Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3076cf1e-83f7-445d-b25c-dfb7b558c7d5.roa
File:                     3076cf1e-83f7-445d-b25c-dfb7b558c7d5.roa (raw, json)
Hash identifier:          37OP8UcCBNB0Yma73heRh6nF9QKwOmUPvYLz2wE4j0Y=
Subject key identifier:   D8:B7:49:09:CB:DA:3A:47:C4:A7:F2:D4:5A:AB:4D:08:FC:E4:3F:DF
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       292F0C725716C86FE3F5CB3CFE95E3A18283012F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3076cf1e-83f7-445d-b25c-dfb7b558c7d5.roa
Signing time:             Fri 08 Aug 2025 00:22:04 +0000
ROA not before:           Fri 08 Aug 2025 00:22:04 +0000
ROA not after:            Fri 12 Sep 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        63.246.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:2f:0c:72:57:16:c8:6f:e3:f5:cb:3c:fe:95:e3:a1:82:83:01:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  8 00:22:04 2025 GMT
            Not After : Sep 12 23:59:59 2025 GMT
        Subject: serialNumber=348496a2c30acd85c9f850a75d23fc5d7181a94e8cfdda89dbfa7ef56e52bb42, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:7b:70:7d:4b:ec:16:1f:37:59:76:07:ac:25:
                    56:a2:23:43:7a:15:3f:ee:cf:a5:fc:74:f8:ad:83:
                    e1:09:6c:0b:18:26:a6:a1:bd:91:3b:e8:6d:4b:10:
                    fc:2d:27:2e:a9:20:be:89:5e:11:c1:25:7d:c8:eb:
                    cf:bf:35:61:3b:0a:fa:c3:1d:6e:23:18:56:a3:eb:
                    e0:6c:d3:eb:a0:fe:67:94:71:fa:dd:8e:92:77:1a:
                    17:4f:34:5d:a1:68:7e:12:af:be:19:0f:ce:72:06:
                    80:f1:76:56:2c:52:46:1b:d0:f6:da:ff:b2:c3:12:
                    15:96:37:7c:a0:8f:72:9d:14:41:20:48:08:a6:66:
                    0c:e6:10:af:92:53:48:2f:be:64:df:90:98:6e:66:
                    10:38:bb:59:0f:a7:d6:36:36:8b:06:cc:1b:95:03:
                    40:35:d8:79:05:7d:d8:f5:be:9d:21:4a:53:52:06:
                    4b:66:27:f6:24:eb:d6:42:41:10:87:3c:32:d5:19:
                    4d:1c:6e:98:ef:45:53:e8:99:fe:8d:48:4f:a2:f7:
                    d1:a5:84:8e:1b:85:33:00:59:42:6f:9d:61:0b:65:
                    a1:8f:06:77:f5:a6:24:1c:33:7a:01:e1:34:b8:be:
                    c4:a2:09:1f:1a:f0:0c:8a:fd:96:7d:d2:44:b7:2b:
                    8d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:B7:49:09:CB:DA:3A:47:C4:A7:F2:D4:5A:AB:4D:08:FC:E4:3F:DF
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3076cf1e-83f7-445d-b25c-dfb7b558c7d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.246.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:96:be:53:be:18:11:82:44:43:cc:87:dd:9e:a6:f0:3b:b3:
         bc:8c:91:61:49:19:94:33:f2:05:17:a4:f8:e2:ca:53:79:af:
         9e:a6:b3:e1:a4:c0:9f:7c:a0:0b:53:c2:6e:2e:54:c5:03:d9:
         54:de:4b:3b:e1:a8:44:b5:56:b0:65:54:0f:0f:71:3c:99:30:
         d2:34:a8:57:7a:0e:c0:94:96:4c:51:cf:e3:f2:e5:01:ec:20:
         c9:e0:bc:31:28:73:69:e9:fd:83:99:4c:d1:1e:c3:a9:23:b8:
         fb:1e:38:45:f5:b7:d5:09:d4:90:5d:90:cb:4e:63:10:3d:5b:
         a9:e0:b9:52:a4:08:ec:cb:95:74:da:60:35:17:92:82:53:2b:
         65:5d:9b:80:f0:18:7e:03:9d:66:84:fe:0d:4e:44:d8:55:88:
         94:a1:0b:2c:c4:7c:87:b4:bc:c4:51:54:26:c2:31:47:a7:5c:
         12:f9:54:9f:7f:82:d9:12:6a:68:d7:e7:d8:20:65:af:ab:19:
         3b:b4:43:40:ec:04:8a:84:7e:2a:70:44:39:bc:90:ac:7a:6a:
         7c:f5:74:61:25:34:62:8f:38:9c:b0:88:aa:3e:5b:69:ec:15:
         fb:d6:a6:71:2e:5f:c7:84:21:fd:d7:d6:55:c5:f1:b0:d8:97:
         ad:de:cb:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:12:16 2025 by rpki-client