Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c512c1b-f3e3-4cc4-adf7-022feda26799.roa
File:                     6c512c1b-f3e3-4cc4-adf7-022feda26799.roa (raw, json)
Hash identifier:          gCUYM/a1nbTA+s6oMH3/05bR/alaiPa7mR+RAeajZCk=
Subject key identifier:   06:81:E3:E9:86:50:85:A4:47:F4:EA:18:9F:A1:63:A5:F4:F5:F3:39
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2416DA0033106059F67029FB4F842277CCCC2157
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c512c1b-f3e3-4cc4-adf7-022feda26799.roa
Signing time:             Fri 08 Aug 2025 00:20:27 +0000
ROA not before:           Fri 08 Aug 2025 00:20:27 +0000
ROA not after:            Fri 12 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        79.73.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:16:da:00:33:10:60:59:f6:70:29:fb:4f:84:22:77:cc:cc:21:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  8 00:20:27 2025 GMT
            Not After : Sep 12 23:59:59 2025 GMT
        Subject: serialNumber=2642b82a00044d978ff1762d34ad4c1573ea55eea81430463bb2c361e667bd91, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:63:4c:fc:fc:c9:19:26:09:c5:2f:5f:05:e9:
                    b1:0a:26:12:63:d8:5a:a3:16:af:ac:00:d1:f1:c8:
                    72:8a:08:8a:ec:65:30:20:c7:4a:10:36:c5:98:ff:
                    6e:7c:95:a4:ce:9b:eb:cb:83:ee:3b:eb:dd:f9:11:
                    a6:f2:1f:70:9b:37:38:ef:fe:3c:29:68:51:47:fa:
                    ac:48:4c:ca:83:9b:28:f9:08:88:2a:f5:95:3f:4f:
                    8d:77:65:bf:c8:a0:72:f6:9c:1c:a6:d7:a7:4d:32:
                    11:f1:9a:22:d6:06:a2:30:ec:fa:13:26:9e:9d:43:
                    3e:05:fa:ea:63:4a:f5:62:89:cf:67:9f:d1:3f:95:
                    79:7a:0d:ad:5e:05:8c:26:68:aa:c9:98:2c:cd:34:
                    7e:14:0c:5c:f9:93:6d:9d:44:73:17:c5:ca:6e:33:
                    f5:ca:b6:a0:d1:ab:59:ba:01:1a:f0:01:9a:5d:8b:
                    fc:21:50:dd:20:f2:88:0a:b1:bf:ec:94:c3:da:14:
                    62:ed:05:13:d1:bf:1d:d8:b4:7b:bd:16:95:e2:10:
                    87:b7:c6:bf:29:c2:cc:e6:b8:2e:5f:62:66:34:b5:
                    74:73:00:23:ce:58:57:d5:45:44:4a:aa:dc:2d:dd:
                    45:f1:a0:80:5b:d4:03:62:a8:dc:ea:f2:63:4a:2d:
                    7f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:81:E3:E9:86:50:85:A4:47:F4:EA:18:9F:A1:63:A5:F4:F5:F3:39
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c512c1b-f3e3-4cc4-adf7-022feda26799.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.73.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         b5:77:49:03:7e:e7:1c:df:3e:f4:20:9e:04:57:e0:be:47:ab:
         b7:4e:88:fc:0a:0d:de:c6:1f:6b:42:63:b6:a6:8a:81:a2:57:
         a4:f8:7b:5d:d1:ba:ed:b2:dd:16:c9:fa:97:6b:90:6e:63:86:
         13:61:60:52:67:29:19:e7:c3:81:ca:31:ac:47:a1:0b:b1:8c:
         fd:22:28:90:ce:43:04:04:05:2f:85:31:ff:4d:82:64:a5:ed:
         2a:74:2c:73:95:41:a4:f8:f0:6c:03:85:fc:43:e8:0e:a8:66:
         39:31:76:2a:25:7f:32:5f:2b:05:5d:fe:5b:6d:a9:80:57:a9:
         0a:27:db:2a:56:a0:33:d2:db:d0:17:e8:c5:57:20:b8:5d:1c:
         8c:18:1c:db:91:c9:b2:26:18:57:7c:8e:a6:4c:da:43:32:47:
         0e:1b:9f:a1:0b:f7:0a:5f:1b:b1:18:21:24:84:c7:fb:53:0d:
         ef:96:87:12:05:0a:d9:c4:05:e3:69:ef:f1:b7:62:ce:1a:8c:
         41:98:ed:42:03:11:28:70:dd:36:15:ab:aa:0b:fc:71:ff:84:
         2e:3d:5d:27:7e:41:44:54:d7:47:c3:1f:a0:a2:2c:0f:c8:b9:
         2d:30:ca:f8:b9:a9:0d:09:0e:54:a3:51:e7:96:2b:35:d2:4f:
         99:58:de:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:46:26 2025 by rpki-client