Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4b05e238-05bc-4024-8f4e-9e39e735bfb9.roa
File:                     4b05e238-05bc-4024-8f4e-9e39e735bfb9.roa (raw, json)
Hash identifier:          UqeqLynASvU4s4CvH/+ghhadkL1fww4E3IYXD0HOocs=
Subject key identifier:   E1:F3:2C:DD:2D:7E:39:84:9A:E9:16:E6:BB:5B:69:0B:7B:6A:CC:15
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       274CD7D172C241184AC49434173498683353B828
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4b05e238-05bc-4024-8f4e-9e39e735bfb9.roa
Signing time:             Fri 22 Aug 2025 00:31:19 +0000
ROA not before:           Fri 22 Aug 2025 00:31:19 +0000
ROA not after:            Fri 26 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        216.246.196.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:4c:d7:d1:72:c2:41:18:4a:c4:94:34:17:34:98:68:33:53:b8:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 22 00:31:19 2025 GMT
            Not After : Sep 26 23:59:59 2025 GMT
        Subject: serialNumber=67ba0ae743f3247434df3f46892ec6f684922676af7a48d86a54c4635282042a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b9:b0:c5:7b:92:14:0e:0d:fe:d0:30:08:9e:
                    50:92:5a:fa:44:12:b5:ed:ce:ba:73:22:7e:54:92:
                    cc:22:46:7c:64:e0:35:d7:21:41:ab:59:f9:a1:33:
                    f5:90:e8:76:ea:c3:04:04:35:e8:9f:f9:d1:b0:53:
                    04:c6:7b:89:39:98:08:4c:01:ad:a9:19:79:1c:6a:
                    c4:6a:d6:bb:65:8b:4a:81:e7:61:15:37:5d:b2:cb:
                    92:b5:b3:b0:9f:da:87:6a:04:70:2a:ae:c0:0c:d6:
                    c7:93:7b:fc:ef:e4:92:19:38:8e:c7:67:b4:0b:66:
                    98:3b:34:09:08:d5:f0:7c:9d:af:e3:16:d7:53:99:
                    b7:ac:65:1f:c4:ff:97:47:92:c9:de:e9:d4:e9:72:
                    1e:89:04:7c:a2:46:81:ae:86:9a:2f:96:76:c3:57:
                    00:41:b3:49:6f:4e:0c:9c:a0:41:96:0f:dc:32:bf:
                    59:c9:f4:62:79:71:47:3b:7a:7f:35:9f:5e:5f:30:
                    20:e3:93:57:f5:6d:9e:fa:a8:e2:f5:c8:ab:7c:9f:
                    87:d8:d3:4f:66:09:73:f0:de:d0:63:ae:d9:5f:59:
                    02:25:21:6d:9c:56:0d:4e:b4:d7:c9:ae:67:16:1f:
                    1f:1f:e9:d7:92:00:99:0f:f0:0f:a2:60:28:10:85:
                    92:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:F3:2C:DD:2D:7E:39:84:9A:E9:16:E6:BB:5B:69:0B:7B:6A:CC:15
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4b05e238-05bc-4024-8f4e-9e39e735bfb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.246.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:ae:12:5c:78:9b:6f:cf:ad:e2:3a:09:11:42:75:be:b5:55:
         6f:1f:6b:4c:e8:2a:6a:3e:df:8a:67:57:60:84:d0:35:ef:16:
         12:ee:80:48:23:56:a1:2a:ed:16:37:e1:c2:ac:ba:62:ae:fa:
         a9:a7:de:15:b4:ab:98:3b:e8:18:70:af:c9:50:59:26:72:20:
         c0:72:c3:00:9d:78:53:7b:60:d5:d8:60:fe:63:a6:6c:f1:4d:
         bc:0c:17:00:94:d8:7f:e8:8c:eb:f7:2b:90:23:3d:27:c4:74:
         7e:93:c0:af:b8:c2:da:64:65:81:9a:9f:3f:34:f9:60:5b:b5:
         6b:2b:fa:38:2b:bd:69:e2:5f:97:68:60:c3:72:9c:04:b9:5c:
         5d:7b:b0:64:5f:4e:e5:5b:11:9e:32:bc:34:aa:a4:12:dd:15:
         64:1b:2c:42:1e:4e:1a:08:05:24:87:b1:fb:e5:6c:03:ac:2a:
         39:f2:9d:b9:8e:d5:06:67:d8:3e:7d:06:f5:36:7e:81:ed:37:
         47:82:32:e3:0f:0e:0c:e9:d1:65:03:a5:ec:27:60:f7:8d:a6:
         70:19:a8:7c:dd:26:16:68:14:a6:39:9b:b1:94:3b:e0:e3:ae:
         c8:4f:ce:3f:c5:b7:8d:92:cd:37:71:af:ca:77:04:b1:73:d6:
         e3:52:24:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:47:28 2025 by rpki-client