Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/163289b6-2323-49cb-af8d-5b5a9ee9f0fe.roa
File:                     163289b6-2323-49cb-af8d-5b5a9ee9f0fe.roa (raw, json)
Hash identifier:          Uw6Ya8QYHInyHmYz+DOwK5zkNWc/X2NIP3pGfvEyAa4=
Subject key identifier:   A5:97:BC:B2:F7:93:23:93:36:AF:B1:19:26:6B:06:08:73:56:FB:8B
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       54FE8B24DBF46BFBF180EE7EAFBBF0E9A31D0724
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/163289b6-2323-49cb-af8d-5b5a9ee9f0fe.roa
Signing time:             Tue 20 May 2025 17:10:19 +0000
ROA not before:           Tue 20 May 2025 17:10:19 +0000
ROA not after:            Tue 24 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        52.95.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:fe:8b:24:db:f4:6b:fb:f1:80:ee:7e:af:bb:f0:e9:a3:1d:07:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: May 20 17:10:19 2025 GMT
            Not After : Jun 24 23:59:59 2025 GMT
        Subject: serialNumber=65bd1a82140c63e7821b84ba71d5eb45c7e1e5c996085d31693641f90af1ee87, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:45:f4:f5:54:70:b7:dd:e0:b9:d4:ea:99:fa:
                    96:bf:12:68:c7:99:2e:d5:91:68:cc:89:fa:ff:42:
                    f0:2f:4c:f6:8b:ea:d7:95:b8:ea:f1:7b:da:ce:78:
                    f1:51:f0:7f:58:10:1b:a9:c9:a3:af:a2:ba:92:71:
                    6b:30:40:31:b5:d9:f3:70:4e:1f:45:2a:85:bb:27:
                    6f:d0:98:0b:d7:79:f8:2c:e0:eb:ad:ea:02:7c:a2:
                    5e:ac:d8:00:05:5c:75:cb:e0:7f:d5:1b:da:9d:99:
                    35:f4:f8:2e:26:44:83:1e:ca:bd:ca:a8:f3:c1:eb:
                    07:d9:44:2d:6e:25:48:02:c7:74:5c:e9:14:71:51:
                    8b:aa:3e:e6:c8:c6:87:f9:a5:c8:6a:e5:e5:89:e6:
                    33:f9:00:7c:59:6d:84:90:6e:40:06:d3:18:4f:28:
                    46:1d:c8:2a:70:69:0d:89:38:4c:05:b8:5d:3a:39:
                    1d:cc:f3:67:a6:ba:b3:c3:78:e8:7a:b3:92:ab:8e:
                    0c:ae:34:63:a9:25:f2:e4:37:af:49:d5:fc:fb:91:
                    fd:91:61:aa:b9:b2:34:40:c1:52:42:08:43:4c:9c:
                    0c:8e:02:f6:c2:9e:5d:d5:27:5a:8f:9b:46:c9:54:
                    bc:69:4b:56:b0:25:e9:50:63:6f:ce:2a:1d:f2:05:
                    8d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:97:BC:B2:F7:93:23:93:36:AF:B1:19:26:6B:06:08:73:56:FB:8B
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/163289b6-2323-49cb-af8d-5b5a9ee9f0fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.95.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         59:8f:4d:50:05:4f:e6:63:7a:cf:f5:bc:8c:12:84:85:76:5b:
         b3:b6:ee:4e:80:fa:67:0f:56:09:bf:18:44:1d:c7:ef:12:4a:
         4b:cd:4d:c4:28:86:ef:17:c9:3a:30:47:17:1b:1b:ef:71:b2:
         23:75:10:60:57:4f:c4:55:fa:a3:04:fa:b8:f0:b7:55:de:e4:
         45:f8:24:0f:ce:b3:ce:29:ef:36:20:51:7b:ce:02:35:97:b5:
         47:c1:5d:22:95:8c:b0:22:d9:da:e9:d0:b1:9b:d0:39:09:cd:
         d3:85:8c:5d:86:91:9e:dc:67:29:4a:33:8d:73:64:67:6d:8b:
         5e:15:a7:11:9f:f8:0c:33:16:d9:43:b0:2f:09:a9:77:79:f6:
         9c:24:59:5c:df:02:13:8a:9a:f8:16:09:c5:ad:00:bd:7c:fb:
         ee:50:af:b3:dd:e9:ad:0b:91:0b:08:18:3c:72:97:37:58:35:
         79:3d:77:86:a1:48:04:50:57:bd:2e:e4:dc:c0:4e:c4:7c:87:
         d1:d7:35:c4:cd:38:17:ab:90:2e:59:71:dd:d3:4f:f5:07:d6:
         32:4a:c6:0e:f4:4a:b3:e1:50:cc:c3:cb:84:67:35:cb:a7:54:
         9a:53:2f:70:95:c4:9d:28:92:cc:7c:cf:72:54:fc:79:a6:3d:
         c3:68:33:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:58:04 2025 by rpki-client