Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4f0b048d-2305-43d3-a474-0e095ab7e09b.roa
File:                     4f0b048d-2305-43d3-a474-0e095ab7e09b.roa (raw, json)
Hash identifier:          V6XA1ghGWIZKSJ4T7eejUaW/kqDME4cYXaexi8lh/hs=
Subject key identifier:   C0:F7:53:2D:38:EA:C3:C6:67:FA:44:1D:A4:AA:CF:F1:7D:93:9B:AB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6C6DB6CEF3B22AC64FA4BB45CD54AD994983C1F4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4f0b048d-2305-43d3-a474-0e095ab7e09b.roa
Signing time:             Sat 10 May 2025 00:21:40 +0000
ROA not before:           Sat 10 May 2025 00:21:40 +0000
ROA not after:            Sat 14 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        69.53.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:6d:b6:ce:f3:b2:2a:c6:4f:a4:bb:45:cd:54:ad:99:49:83:c1:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 10 00:21:40 2025 GMT
            Not After : Jun 14 23:59:59 2025 GMT
        Subject: serialNumber=b1a557608e9dae7963c85258de7b3ae301dbda68ad53ea75bc6ec8feb9c287c1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e0:30:3f:58:56:98:82:47:a0:ce:ba:2c:09:
                    c0:ae:5c:b5:54:00:db:b7:07:60:9f:75:2b:28:45:
                    0b:4e:2e:88:13:72:07:88:57:f0:13:b8:16:b7:94:
                    44:0f:9e:60:36:a1:ac:28:a3:5e:5f:df:59:e6:93:
                    50:b8:c4:b5:3c:fa:c3:69:49:8e:b7:1c:e5:40:99:
                    2b:10:1b:00:a6:c4:b0:0c:98:14:04:7c:3a:a8:7f:
                    1a:77:4e:df:03:6f:eb:15:0d:0b:4e:29:11:19:d8:
                    bc:f0:23:47:f5:04:05:4c:4a:8d:d2:a4:3f:4a:3e:
                    c6:81:27:56:d0:5b:92:0e:26:10:88:85:fa:2f:fc:
                    a8:99:28:7c:75:cc:ad:ae:bd:a0:91:c4:02:3d:b3:
                    14:b4:53:34:10:c4:e0:54:48:c2:0b:2d:4f:26:99:
                    87:49:17:b5:ea:aa:e0:fe:a3:55:ce:cf:f9:07:fd:
                    9e:98:e9:70:2b:3f:af:79:ce:d3:99:0c:f1:e9:7f:
                    0e:bf:29:5f:8f:89:58:08:61:af:f6:63:2f:5d:57:
                    81:d7:da:97:d1:25:20:c3:3a:0b:5f:31:4f:ce:f1:
                    4e:74:c7:5e:21:5e:99:0b:8f:7d:4c:71:2d:4e:bf:
                    0a:e3:64:94:64:7b:77:17:3a:fd:ba:3c:60:d3:d5:
                    90:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:F7:53:2D:38:EA:C3:C6:67:FA:44:1D:A4:AA:CF:F1:7D:93:9B:AB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4f0b048d-2305-43d3-a474-0e095ab7e09b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.53.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         17:07:d5:ba:1e:b1:d1:03:8b:3d:63:2f:65:c3:27:03:30:e9:
         a5:9a:5e:3c:ba:6c:73:10:e1:05:cd:ca:84:7c:da:37:bc:70:
         b7:dd:a1:39:da:18:5f:8b:67:f0:99:e5:32:4b:b4:8a:b8:a1:
         cc:2d:33:50:7d:13:db:f1:fb:0a:32:31:b8:2b:f1:7b:1a:74:
         6d:04:f0:8c:16:ae:d0:74:05:7e:a4:5d:b1:bc:22:e9:0f:6c:
         30:76:8d:5f:c8:12:ac:98:cf:d7:6f:a8:75:bf:87:d3:6d:aa:
         62:2a:41:be:05:47:fc:2d:07:26:ff:9e:4d:3a:76:1c:c4:e3:
         df:58:f7:ce:96:23:bc:52:e0:97:92:6e:90:04:b2:33:b0:9c:
         11:15:66:1f:53:c8:f4:d5:bc:3d:39:3b:bb:30:78:15:b4:0f:
         9d:24:78:e7:37:7f:2f:b2:8a:ee:f7:6d:c1:c9:61:43:23:af:
         ea:6d:c7:74:75:dc:30:a9:70:dc:ab:58:ea:f9:70:00:f0:ea:
         36:1f:72:84:82:3f:81:d7:05:5a:f7:68:e9:96:04:59:b9:b9:
         30:b1:2d:80:f2:48:ad:ea:58:b4:8d:e3:0f:3f:6b:53:06:ab:
         b2:d4:87:e3:f5:fb:be:12:90:ed:f8:3b:cc:04:14:2b:76:a5:
         dd:3b:d8:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 04:53:48 2025 by rpki-client