Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/59be11b5-cdad-4d33-8ce3-2cf1e764f2c4.roa
File:                     59be11b5-cdad-4d33-8ce3-2cf1e764f2c4.roa (raw, json)
Hash identifier:          uo7LyOIufFU1LmYRRBhKohZXiVXTZGEn4/YaRFIpidA=
Subject key identifier:   72:28:40:0D:F2:B3:69:E1:EC:5F:71:F5:49:AB:32:4A:60:2A:3B:D0
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       6C37AB593F115FE234F59DB46784E79A396CE49D
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/59be11b5-cdad-4d33-8ce3-2cf1e764f2c4.roa
Signing time:             Wed 16 Apr 2025 00:20:19 +0000
ROA not before:           Wed 16 Apr 2025 00:20:19 +0000
ROA not after:            Wed 21 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        15.177.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:37:ab:59:3f:11:5f:e2:34:f5:9d:b4:67:84:e7:9a:39:6c:e4:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Apr 16 00:20:19 2025 GMT
            Not After : May 21 23:59:59 2025 GMT
        Subject: serialNumber=e47269591d1dbea1ebe9f9949f5288c6ee5f01649a3ce3b45faec79ab6de6227, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:8d:8a:c6:a7:18:b7:38:cf:8a:3b:b1:05:d5:
                    01:84:41:e4:af:4d:ea:a8:25:7c:eb:8d:a4:00:ef:
                    62:8a:b9:7b:d7:1c:5e:2f:dc:f9:97:f2:a8:d0:09:
                    ba:08:19:16:c7:53:00:2f:c1:c4:07:5b:97:d5:b7:
                    66:53:9b:f7:00:2c:57:8a:99:c9:6b:63:36:c5:43:
                    43:d1:a2:67:e3:f8:09:da:d4:c6:23:56:d3:ca:20:
                    28:a3:74:ce:43:df:85:81:f2:cd:5d:d2:79:3f:21:
                    10:16:28:96:25:4e:b7:9c:3a:42:38:42:f1:43:af:
                    f3:f0:5f:21:68:5c:92:01:27:ce:b6:55:4e:bb:f8:
                    a7:4d:88:87:66:b7:1e:bd:7c:8f:44:1c:8e:03:98:
                    90:7d:22:f9:b0:13:6a:b2:8d:ae:e1:db:4a:a4:15:
                    10:fa:ca:21:8f:71:a6:3f:59:c1:f5:54:41:06:29:
                    f2:cc:2c:aa:96:62:dc:44:0b:75:d7:5a:8e:4e:73:
                    96:39:a6:07:5d:e6:1f:fb:f6:c7:86:c5:71:3b:9a:
                    12:53:f9:3e:53:0c:6b:cb:4c:25:ab:34:42:fd:7c:
                    58:e6:c2:f2:a3:39:48:55:02:9c:92:c8:31:e1:b4:
                    86:37:5a:5b:0a:7f:20:ff:9c:02:63:b9:d1:74:77:
                    22:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:28:40:0D:F2:B3:69:E1:EC:5F:71:F5:49:AB:32:4A:60:2A:3B:D0
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/59be11b5-cdad-4d33-8ce3-2cf1e764f2c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.177.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:e6:7c:7f:f1:87:61:f4:d4:50:60:a8:79:07:35:74:02:6e:
         0a:2b:9a:54:26:3a:3a:16:4d:69:3a:98:97:eb:54:c1:88:7a:
         a1:c1:a2:c7:d9:52:31:fe:cd:5f:9f:9b:10:fd:9a:38:48:62:
         2d:08:08:63:df:4a:e3:53:da:90:62:b2:dd:d8:ad:a9:98:5e:
         2d:2c:af:81:7b:38:6c:57:f8:7a:64:17:45:93:fa:90:2c:1f:
         dc:d6:0f:89:5e:55:85:02:53:0b:bd:61:fd:a0:2c:c2:86:28:
         33:4b:03:91:8d:25:fa:b7:13:63:7f:83:cd:f1:37:3a:e5:ba:
         c5:df:4e:96:84:06:a0:fe:5f:ee:66:ad:3d:c7:b1:ff:53:a3:
         bc:20:44:3b:39:51:82:26:42:fb:cb:03:ff:b1:c8:15:19:eb:
         16:fe:1e:af:e9:67:a0:80:5f:7d:a1:09:fd:6d:03:17:11:d2:
         cc:f8:c2:f0:ae:20:75:7c:ff:05:2c:d4:1c:6c:f5:8e:8e:25:
         e7:8a:f4:ed:c8:07:4a:74:bb:17:37:9e:e8:03:d6:08:bd:bd:
         20:67:36:66:9d:39:7e:7a:6a:fb:bd:dc:a3:71:f9:40:8c:4d:
         73:c0:67:84:db:cd:d0:11:ba:40:d7:51:50:82:e7:81:35:5d:
         fb:75:bd:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:37:54 2025 by rpki-client