Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b0118f9-aa06-473f-9164-82651f7287ff.roa
File:                     6b0118f9-aa06-473f-9164-82651f7287ff.roa (raw, json)
Hash identifier:          57lyykSlzYTcBK9MQTH/1yrPJjQtMPkyH+02wnkDGoY=
Subject key identifier:   27:CC:47:04:DF:C1:8F:B2:33:0A:82:28:FA:B4:52:27:53:65:80:F0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       080B07664DB810B181B001F146E1625832978D04
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b0118f9-aa06-473f-9164-82651f7287ff.roa
Signing time:             Sat 09 Aug 2025 00:00:42 +0000
ROA not before:           Sat 09 Aug 2025 00:00:42 +0000
ROA not after:            Sat 13 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        128.212.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:0b:07:66:4d:b8:10:b1:81:b0:01:f1:46:e1:62:58:32:97:8d:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  9 00:00:42 2025 GMT
            Not After : Sep 13 23:59:59 2025 GMT
        Subject: serialNumber=3ce0bdafd7d569c479a926ac45b44082bf6f22eae98b010b61aeb3a5fd39a3c5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:56:27:59:05:17:78:7d:1d:b8:56:b4:85:d8:
                    e1:6a:2d:60:27:22:a9:41:d5:70:f2:67:01:c5:10:
                    35:21:99:09:ab:34:94:f3:8e:54:a2:b1:9a:29:24:
                    58:2a:b9:45:fa:7e:fb:ab:b6:ff:d3:47:b9:99:5d:
                    58:f8:e3:4f:cf:e7:ff:5c:42:e0:f8:51:05:da:ab:
                    28:ce:72:b6:69:1c:21:bc:17:7d:1a:a7:c5:6a:ed:
                    0c:be:19:af:7d:ab:89:36:c3:14:67:45:1b:97:c2:
                    1c:28:23:cf:4e:b7:f7:98:88:f0:f8:ab:bf:a3:a1:
                    2d:4b:25:77:ad:42:ec:a5:e5:f5:e8:2f:ed:27:60:
                    08:83:12:fb:d0:d6:3f:9a:8b:3a:05:be:d6:95:f8:
                    9b:8f:31:af:d1:7b:39:ed:f8:07:76:f7:b1:a2:12:
                    ae:d8:64:fb:9b:af:58:9c:3b:94:3d:7d:80:55:78:
                    67:69:7e:bb:e6:c5:6a:c4:22:ee:4d:83:15:fa:2e:
                    23:cd:3c:cc:57:93:58:20:22:43:b5:2e:45:c6:6d:
                    95:77:3c:28:c8:dc:ee:0c:a0:aa:3b:52:73:fd:1e:
                    e7:a7:14:5f:1e:89:7d:6b:fd:af:4e:97:75:b3:27:
                    4c:a2:7b:7d:ca:2d:4a:59:31:31:9a:d4:ac:62:19:
                    bf:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:CC:47:04:DF:C1:8F:B2:33:0A:82:28:FA:B4:52:27:53:65:80:F0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b0118f9-aa06-473f-9164-82651f7287ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.212.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3b:a5:7f:76:98:91:f7:12:85:96:14:81:e6:11:bc:68:77:bc:
         88:9d:5d:f3:cc:73:03:63:2c:09:c9:2d:2f:50:51:e3:bf:27:
         16:92:f9:45:ff:40:ff:4d:7c:56:4b:18:37:56:fc:56:a3:20:
         aa:bb:0d:7c:d0:23:1b:be:a3:69:f4:25:d9:bc:b2:c4:61:60:
         77:01:ec:e4:27:c3:46:3d:4c:e4:47:e2:32:1e:46:29:12:a7:
         c5:02:9c:9d:de:79:9c:18:c4:cd:a2:49:a8:91:ab:4f:12:b1:
         bd:f1:85:07:5f:7b:e8:91:74:25:ad:86:37:0b:29:a3:6d:45:
         f4:d5:2e:cb:8f:53:81:06:71:28:a8:ea:84:9f:b6:b2:ac:5e:
         10:fe:c0:a3:2f:ba:36:6a:84:0e:b7:1a:7b:ef:cf:32:f2:23:
         24:92:87:f5:45:7a:ee:56:99:d3:e3:19:f9:e2:5e:1d:28:ea:
         02:65:68:a8:34:ad:99:f3:21:25:83:c7:9d:a5:6d:7f:46:1f:
         b7:a4:5f:f3:7c:3f:d5:47:11:29:e1:c5:34:d1:89:5f:bf:28:
         f5:9e:ac:b2:f3:06:a8:fb:9d:5e:88:61:f4:4a:15:83:e1:3c:
         1c:8a:48:73:b9:41:94:03:f5:c2:66:13:be:33:8d:35:e1:5e:
         1e:40:83:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:31:22 2025 by rpki-client