Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8adebea5-43f4-4b9b-8b13-f39f6e98a3ad.roa
File:                     8adebea5-43f4-4b9b-8b13-f39f6e98a3ad.roa (raw, json)
Hash identifier:          RC5OL7o5RMxRpyJbJDC+3MGrkJig2vBRDsm7z0Mr6BA=
Subject key identifier:   E2:2A:42:5E:CF:9C:5F:1E:B3:8B:C2:90:9D:32:0E:EA:55:B4:78:C8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2D86EDED6109AA5FC4BD8F9E7044D77CA1C99238
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8adebea5-43f4-4b9b-8b13-f39f6e98a3ad.roa
Signing time:             Tue 05 Aug 2025 00:10:16 +0000
ROA not before:           Tue 05 Aug 2025 00:10:16 +0000
ROA not after:            Tue 09 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        216.87.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:86:ed:ed:61:09:aa:5f:c4:bd:8f:9e:70:44:d7:7c:a1:c9:92:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  5 00:10:16 2025 GMT
            Not After : Sep  9 23:59:59 2025 GMT
        Subject: serialNumber=05fb0e0ec28fc1441dc4a5760eaceaf2d1927aa1b1172b9d5d2442c7976d8aa1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e4:6e:fd:d5:70:0e:b8:7b:8d:25:ca:da:41:
                    54:14:2b:64:aa:1c:88:e9:bf:6c:18:aa:25:68:7a:
                    47:87:01:98:4f:9e:4e:f7:ee:9e:a0:90:e2:38:98:
                    9e:49:43:c1:ad:09:7a:3f:65:f0:85:e7:bc:75:c8:
                    f8:00:ec:8d:6f:21:e9:9a:af:3d:32:73:67:e8:45:
                    e0:05:6d:d7:fe:02:27:5c:bc:05:3a:92:52:a0:5b:
                    af:97:aa:90:f5:4d:99:8b:23:0b:a3:7a:a5:d7:92:
                    27:b1:6a:f6:d5:8b:6b:3c:04:4a:41:56:51:4d:ef:
                    fb:8e:6b:ed:6e:e3:08:a2:98:7d:02:f2:fa:60:fd:
                    c8:c6:41:fb:55:66:61:05:47:96:72:8d:5d:22:ad:
                    d4:62:ae:54:6d:87:20:ea:7d:50:c7:43:aa:e5:65:
                    a8:1d:e0:64:3e:93:42:79:55:ce:55:7a:22:56:a8:
                    a8:8a:cb:58:f9:3a:dc:62:ee:bc:c8:95:db:93:aa:
                    c7:d7:50:70:7b:f8:30:e3:5c:8a:a8:f6:eb:73:b6:
                    c3:39:f2:b7:01:5a:bf:3d:e1:dc:2b:aa:44:ac:ab:
                    97:c0:23:f5:1e:94:18:d1:aa:41:c2:68:e9:ed:c9:
                    7f:ea:d4:a7:98:dc:8c:f8:64:e9:e3:43:8a:11:86:
                    7b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:2A:42:5E:CF:9C:5F:1E:B3:8B:C2:90:9D:32:0E:EA:55:B4:78:C8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8adebea5-43f4-4b9b-8b13-f39f6e98a3ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.87.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:64:75:15:a9:60:32:96:e2:1f:10:78:f6:ad:eb:56:90:c7:
         1c:2c:c0:61:02:df:38:8f:7e:ae:79:a3:f9:42:ff:0a:aa:b0:
         ec:24:39:1e:42:02:30:83:58:71:6f:85:a1:ab:5a:32:3d:46:
         10:e8:eb:aa:32:71:df:54:c9:d3:2e:93:47:79:5a:81:da:b2:
         9c:76:67:77:9a:5e:88:a1:c5:b4:3b:59:0e:b2:04:ee:cf:b8:
         1a:63:70:e3:0e:79:2c:54:66:5b:86:39:cf:6b:b2:34:4b:7f:
         8c:77:af:2c:1b:b5:87:83:1a:9c:fa:06:0b:f1:48:86:f9:c6:
         5f:d5:12:5a:1b:e5:7a:21:db:ab:61:b5:d7:82:3d:45:8b:67:
         a2:9e:03:89:21:85:43:db:ba:a3:02:bb:89:d0:d3:f9:49:60:
         be:c3:82:f3:47:fd:aa:ca:d3:b5:9f:2d:b2:56:b4:02:89:3e:
         82:d0:03:9d:0d:0c:31:06:e6:0d:cd:b7:bb:4b:51:27:ac:de:
         c3:ce:b4:57:06:1e:b3:78:34:00:00:1b:18:f9:bc:d9:de:1a:
         83:96:9f:cf:77:4f:b5:fc:3d:cc:44:2c:d7:80:3c:94:27:49:
         e3:91:60:b3:0d:07:da:19:dc:74:69:51:63:d6:02:a8:66:c7:
         6c:ef:96:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:08:08 2025 by rpki-client