Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e218b04-dfaf-4fdb-9e82-bad8d7e36def.roa
File:                     5e218b04-dfaf-4fdb-9e82-bad8d7e36def.roa (raw, json)
Hash identifier:          GnWAlrJ+Ag9hZutaIyYqDEkqyPtMYljTSxr+Fn1kEU4=
Subject key identifier:   06:1F:FC:D6:51:1F:67:98:69:1A:00:F4:9C:CD:D8:A9:01:78:B3:14
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       73771520871EB8D1CB0E516E77728C8702C6F97E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e218b04-dfaf-4fdb-9e82-bad8d7e36def.roa
Signing time:             Mon 11 Aug 2025 15:11:21 +0000
ROA not before:           Mon 11 Aug 2025 15:11:21 +0000
ROA not after:            Mon 15 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        16.206.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:77:15:20:87:1e:b8:d1:cb:0e:51:6e:77:72:8c:87:02:c6:f9:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 11 15:11:21 2025 GMT
            Not After : Sep 15 23:59:59 2025 GMT
        Subject: serialNumber=1396eabe6dd490fd86e711dbdf5fa7740e7d15ce099fce26d5be4af8b60f7dcf, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:08:e2:b8:4a:74:81:6f:42:34:a3:5f:3d:d0:
                    d8:d7:94:76:15:23:75:d8:a3:19:24:e8:b2:60:37:
                    1a:8b:1d:bb:98:0c:80:a3:3f:f9:5c:23:75:92:7b:
                    5f:64:df:b9:9f:cb:7c:33:ba:48:6f:94:50:f7:1a:
                    b5:e4:9f:90:79:1e:e7:a2:79:f4:5c:05:61:86:b6:
                    8e:75:93:e2:d3:d1:42:96:39:1b:5a:4f:e2:2d:e1:
                    31:91:8a:7a:d0:a3:59:00:a9:7d:c8:74:bc:3b:b4:
                    0a:95:d5:d7:df:9c:f6:bf:37:f9:a5:a2:53:6d:7a:
                    6a:20:ed:21:2e:15:f6:54:79:5a:23:95:6a:8f:44:
                    3b:80:f6:4f:bc:50:41:db:98:c3:2d:3b:4c:77:ba:
                    c6:b5:e9:42:f7:4a:ad:d9:a1:e9:82:0d:56:21:e1:
                    7e:6c:f2:40:59:e7:a6:78:3b:bf:70:e4:1c:8b:a3:
                    53:b1:a7:e9:f7:33:0e:56:4e:aa:43:77:38:f6:f9:
                    11:47:cb:ef:69:91:22:86:1f:16:f3:89:4e:27:b3:
                    88:a7:3c:ff:35:51:a3:64:a0:3e:8a:3d:93:37:19:
                    af:6a:c0:5f:9d:ed:59:0c:75:c5:c1:e5:5c:e4:05:
                    48:d2:58:7c:05:d5:fc:fd:2f:f1:14:a5:5e:76:1b:
                    52:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:1F:FC:D6:51:1F:67:98:69:1A:00:F4:9C:CD:D8:A9:01:78:B3:14
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e218b04-dfaf-4fdb-9e82-bad8d7e36def.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.206.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         07:cb:fe:28:ea:0c:ba:30:87:08:60:35:10:8e:b2:ec:b7:82:
         48:e8:e3:e6:f1:87:9d:8f:56:e9:bb:fa:50:dd:93:d6:b9:ed:
         49:b1:7e:a1:f5:6c:0e:b5:d6:79:2b:17:f7:aa:1d:8a:02:30:
         52:2e:6e:f5:fc:1c:e0:6a:d4:49:c2:1a:db:53:6a:5b:44:5f:
         99:b3:7d:d9:4d:33:80:ac:75:46:31:bc:ec:9c:b8:61:5a:25:
         c6:97:61:d5:2e:c0:22:14:92:85:91:47:92:7f:95:9e:35:3d:
         9f:17:e2:40:fb:dd:ce:47:f6:8d:fa:14:ea:99:11:3b:bf:6e:
         1c:71:2d:5d:ff:5f:76:ad:a7:89:b0:7c:91:96:96:ef:94:6e:
         86:51:2a:4a:e4:f7:77:5d:74:34:1d:fe:b6:e4:4b:a6:2d:1a:
         07:4a:5b:9d:ab:40:0f:ee:0c:d8:51:bc:d1:e3:ff:9e:ef:a4:
         2a:20:41:1b:9a:4f:3e:a1:6d:67:38:37:19:d7:71:77:3f:c3:
         60:a9:c7:8b:da:d5:16:95:79:7e:f3:be:2a:2e:6d:7f:fc:c9:
         ce:f7:d7:34:db:19:28:af:81:99:56:c1:d4:8b:dd:de:c4:ef:
         a8:4c:d1:87:76:e2:85:ca:86:24:78:cb:e6:c8:95:1a:51:b1:
         3f:1a:b8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:45:28 2025 by rpki-client