Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7075b284-d0d8-4bff-87f8-41ba3b788b3d.roa
File:                     7075b284-d0d8-4bff-87f8-41ba3b788b3d.roa (raw, json)
Hash identifier:          j6BNe1zlAeoxDTS4nxXInT9G+PZQuIwcPpnkoKiF9qA=
Subject key identifier:   AD:22:7F:27:90:D8:6F:F6:38:95:22:B1:B8:F3:52:92:53:8D:59:51
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       5563E29E7AF8F2EEAF96618E4F1E3FDB13F17A78
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7075b284-d0d8-4bff-87f8-41ba3b788b3d.roa
Signing time:             Tue 03 Jun 2025 15:10:13 +0000
ROA not before:           Tue 03 Jun 2025 15:10:13 +0000
ROA not after:            Tue 08 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        13.228.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:63:e2:9e:7a:f8:f2:ee:af:96:61:8e:4f:1e:3f:db:13:f1:7a:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jun  3 15:10:13 2025 GMT
            Not After : Jul  8 23:59:59 2025 GMT
        Subject: serialNumber=650bbe942df35023b279c03aa265cea67d46fa676a8610b8eca860533e351fca, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:1a:75:f4:b8:81:10:83:98:53:b7:c2:ee:93:
                    56:a3:d9:12:21:c9:45:81:15:78:48:c3:88:01:9a:
                    c6:40:00:c0:14:59:11:09:be:06:00:0e:87:fd:0b:
                    95:25:16:24:21:e6:c0:68:12:66:9d:d9:ae:e2:00:
                    25:78:58:1f:d8:4a:39:91:e2:e4:95:80:62:c8:e0:
                    a8:31:e4:29:b3:a3:f3:f1:d8:90:a3:48:04:98:23:
                    26:18:32:06:ee:6d:0e:a1:57:bf:26:89:6a:36:33:
                    b3:48:97:fc:82:32:30:86:e7:a0:15:6d:92:2b:47:
                    56:a3:e6:a2:5a:3a:b6:24:70:12:0f:3c:34:fa:7b:
                    a6:c5:1e:a1:41:ac:b2:cf:58:f7:69:3e:1d:41:93:
                    c9:ed:72:56:7a:4f:01:bc:fb:c1:19:93:bc:40:68:
                    4e:7f:da:27:67:df:ca:db:99:f2:a4:cd:63:c0:38:
                    ad:2b:6a:5b:ac:0a:a3:13:2f:3f:9b:49:5c:c5:d8:
                    77:cf:9e:98:10:f9:5b:c8:33:5c:fb:dd:3e:d1:33:
                    9b:52:fe:ca:c4:96:f0:9d:3e:40:22:b9:22:59:ca:
                    d0:77:6c:c7:d6:ac:04:c1:b8:87:a5:29:81:e9:b3:
                    30:d6:74:64:33:e7:06:13:b9:0f:0d:18:84:44:bd:
                    92:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:22:7F:27:90:D8:6F:F6:38:95:22:B1:B8:F3:52:92:53:8D:59:51
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7075b284-d0d8-4bff-87f8-41ba3b788b3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.228.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         78:dc:35:78:44:45:95:05:c8:41:dd:d0:0c:3c:28:14:a2:48:
         96:19:1e:48:55:d1:0e:2f:22:fc:6c:d1:9a:bf:f5:82:c4:bb:
         43:a1:73:c8:95:23:f6:a8:12:ec:94:e9:f5:a4:2e:aa:72:fc:
         f5:57:db:9e:bd:8e:9b:7c:aa:68:aa:45:09:d1:b7:3d:b3:dc:
         0c:18:48:b4:79:8e:e2:b1:a8:49:41:17:e6:d9:96:17:99:6f:
         f0:64:6d:23:52:88:93:77:bf:03:1d:72:88:48:47:58:ee:d4:
         4e:d9:cc:a5:a2:57:66:cd:88:a7:50:f1:c4:dd:74:8a:ef:4e:
         2e:f4:bb:c3:69:94:c4:a1:69:d8:c1:d1:18:6d:2f:11:dd:ba:
         d1:64:f1:e5:f3:e1:01:d3:bb:d8:cf:6a:67:3d:ea:c6:0f:88:
         ae:49:e2:63:d4:37:e0:b1:fe:b4:6e:83:bc:43:7f:33:1e:ad:
         22:22:1e:c4:8d:8a:35:26:f4:8a:90:bb:1d:44:57:7c:03:25:
         1d:bf:3f:86:fa:34:20:3f:5c:70:04:6e:b1:b8:65:7e:80:78:
         d6:4e:b7:10:95:f6:50:91:29:ee:d2:34:93:22:cc:a0:75:cb:
         4e:20:02:2f:94:93:0e:23:fa:c4:9e:92:39:c7:56:60:d4:3a:
         5b:7c:96:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:50:46 2025 by rpki-client