Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b152b0f5-58c4-45c7-8a4c-5db9a0ff8f4d.roa
File:                     b152b0f5-58c4-45c7-8a4c-5db9a0ff8f4d.roa (raw, json)
Hash identifier:          b5pHsGOmLwb+bijFINXgHH3SkwK5V2NFJ+VDuGs5Ah8=
Subject key identifier:   ED:D5:28:32:DF:31:4F:1C:0C:F1:F2:8B:3D:60:E5:A4:85:71:BE:D6
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       6D54F853940F74A10BBF1EFDA0A8618BBB46D691
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b152b0f5-58c4-45c7-8a4c-5db9a0ff8f4d.roa
Signing time:             Mon 09 Jun 2025 19:11:29 +0000
ROA not before:           Mon 09 Jun 2025 19:11:29 +0000
ROA not after:            Mon 14 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.247.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:54:f8:53:94:0f:74:a1:0b:bf:1e:fd:a0:a8:61:8b:bb:46:d6:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jun  9 19:11:29 2025 GMT
            Not After : Jul 14 23:59:59 2025 GMT
        Subject: serialNumber=4724a7343f737c186dfea98d77d4602af86a3db409edd338857c278fd8d8f5a5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:df:58:cb:e9:65:6e:ba:9a:61:59:f8:9a:c2:
                    20:25:4b:f6:a9:ac:c7:c2:00:9b:f8:02:12:65:7e:
                    01:61:20:5b:db:17:8d:f2:d7:21:01:4f:9f:fc:c2:
                    8e:16:64:d1:87:20:79:5a:1a:e3:f2:4b:e7:9c:61:
                    21:a3:56:1e:e3:7c:83:8b:e4:45:69:ae:6f:9d:d0:
                    22:de:06:1e:ba:52:39:77:7d:33:44:0b:b0:2c:8d:
                    c0:f2:77:27:12:13:85:fb:8d:47:af:84:46:3a:34:
                    08:bb:26:17:8e:22:7a:bd:a2:28:6c:83:4a:85:7d:
                    a0:2d:5a:51:d7:2d:64:36:db:29:24:7c:39:29:44:
                    d2:c1:d4:27:3e:d9:43:0b:22:00:34:53:f7:09:d4:
                    db:dc:07:cb:48:e8:ab:a6:23:79:f8:3a:55:e2:27:
                    69:16:3a:79:9a:c2:50:5a:27:85:8b:5c:36:e5:50:
                    2f:63:ee:95:bf:43:e2:5d:86:ed:90:ed:95:cf:a3:
                    b0:75:17:45:16:53:dc:f1:54:84:23:5b:ac:07:c5:
                    15:b6:59:5c:5a:d3:02:5c:43:a4:30:4f:23:67:4d:
                    9d:f9:fa:aa:13:f0:81:2c:c2:95:8a:80:43:cb:f7:
                    83:28:31:9b:15:84:74:9a:89:e8:c4:98:09:97:07:
                    98:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:D5:28:32:DF:31:4F:1C:0C:F1:F2:8B:3D:60:E5:A4:85:71:BE:D6
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b152b0f5-58c4-45c7-8a4c-5db9a0ff8f4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.247.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         67:ba:8a:d2:ff:50:68:43:0c:de:30:f0:2f:ef:a6:db:a2:85:
         d0:0f:c0:6f:2e:e4:97:7e:e7:94:36:77:f1:98:49:d4:51:51:
         50:52:19:2e:53:d7:c8:93:71:40:43:f2:a7:d4:58:82:3f:fd:
         d5:a9:57:eb:0b:ca:5e:80:3b:56:e7:c3:83:1c:f8:15:ca:40:
         4e:b9:89:8f:5c:ec:50:45:ca:b2:8d:71:de:30:8e:03:05:bb:
         25:f4:e9:b3:ba:5c:14:2c:d6:5b:25:5c:4b:62:69:9a:b9:a5:
         32:41:ea:d5:84:39:83:24:1a:3d:81:39:9b:e0:2a:5f:52:9b:
         59:a5:82:0f:35:29:c3:70:fb:19:6f:0b:bd:0b:10:a4:f8:17:
         59:21:69:3d:b0:e1:ef:10:8b:3b:96:38:bc:08:94:b1:f1:30:
         8d:fd:a0:47:18:f7:09:da:33:90:6a:53:da:b7:14:40:b4:a6:
         80:75:9e:45:fb:23:40:e4:89:1b:d6:3f:eb:8d:2f:9a:db:c9:
         13:00:64:56:92:06:80:d0:31:e5:9f:ae:a3:0f:ff:6b:77:a0:
         9c:a4:37:e3:a4:bb:59:30:fd:80:5d:09:a1:da:30:3b:3b:15:
         f5:da:6b:a9:d5:44:f0:5d:e3:16:b6:a1:c9:96:d0:96:df:19:
         70:a6:5a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:42:29 2025 by rpki-client