Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d5d712a6-1314-4d20-bd2f-b4203fe2fe3d.roa
File:                     d5d712a6-1314-4d20-bd2f-b4203fe2fe3d.roa (raw, json)
Hash identifier:          FMJ4FALtGVFSKwBxXc4eK1kRq5rtQYL7fVKFKwQ6kqI=
Subject key identifier:   A7:88:A6:88:E8:FF:AF:A5:12:75:D1:B4:AD:B7:D9:7D:8F:FC:74:BC
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       139637776E6F2FCF32E7736379B070316DCC174E
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d5d712a6-1314-4d20-bd2f-b4203fe2fe3d.roa
Signing time:             Mon 09 Jun 2025 17:10:21 +0000
ROA not before:           Mon 09 Jun 2025 17:10:21 +0000
ROA not after:            Mon 14 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.239.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:96:37:77:6e:6f:2f:cf:32:e7:73:63:79:b0:70:31:6d:cc:17:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jun  9 17:10:21 2025 GMT
            Not After : Jul 14 23:59:59 2025 GMT
        Subject: serialNumber=ffa508f48c7bd68c15613b6c87b8af3ca73670cfa0991a3148df99e4486fe4ad, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:54:da:9c:c5:82:cc:7a:96:ca:bf:8a:c4:1f:
                    cb:3a:a8:db:b9:53:4e:f6:c6:b7:4d:50:96:3a:5c:
                    2d:f0:4e:ac:e0:53:45:d8:b7:60:fb:78:dc:b2:e0:
                    fa:ae:3d:ca:d2:9a:bf:c1:50:03:10:d8:55:54:31:
                    c6:54:3d:68:27:58:1f:12:67:6a:05:e1:28:a8:84:
                    f2:74:5a:1f:0d:c8:b8:a7:b1:fe:f8:80:56:80:17:
                    85:8e:a8:b5:60:e5:58:cd:e4:1d:e8:ee:3c:c7:aa:
                    7b:ae:cd:1c:29:1a:c9:5b:f3:36:01:af:da:96:2e:
                    61:36:f6:87:77:07:06:e8:f8:dd:58:9b:34:f6:1a:
                    29:9d:1c:99:9d:2a:c5:78:08:a9:0e:19:97:2e:eb:
                    4b:52:31:07:de:78:3c:11:72:11:43:10:4b:b4:0c:
                    79:b8:a9:5c:78:fa:d9:f8:e9:4f:19:a9:41:1a:41:
                    77:4e:64:45:e3:82:c8:97:c1:14:da:83:4e:b0:e3:
                    64:05:30:28:52:2d:03:20:7b:94:a4:4f:ff:85:1c:
                    0d:ae:44:f9:58:fc:95:c9:28:1c:c9:28:bf:c8:79:
                    76:6b:cd:5f:c9:47:06:39:e8:d2:0f:92:38:5d:56:
                    91:90:9d:4d:10:19:c2:f0:bc:b6:1f:fb:eb:86:51:
                    94:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:88:A6:88:E8:FF:AF:A5:12:75:D1:B4:AD:B7:D9:7D:8F:FC:74:BC
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d5d712a6-1314-4d20-bd2f-b4203fe2fe3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.239.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:35:bf:c9:c5:2f:b8:69:bb:4d:2e:50:df:81:2d:14:06:3c:
         de:c8:08:e0:cf:74:c0:7a:89:01:df:1b:42:3a:5a:1e:03:ed:
         79:1e:0f:8d:fa:8b:28:18:8e:10:28:c8:a1:8c:55:29:ca:85:
         f2:12:c4:d0:d0:cb:88:6f:ec:22:d3:73:f0:a5:a8:15:0a:1b:
         66:75:d2:71:bc:c2:59:a5:03:7c:8e:d7:5d:8a:13:5e:0a:5b:
         30:6a:63:86:99:d1:ed:cc:b3:ca:e5:54:09:ad:d3:87:bf:58:
         a1:b5:dd:da:42:71:b2:47:ff:b0:af:91:52:f7:f2:c8:f3:ab:
         83:8c:69:20:1e:15:5f:d9:ec:61:98:c0:9a:30:20:1f:fc:ad:
         23:7f:d2:21:9a:51:ba:92:e6:f2:fe:53:40:5d:a4:d1:e8:30:
         e4:3e:fa:b4:9e:39:f6:7d:cb:5c:ed:f1:a5:cf:54:89:81:9a:
         5e:3b:58:61:1d:ba:30:e0:42:cc:b7:83:81:3a:5f:77:b6:e7:
         85:2d:b7:20:ff:c0:b8:41:af:18:3c:b3:88:8f:d5:16:4d:2e:
         27:c4:b5:3e:6a:0f:20:ef:32:e8:67:b6:89:ca:f4:0b:cb:07:
         98:f4:6f:51:6d:c5:ea:0a:12:dc:a6:6e:df:a0:c4:6c:93:c9:
         f2:e2:62:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:51:46 2025 by rpki-client