51:70:56:9f:48:95:80:74:
                    c5:79:a0:a0:09:b7:12:68:7b:83:79:8e:50:6e:df:
                    43:35:ff:bd:c8:db:08:d6:a2:f3:82:f9:75:5f:67:
                    96:97:30:26:bb:18:08:14:f1:1d:92:59:64:d2:f3:
                    29:ad:cd:ce:44:83:cf:f8:45:48:e9:81:7d:56:65:
                    82:38:0b:8c:d1:6c:6b:ee:7e:72:07:57:b9:13:c4:
                    2a:e1:29:53:77:a4:60:3c:e8:7f:4f:13:71:6c:f4:
                    4f:6d:21:d6:58:ca:dd:bb:04:bb:07:d9:0d:4e:d3:
                    1a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:C6:93:56:C3:24:F5:EC:28:6B:83:82:A4:EE:8F:87:74:C6:B0:66
            X509v3 Authority Key Identifier:
                keyid:FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/27e99577-d3d4-4681-953c-071c09e6aecd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.169.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         50:46:e4:b1:ce:2b:f3:70:11:5c:70:8f:4f:92:b1:45:c9:73:
         f0:4e:33:ae:d3:43:69:67:dc:39:cb:d1:db:4f:07:9e:05:f1:
         76:54:e3:53:7c:8a:76:fa:32:47:62:37:fb:d2:90:aa:4c:1f:
         53:80:18:09:0f:cd:5f:94:7a:95:c0:c2:a0:8c:bb:88:d6:ae:
         9a:ae:b7:4f:6a:2d:bf:0b:1b:af:38:3c:02:60:f0:d3:f7:dc:
         2d:08:16:e6:c2:b5:9b:a2:4c:43:be:a5:db:a5:f6:04:a4:fc:
         87:a9:94:b1:5b:af:f8:b8:44:95:57:f4:4b:0a:e2:b1:cd:b0:
         26:d6:a9:42:85:1c:0c:67:38:68:70:95:12:9e:27:da:dd:05:
         68:4f:c7:ee:30:ff:07:7c:fb:03:d1:ff:20:ad:bc:cd:b3:92:
         f8:90:7a:a4:e3:9f:99:6b:f5:be:eb:34:50:c8:91:31:23:30:
         c7:ec:4c:7e:61:cc:5f:74:97:0c:5b:29:5b:70:31:15:c1:44:
         6a:8c:7e:40:cd:fc:94:f8:66:aa:3b:fd:0e:1d:04:b8:e1:93:
         ce:68:d8:02:4d:8c:06:81:21:e2:58:2c:93:52:a7:4d:5d:f5:
         85:e0:32:01:aa:7d:84:03:84:59:0f:b0:58:50:b3:67:c9:4c:
         52:6a:f6:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 21:32:36 2025 by rpki-client