Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/37be519d-0e3d-49b8-b4fa-cb00f7a29ad8.roa
File:                     37be519d-0e3d-49b8-b4fa-cb00f7a29ad8.roa (raw, json)
Hash identifier:          Zof0QYakWpYSYwMZrD6N6JuPirO0/Ka1ORHh/eGdoxQ=
Subject key identifier:   5D:25:4B:69:89:59:61:59:FE:AB:D1:BE:53:F4:BD:9D:14:C0:5B:2F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       793968FEE5D2DEDE7315E3E927B868C070D04149
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/37be519d-0e3d-49b8-b4fa-cb00f7a29ad8.roa
Signing time:             Mon 11 Aug 2025 15:00:15 +0000
ROA not before:           Mon 11 Aug 2025 15:00:15 +0000
ROA not after:            Mon 15 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        104.200.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:39:68:fe:e5:d2:de:de:73:15:e3:e9:27:b8:68:c0:70:d0:41:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 11 15:00:15 2025 GMT
            Not After : Sep 15 23:59:59 2025 GMT
        Subject: serialNumber=8eadc402bf4cae68a52c625323ba2ad7d66298d418bb8e362cb6eb9deca0257d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8a:cb:2d:39:34:1d:81:bb:53:20:c0:45:90:
                    1c:58:db:c0:8c:af:ad:65:9e:61:95:b1:f7:82:09:
                    56:46:82:38:0e:3d:fb:3b:1d:c9:62:a9:14:4a:60:
                    8e:44:88:f0:54:c5:50:dc:af:01:7f:83:0c:dd:63:
                    81:ee:c6:08:33:66:20:1c:c1:92:91:f6:2b:90:c3:
                    88:0a:f6:f8:bd:85:94:bf:b4:0f:23:99:50:ea:b7:
                    90:89:8b:49:f0:33:d7:9c:95:cd:69:4d:bc:57:80:
                    eb:95:15:96:de:4f:bb:3c:95:70:06:15:aa:52:67:
                    6f:13:09:5b:88:b7:6c:39:9f:4d:0f:d3:2d:e0:af:
                    c4:61:fa:cc:ad:19:a2:dc:29:f9:38:3f:39:04:e4:
                    2a:d4:2a:5c:85:cc:c5:75:b5:ee:3e:7f:13:d8:e9:
                    5e:f8:18:ae:b1:e1:8f:8d:06:f3:b9:8b:39:47:77:
                    e4:f2:d0:54:dd:c9:52:eb:de:8d:0b:eb:3f:ae:4a:
                    79:fe:fc:6d:ce:99:d5:af:cc:35:fc:c3:8e:34:fe:
                    c0:7f:13:49:03:e3:16:22:35:30:0b:31:cb:00:e7:
                    f3:2d:36:f9:44:50:47:b2:bf:f2:da:23:db:92:18:
                    0f:4b:dc:c3:a2:a3:a3:f0:60:79:b4:eb:40:98:52:
                    0c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:25:4B:69:89:59:61:59:FE:AB:D1:BE:53:F4:BD:9D:14:C0:5B:2F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/37be519d-0e3d-49b8-b4fa-cb00f7a29ad8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.200.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         87:0c:18:19:05:26:df:7c:b5:f3:2a:00:2c:16:eb:e0:87:f7:
         c3:39:b9:57:f4:b1:da:a5:37:5f:5e:df:31:59:b3:9d:12:20:
         c1:db:d5:cd:5e:9d:b2:1d:37:f3:70:1c:78:59:1a:97:74:93:
         96:1b:0d:62:d8:0a:6e:7b:14:da:2d:6b:5f:8c:3f:2f:97:2d:
         55:14:f5:a9:c1:92:cb:6d:b1:c2:fb:a5:b2:18:b0:b6:23:d6:
         65:8b:a4:88:48:e4:8e:20:4e:1f:ad:c5:67:46:be:3d:f2:88:
         86:39:70:fb:90:2d:1c:72:a9:a2:55:b0:6e:d4:11:99:de:10:
         33:de:31:0d:e8:48:94:0a:e0:d4:7c:d6:e8:61:5f:1c:26:ee:
         e5:8d:56:f1:6c:69:56:94:84:02:c1:a6:4f:fa:9a:45:37:2e:
         a6:08:a2:72:86:cb:29:ec:a8:7a:46:55:31:b6:3e:3b:f0:a9:
         1a:59:25:b3:f1:7e:87:f5:08:c7:28:5f:25:45:46:c1:86:58:
         61:66:b1:e6:85:a8:8f:97:aa:80:3b:85:b7:1e:fa:94:b8:bc:
         2e:5e:9d:06:bb:2f:f7:cb:03:a2:b9:d0:ff:90:56:67:a6:c8:
         ae:f3:33:52:32:32:ba:c8:8a:6e:36:a8:d3:c6:ad:d1:62:0c:
         7c:ec:88:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:43:29 2025 by rpki-client