Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/10032c13-831c-48fa-a992-7e0908da5241.roa
File:                     10032c13-831c-48fa-a992-7e0908da5241.roa (raw, json)
Hash identifier:          PwUHu98p1osy7PVCt9XcRc0AMwB8vLtdObJDEPpHF+k=
Subject key identifier:   12:2B:D4:C7:53:B0:A6:77:75:B5:B5:E3:A5:09:B7:1F:B5:B7:7F:AF
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6FD15060C2D5589EE45BC2142D1862FAB2BAF38E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/10032c13-831c-48fa-a992-7e0908da5241.roa
Signing time:             Sat 21 Jun 2025 00:21:05 +0000
ROA not before:           Sat 21 Jun 2025 00:21:05 +0000
ROA not after:            Sat 26 Jul 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        192.43.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:d1:50:60:c2:d5:58:9e:e4:5b:c2:14:2d:18:62:fa:b2:ba:f3:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 21 00:21:05 2025 GMT
            Not After : Jul 26 23:59:59 2025 GMT
        Subject: serialNumber=0d742a2490124d21883ad947fed44563008ccb00ffee6279ff14abb0284e7cde, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ee:44:46:2a:3e:25:f0:39:6c:4c:3b:e7:63:
                    0e:aa:dc:4f:27:a5:79:96:26:0f:d2:b2:50:4e:a4:
                    81:6e:6d:7e:20:e9:2c:13:36:da:5d:1e:4f:58:8a:
                    42:3e:2c:d2:ae:64:3b:86:c7:6f:d8:5b:22:7d:4f:
                    c0:f9:39:a4:ba:4f:ff:d5:ff:02:45:2c:e7:84:87:
                    16:d0:4a:ba:2e:84:1a:17:a6:c6:c5:82:2a:65:aa:
                    17:e1:4e:a4:e8:c9:8b:cb:72:a5:08:03:83:bb:43:
                    be:2f:13:f8:c8:82:65:27:52:30:37:21:44:f1:b9:
                    48:ff:4b:bc:97:46:d1:8d:18:5a:df:d3:4e:c9:14:
                    96:8f:61:84:b3:dc:d3:7d:14:7f:ed:fc:fd:dc:de:
                    cf:4d:68:b5:e4:ae:ea:16:e5:d9:36:ce:10:ea:cb:
                    34:c2:7c:c3:0a:9d:37:36:0f:4c:78:52:3c:69:f2:
                    be:0a:72:1f:f8:7b:a1:9a:86:21:e9:01:d2:ac:ba:
                    d2:78:76:aa:84:7b:12:31:29:30:4a:f6:2d:59:15:
                    23:22:17:16:ba:99:b4:e5:e5:12:62:50:63:26:01:
                    09:38:f0:26:58:d3:56:61:10:29:15:a6:59:31:a7:
                    8c:50:08:13:92:0b:de:95:81:80:c8:19:66:11:70:
                    c3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:2B:D4:C7:53:B0:A6:77:75:B5:B5:E3:A5:09:B7:1F:B5:B7:7F:AF
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/10032c13-831c-48fa-a992-7e0908da5241.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:5a:bd:f6:be:29:d3:91:31:ca:d4:a5:e7:79:c4:1d:bc:3c:
         ce:c9:23:f2:20:50:98:ac:d5:f8:6d:e0:39:ab:51:d0:9a:bc:
         2b:7f:45:51:c4:0b:02:82:39:04:a5:ad:35:c7:f2:c6:6a:40:
         0a:c4:8d:7b:70:a2:3a:9d:71:bd:6c:18:0a:f2:15:35:04:a5:
         c0:16:35:6c:c7:f0:ee:e7:bb:d4:b4:36:fe:65:2c:d8:ba:5f:
         5c:fb:32:cd:5d:27:3d:24:04:6c:d4:e7:60:df:75:99:7d:ce:
         33:6f:45:7e:02:43:3a:d5:71:6e:24:d0:09:e4:a0:73:69:e1:
         69:11:da:e3:cb:d6:8d:d1:7e:5d:f4:7d:89:5a:38:5c:c9:75:
         de:ee:1c:c9:e3:9c:1e:f6:dd:36:65:73:36:77:ad:ce:cc:5a:
         43:98:67:04:cb:ce:3a:59:65:ab:e2:7b:0f:e5:76:80:80:13:
         c8:2f:d2:d2:63:2e:b1:34:e5:65:d6:c5:34:87:74:9e:a2:91:
         ef:f3:47:0a:80:89:52:cf:14:7e:ee:18:a1:c5:58:77:ed:80:
         b3:3f:c9:ca:33:c4:03:e0:ce:2d:18:a8:4b:df:cc:b9:a5:27:
         06:cb:69:bb:a1:bb:b5:1b:1f:a0:c3:df:06:25:50:d9:42:57:
         f0:40:ea:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 23:44:51 2025 by rpki-client