Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2753f989-5094-40f6-9952-e005b9c4f0d6.roa
File:                     2753f989-5094-40f6-9952-e005b9c4f0d6.roa (raw, json)
Hash identifier:          yLyn1PjhRqW5hFecMcS1t3x0IwsSOnJ9XbTeiQY9K/U=
Subject key identifier:   FC:60:50:54:58:87:B5:E6:50:DB:6A:12:93:F2:7E:62:F0:92:00:DC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       50930ABC183A41BB1D99CA1A49302B099B90A26F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2753f989-5094-40f6-9952-e005b9c4f0d6.roa
Signing time:             Sat 16 Aug 2025 00:31:38 +0000
ROA not before:           Sat 16 Aug 2025 00:31:38 +0000
ROA not after:            Sat 20 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        44.192.0.0/11 maxlen: 11
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:93:0a:bc:18:3a:41:bb:1d:99:ca:1a:49:30:2b:09:9b:90:a2:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 16 00:31:38 2025 GMT
            Not After : Sep 20 23:59:59 2025 GMT
        Subject: serialNumber=1cad2128af216abe6483e98c47204fab7036dc981fc47678e9b37a6dd77f377a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4b:b7:75:bb:86:41:5f:da:01:4e:6f:16:e8:
                    11:e1:39:8f:e7:6e:69:86:75:ac:d9:4a:da:7d:90:
                    7e:df:6c:a2:fb:c2:0c:e6:73:7e:a7:da:b1:d3:ef:
                    a2:4a:af:4e:bd:66:14:f9:70:d8:a7:a9:73:1b:af:
                    b8:78:8d:cb:30:8e:36:81:db:dc:a2:1d:12:60:56:
                    ab:7b:cf:5d:b7:db:6a:66:d2:ae:db:7b:23:5e:f3:
                    88:8a:72:8d:b9:dc:8d:11:81:d0:19:1a:94:ba:71:
                    5b:fc:ca:52:c1:e6:87:5a:d8:c6:3a:dd:67:11:a1:
                    53:36:a8:3e:22:e4:25:bd:fc:76:85:c2:b1:1e:7d:
                    73:44:7c:38:3e:ea:9b:4d:84:c7:8a:ed:3e:b6:58:
                    9f:c3:4c:5d:4e:d6:dc:f8:55:e3:0d:80:32:34:3e:
                    24:99:5a:13:de:6a:90:5c:1b:9a:5e:9d:9d:e2:be:
                    b2:10:f8:91:03:3e:52:6a:0e:a8:29:87:46:86:25:
                    36:03:d0:0a:31:59:20:55:68:b8:ff:81:80:57:05:
                    f9:0e:94:c9:78:01:b2:83:4c:a7:cb:ee:40:64:24:
                    17:e2:ed:b8:25:7c:55:35:12:13:02:67:d7:3a:36:
                    df:2b:95:1d:bd:d9:59:3d:b0:35:ce:70:e5:db:9d:
                    c7:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:60:50:54:58:87:B5:E6:50:DB:6A:12:93:F2:7E:62:F0:92:00:DC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2753f989-5094-40f6-9952-e005b9c4f0d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  44.192.0.0/11

    Signature Algorithm: sha256WithRSAEncryption
         53:15:3b:bb:77:01:68:c7:47:41:7b:b5:94:d4:92:1f:55:16:
         79:1e:b1:8a:6b:67:bb:fc:64:86:7a:f0:72:2a:39:99:84:08:
         6e:9c:62:57:b5:53:7f:d9:98:16:83:02:e0:06:f4:39:7a:27:
         78:0e:48:22:53:b8:a4:ae:42:57:f6:6c:a8:42:33:f3:80:c5:
         9e:61:bd:12:4f:5b:16:58:29:5d:55:e4:2f:39:7e:b0:3a:55:
         a5:8d:06:ee:5b:03:6e:fc:51:e2:b1:c1:43:18:aa:9b:dd:5e:
         f9:50:af:25:39:18:a2:39:0e:bb:35:8f:78:d5:62:81:f5:94:
         bd:d0:88:d0:26:c9:15:d1:6d:0f:27:77:ba:67:8d:92:da:45:
         c5:7b:3b:1c:fb:c5:20:ba:2e:1c:de:a3:cf:8c:f3:73:a1:4a:
         8d:05:93:86:f2:67:63:af:a0:bb:46:a9:33:56:0f:34:63:f1:
         46:4a:18:77:22:cf:be:c2:6b:1c:5e:fc:68:33:c0:1f:a4:07:
         40:e8:c4:8a:6a:ff:8e:bf:6f:08:9b:2a:f9:ed:42:62:ec:83:
         6d:4d:9f:ea:85:78:e5:f9:a0:bd:b4:7b:9b:e3:40:7f:c9:48:
         50:71:31:7d:23:3e:8d:de:a4:c8:a1:6c:ef:4a:6c:a3:4d:6e:
         3d:2f:3f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 07:00:37 2025 by rpki-client