Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/570db642-6bdc-4f5f-a286-d6a5418c1967.roa
File:                     570db642-6bdc-4f5f-a286-d6a5418c1967.roa (raw, json)
Hash identifier:          1C3pBRyIJgYo2eqNEHusUKmLyZAjWXgPKcsmxETJr8I=
Subject key identifier:   B2:30:23:27:29:42:DD:A5:DE:31:1B:6F:19:37:5D:24:99:CF:B5:2E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       76D1A0B5C8421FB8910613B96850C600E0C11FED
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/570db642-6bdc-4f5f-a286-d6a5418c1967.roa
Signing time:             Tue 19 Aug 2025 00:20:19 +0000
ROA not before:           Tue 19 Aug 2025 00:20:19 +0000
ROA not after:            Tue 23 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        93.75.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:d1:a0:b5:c8:42:1f:b8:91:06:13:b9:68:50:c6:00:e0:c1:1f:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 19 00:20:19 2025 GMT
            Not After : Sep 23 23:59:59 2025 GMT
        Subject: serialNumber=b17eaa7a338d0774e748c1cf3a008615437fceeb68e47ff9f6d0b1c0bb3d0772, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:aa:f2:64:c1:4f:24:e5:1d:66:86:c4:c9:4f:
                    92:17:87:27:96:e7:c0:fa:73:e6:bd:61:e4:89:8e:
                    f4:53:13:7f:fb:b0:42:46:03:9f:bd:c1:3b:09:da:
                    fc:74:62:58:9b:3e:85:ed:cf:16:64:b4:ae:7e:c1:
                    2e:eb:c3:68:be:13:33:73:21:c2:76:b1:8f:57:98:
                    ef:94:38:60:19:7c:66:95:17:dd:03:86:2e:94:8f:
                    06:23:cd:51:f6:51:4d:c4:0e:d2:de:3c:c9:73:f6:
                    3d:0e:2f:bd:ac:d2:e8:e6:22:6a:42:b5:a7:51:23:
                    5c:71:87:38:7e:52:3f:52:db:3d:5a:52:b2:b7:f9:
                    9d:93:b2:14:d5:41:05:6c:79:a3:bb:e1:9d:b5:f9:
                    6f:a8:e4:f3:03:bc:d4:98:45:35:f4:ea:cd:25:a1:
                    3c:09:ca:d4:c5:f8:70:14:11:16:2b:ae:de:b1:b4:
                    a3:c2:7d:86:ec:1f:03:8a:91:3e:74:85:29:b7:b0:
                    0a:e9:ad:32:6b:48:48:fd:f8:50:06:39:df:49:d4:
                    64:eb:7c:ff:fd:26:2d:bf:e4:a9:cc:c3:65:16:0c:
                    93:44:40:3a:a9:9b:04:e9:fe:42:92:d9:75:69:0a:
                    d5:bb:3f:c4:6c:96:26:f7:93:5b:a7:47:d8:92:e9:
                    ec:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:30:23:27:29:42:DD:A5:DE:31:1B:6F:19:37:5D:24:99:CF:B5:2E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/570db642-6bdc-4f5f-a286-d6a5418c1967.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.75.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         14:3e:26:cd:9d:d0:ef:28:ff:86:aa:5e:53:26:7f:59:21:d2:
         f3:66:0a:7e:6a:f7:c2:b0:e7:41:89:7f:94:88:6b:6f:2f:03:
         48:26:33:8f:05:f7:87:69:02:a0:9a:e4:9e:4c:47:1f:63:d3:
         01:cd:bc:f2:be:15:bb:a8:0e:af:61:0f:b2:93:65:d0:c2:e9:
         49:79:c6:c8:36:3d:0e:74:e7:b4:55:46:09:8b:dd:36:75:15:
         da:83:df:ee:3c:84:47:5f:b7:52:41:cd:20:7f:bf:cf:7e:fe:
         bb:ee:11:cb:40:04:9f:4b:8f:84:d8:e2:a1:81:c6:e4:8a:e7:
         4a:8f:18:5e:c6:5d:4a:40:de:00:d4:23:76:46:78:43:b6:cc:
         75:bb:be:dd:56:84:ff:5e:53:72:0f:e2:f6:13:ea:f9:2b:9d:
         36:82:15:da:62:ce:58:bb:b2:39:2e:f5:e0:f1:fa:4e:a5:28:
         ec:f3:35:51:f2:f9:17:18:37:86:c6:a8:0f:26:3c:ef:bc:ae:
         33:1c:b7:7d:6a:8d:c3:07:2b:5f:b2:29:1c:1a:c9:a1:91:33:
         69:e1:5b:e4:6d:7f:92:f9:cd:ac:d2:30:55:97:10:c8:55:50:
         8e:26:08:c3:56:37:7f:b3:b6:8c:3f:cd:43:50:6e:df:34:9e:
         c0:d5:8c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:50:20 2025 by rpki-client