Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2b5eb1d8-e9c4-4447-adf2-b53583fb1d6e.roa
File:                     2b5eb1d8-e9c4-4447-adf2-b53583fb1d6e.roa (raw, json)
Hash identifier:          rzBom7MJ8oMchvIzsFlAGjmh/7Pi9F2geHKNyUQ9B9M=
Subject key identifier:   06:AF:A5:99:87:DE:A6:2A:C7:A3:C7:12:EA:E0:BC:A8:D6:C9:4F:B2
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       1B60077F9804FF61499F03307E14B86831DF21E0
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2b5eb1d8-e9c4-4447-adf2-b53583fb1d6e.roa
Signing time:             Mon 09 Jun 2025 18:21:43 +0000
ROA not before:           Mon 09 Jun 2025 18:21:43 +0000
ROA not after:            Mon 14 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.251.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:60:07:7f:98:04:ff:61:49:9f:03:30:7e:14:b8:68:31:df:21:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jun  9 18:21:43 2025 GMT
            Not After : Jul 14 23:59:59 2025 GMT
        Subject: serialNumber=088538f346726ac6c0484c1e886962efa492040f5e6d55c627447793166f31fe, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:38:61:8b:8e:f4:4d:a7:5c:b7:47:2c:81:f7:
                    50:b6:46:86:82:fe:7f:eb:0c:2c:df:64:8d:9e:d3:
                    30:95:53:ae:fc:0b:b1:88:8b:56:58:8a:2e:a5:37:
                    e4:ad:66:42:89:1e:a0:d8:4a:44:a4:6d:99:95:01:
                    4a:df:2d:0a:b3:54:3f:df:d2:2b:b6:ab:9f:3e:f6:
                    73:2f:81:fb:96:d3:05:87:19:63:47:70:27:92:6e:
                    ed:83:5c:09:af:a1:bc:c7:8c:0d:1b:72:85:be:98:
                    be:42:e2:33:cd:d0:88:44:de:d1:af:b3:c0:8c:3b:
                    a6:c5:38:79:6d:0a:70:ae:73:dc:49:c6:12:ec:f5:
                    9f:ee:92:a9:07:ed:b6:35:6f:ea:f4:6f:43:87:7a:
                    d4:e5:27:74:4e:2c:88:03:74:05:0a:73:79:db:a4:
                    6c:e5:fd:51:3d:37:92:52:9a:fa:34:95:9b:a6:4a:
                    3a:c3:0c:60:27:40:b2:53:e6:41:b8:1e:27:c6:64:
                    8e:95:df:69:01:0b:86:60:26:70:85:c7:3b:65:7c:
                    85:73:50:36:ef:19:93:9b:4f:f9:26:10:4c:43:5d:
                    f3:10:79:b5:3e:66:b2:c1:6a:a6:3a:1f:b5:32:65:
                    9b:3b:0f:ed:cc:31:3f:bb:6d:f4:75:b3:e2:21:3b:
                    1f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:AF:A5:99:87:DE:A6:2A:C7:A3:C7:12:EA:E0:BC:A8:D6:C9:4F:B2
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2b5eb1d8-e9c4-4447-adf2-b53583fb1d6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.251.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:e6:54:62:1a:97:14:dd:75:0c:d7:b2:63:4b:b2:e0:3d:82:
         01:60:36:ab:5d:5b:38:37:09:bc:f5:0d:69:9d:21:13:50:eb:
         68:73:f9:9f:ab:1b:c2:94:11:66:c3:5e:4c:0c:a4:ac:e7:02:
         b4:fe:45:3a:60:15:33:44:13:55:97:a5:b7:f6:11:1c:82:a6:
         0c:f4:f2:cc:74:96:97:27:55:a5:79:35:33:c2:f5:12:ce:d2:
         73:7f:3f:cf:d0:03:ce:87:91:6d:dd:3f:a8:b9:bb:60:b9:dc:
         14:fc:17:cb:0c:8d:dd:cd:ad:60:d5:3f:d9:14:e7:68:f1:1a:
         43:0d:de:c5:0e:5a:cb:bd:fa:40:77:82:ec:5c:66:a3:9a:27:
         24:33:55:fd:88:ec:64:be:f6:a7:9c:4e:29:20:6b:60:0a:df:
         26:90:a8:47:4b:ab:f1:68:45:0a:18:c9:40:8e:78:4b:f0:30:
         b5:98:fd:73:b0:b9:f4:2b:1e:ba:e0:b4:70:35:93:4a:3b:f0:
         b0:9c:87:16:07:20:4f:83:0a:8b:8e:6a:52:2c:d7:72:d7:51:
         83:6a:76:43:54:d7:cd:2f:f1:b1:ee:87:d4:b1:58:19:7e:d3:
         ef:8f:78:32:42:65:08:a2:e3:48:45:48:03:cf:1e:54:f3:e1:
         1f:0d:26:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:46:41 2025 by rpki-client