Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e2f91278-8951-4ed9-bea5-7300ead84196.roa
File:                     e2f91278-8951-4ed9-bea5-7300ead84196.roa (raw, json)
Hash identifier:          ixWktOM9AhQ+NQ6btZXyrlmeBgzsihKAK1+/QVoB5Bc=
Subject key identifier:   B3:AF:B0:54:E3:FA:D9:33:96:8E:E6:DE:C6:62:73:3D:6A:43:CE:9B
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       7FACE3CF42BA3A4D2AC4C523F8689A2F790D24B9
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e2f91278-8951-4ed9-bea5-7300ead84196.roa
Signing time:             Mon 09 Jun 2025 16:41:16 +0000
ROA not before:           Mon 09 Jun 2025 16:41:16 +0000
ROA not after:            Mon 14 Jul 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        54.204.52.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:ac:e3:cf:42:ba:3a:4d:2a:c4:c5:23:f8:68:9a:2f:79:0d:24:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jun  9 16:41:16 2025 GMT
            Not After : Jul 14 23:59:59 2025 GMT
        Subject: serialNumber=55de1694df373d1bbeb222f098e92486229c9be3500a0a4a6103333b291c6cad, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d8:db:bf:b9:91:3b:f7:48:da:00:cc:56:a7:
                    9e:96:01:8f:d3:8c:fb:a5:31:20:ca:af:43:65:63:
                    6e:ab:13:89:57:cf:16:c0:cd:af:43:f3:d9:d5:25:
                    c3:6c:41:78:01:32:0a:cf:fc:e9:59:27:30:e5:bc:
                    3d:f5:80:a3:8e:ed:f0:14:fc:e8:f2:1d:6a:18:26:
                    fd:9d:19:45:5d:26:d7:12:50:4b:0a:e0:69:c0:f2:
                    1c:56:38:47:77:94:4e:6f:8d:0f:64:a9:41:11:26:
                    fb:79:fa:d1:c9:5b:75:3e:b7:f3:e1:e8:0c:f1:b8:
                    30:19:d7:cb:cc:38:64:bf:3c:d3:f8:06:86:9f:3a:
                    b4:45:d9:30:c3:67:5f:ff:3c:a0:9d:d9:81:27:08:
                    23:86:21:c8:a9:4c:e6:af:71:27:90:f1:b9:2a:95:
                    e5:9f:38:11:53:28:c0:69:12:b6:e6:c5:b8:2a:aa:
                    fa:96:e1:67:fe:9c:10:d7:b3:e8:49:f3:98:22:f5:
                    c4:91:9c:ba:dc:7d:9d:f8:f6:f3:3e:c4:43:a0:0a:
                    ad:9c:ac:ec:d8:82:ac:42:d8:d2:5d:d3:cb:f9:78:
                    40:4a:65:6a:ea:a7:1d:ba:55:37:dd:c0:17:30:98:
                    e2:29:e6:fa:ea:87:5b:ed:5b:d8:16:9e:43:f0:e5:
                    ed:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:AF:B0:54:E3:FA:D9:33:96:8E:E6:DE:C6:62:73:3D:6A:43:CE:9B
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e2f91278-8951-4ed9-bea5-7300ead84196.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.204.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:5d:88:aa:07:da:21:15:37:e9:e5:7a:bd:60:e2:b1:73:02:
         53:1f:8e:ac:a6:85:dc:98:3c:3b:bb:e2:68:36:7c:8d:4b:19:
         ac:4f:c6:3a:3c:e5:d5:c9:73:11:12:9b:c7:b9:76:bc:a5:b0:
         f4:1d:c5:66:14:55:40:98:5a:a3:ea:65:fb:0c:6c:33:e0:b8:
         b7:78:ca:04:ef:97:6c:1d:f4:ff:a0:0a:c7:2a:1f:9f:b5:f0:
         31:f6:b8:5a:18:fc:ec:d9:21:3d:98:cc:ed:b1:aa:18:82:51:
         15:84:c5:e3:78:66:d6:0c:8b:80:08:0b:33:a6:e1:98:9b:d4:
         ef:9a:30:1a:0f:d5:8c:a6:5e:63:df:01:1a:cb:06:b9:3c:8b:
         12:81:fd:cb:f6:47:aa:57:b5:f0:af:7e:d5:45:8a:74:5f:b8:
         88:2f:ad:18:e4:5b:71:fd:cf:f2:c6:e1:fb:1b:aa:b7:54:42:
         02:05:bb:a9:2f:12:51:6f:0b:1c:a1:53:2e:d6:61:d5:7b:3c:
         f4:04:6c:33:e5:40:63:14:d4:42:76:b4:a7:88:86:1d:fc:8c:
         7e:5c:43:6c:4b:d3:66:74:2f:3d:7d:c1:e3:c4:d5:60:6a:f9:
         7d:b9:d8:7a:d4:34:30:23:ae:70:c1:60:9e:98:d7:a7:07:5a:
         69:16:15:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:56:53 2025 by rpki-client