Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a1b7496-b916-471e-be55-e180367c84ee.roa
File:                     9a1b7496-b916-471e-be55-e180367c84ee.roa (raw, json)
Hash identifier:          o6sv7LlE/jG8S4H1dBSETabLsV0FyqmaRxZvgMaZ63c=
Subject key identifier:   79:B9:74:A2:77:79:CE:8E:CA:39:CA:BC:5B:26:8F:AA:24:E6:5A:7C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       715565E3BDFA30D416E6B2054D4CA2A032080FE7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a1b7496-b916-471e-be55-e180367c84ee.roa
Signing time:             Tue 19 Aug 2025 00:11:47 +0000
ROA not before:           Tue 19 Aug 2025 00:11:47 +0000
ROA not after:            Tue 23 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        56.30.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:55:65:e3:bd:fa:30:d4:16:e6:b2:05:4d:4c:a2:a0:32:08:0f:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 19 00:11:47 2025 GMT
            Not After : Sep 23 23:59:59 2025 GMT
        Subject: serialNumber=35c034481097fd986e37478e208fe404838b08b3b728d6b231d7bc386649fefa, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9e:2f:50:cf:54:c5:a9:c4:a7:34:4f:43:e4:
                    88:64:8e:0f:0f:be:17:b9:84:0a:62:79:b1:22:cd:
                    f9:a8:75:6d:3f:06:51:85:d4:9f:1f:3b:d5:a1:c7:
                    a8:f6:b5:11:89:0c:45:e4:a3:d2:fa:a6:57:2a:65:
                    58:25:a7:59:72:e0:50:64:0b:10:59:bf:1b:23:0d:
                    f6:5f:81:44:3e:1b:58:4b:36:93:81:03:f4:59:8b:
                    02:a7:ff:2c:22:6a:83:1f:7d:c5:83:f1:d8:8f:92:
                    ed:ab:de:ba:89:56:35:82:82:f3:7b:61:55:e4:52:
                    9b:43:00:08:0f:12:e1:c9:ff:4a:81:d6:4d:ce:00:
                    aa:6d:90:ae:6b:0a:84:1e:0a:da:d4:5a:62:31:9a:
                    2b:22:0e:70:98:07:83:13:f1:19:41:90:61:91:10:
                    f5:fe:63:c5:ff:b3:b2:9d:01:c0:17:b1:71:cc:e3:
                    e1:d2:8a:d4:29:18:0c:ac:77:c0:2c:0b:a3:3a:cf:
                    70:90:b0:5b:5b:fc:e4:da:b2:33:cb:96:cf:dc:ee:
                    b5:a2:2c:07:fc:e8:fb:dc:6e:35:dc:ad:4e:5d:46:
                    30:b7:03:4d:89:80:27:44:fc:52:f6:27:5f:80:3e:
                    bb:f4:67:35:e6:67:63:4b:93:49:7d:bc:e5:fc:4e:
                    cd:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:B9:74:A2:77:79:CE:8E:CA:39:CA:BC:5B:26:8F:AA:24:E6:5A:7C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a1b7496-b916-471e-be55-e180367c84ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.30.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2e:0e:28:1f:a7:0c:ee:5a:00:b4:bd:2b:66:00:98:23:60:ce:
         a4:74:59:1e:c8:67:6e:c0:f3:78:a8:5a:07:41:b4:37:b3:3a:
         3b:d8:ec:71:50:27:bd:5f:03:37:52:6d:28:48:9b:e1:27:57:
         17:22:e0:c2:c0:46:75:a3:29:47:c7:55:3f:e9:07:aa:b8:79:
         74:46:bd:cb:c6:ae:61:da:b8:73:52:44:52:55:df:34:55:93:
         09:3a:da:2c:6b:e9:f8:2f:c8:80:9e:6b:6b:b3:f5:fd:76:a0:
         6f:1c:5c:9a:a6:e3:9f:9c:d3:2b:df:bb:ad:e1:c3:8b:0a:91:
         f7:39:17:4f:a1:ee:2a:15:c6:8f:0d:1e:c5:06:95:eb:87:04:
         4e:e1:ee:f3:d0:d1:ba:65:f1:ef:4f:de:3d:ca:b9:ae:cc:c5:
         e8:72:d1:6f:5c:0a:a2:d1:73:80:1b:fa:6e:64:a6:36:bf:f0:
         72:c3:e7:b5:ff:a1:d4:87:cc:43:ef:81:66:cf:5e:19:bf:12:
         02:93:f9:b2:4d:a1:8c:f1:e5:f5:d4:ec:79:02:eb:52:dd:17:
         90:b8:e7:e4:f4:b5:26:42:89:3f:f9:e1:23:ba:24:dc:2c:d9:
         b1:55:e1:c5:13:0f:d8:77:d5:79:9e:1c:0c:22:d3:2f:7b:65:
         19:ec:d6:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:26:47 2025 by rpki-client