Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af26cb48-f252-4748-8895-3681196bc385.roa
File:                     af26cb48-f252-4748-8895-3681196bc385.roa (raw, json)
Hash identifier:          KGlyRPTNLdk8oe7UWDTNWETCxJGNkXtodJGs51g1uxY=
Subject key identifier:   0A:87:3E:41:D4:F5:06:31:B0:92:17:E3:E0:B0:88:3F:FD:E1:31:58
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       08C0008119BB25D09714E9BB1153622168638EAF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af26cb48-f252-4748-8895-3681196bc385.roa
Signing time:             Mon 16 Jun 2025 15:21:24 +0000
ROA not before:           Mon 16 Jun 2025 15:21:24 +0000
ROA not after:            Mon 21 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        56.217.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:c0:00:81:19:bb:25:d0:97:14:e9:bb:11:53:62:21:68:63:8e:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 16 15:21:24 2025 GMT
            Not After : Jul 21 23:59:59 2025 GMT
        Subject: serialNumber=d1775097f7d1a1afde6023e13c992d6fa19cae0578cfaf8ddcaf41b4caf40a10, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:cb:b5:ea:e9:61:ed:c5:d1:9c:63:d3:be:78:
                    c3:6a:35:69:22:37:94:6d:1c:03:a3:64:90:5a:83:
                    66:65:2e:0e:b8:2d:a6:ca:ff:d4:54:ca:ea:00:55:
                    f9:18:99:59:11:8c:f5:f7:ce:71:15:f4:b9:f2:2c:
                    e0:9d:d7:07:b1:c2:77:d7:45:99:73:70:a9:0a:d7:
                    96:95:0c:6c:34:c6:83:8a:95:56:4c:aa:c9:28:1c:
                    ee:a6:67:81:cf:8f:aa:1e:8a:60:33:d9:95:af:d3:
                    30:e2:db:26:1f:7a:9e:89:7b:6e:8a:21:22:a4:1b:
                    ed:92:27:39:da:9d:b3:47:73:41:a7:84:65:1c:47:
                    09:59:cc:0f:96:87:c5:ef:4f:e9:2a:e2:df:4c:7e:
                    74:50:2f:b1:70:d8:94:42:d9:85:d4:43:b4:14:e5:
                    fd:ce:c1:53:75:3c:1d:27:65:85:1a:24:44:c2:ea:
                    37:e9:39:4a:24:c5:b6:2a:c7:ec:ad:fa:4d:84:92:
                    35:8d:94:ca:20:65:cb:b9:c7:72:87:ef:3e:b7:7d:
                    3b:5b:55:52:ac:2b:86:08:40:90:0f:32:87:90:cf:
                    68:25:6d:ef:13:1a:a2:c9:9b:35:69:06:09:8b:92:
                    29:d2:f3:d7:42:3b:33:1e:60:04:a3:ef:3a:d3:40:
                    42:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:87:3E:41:D4:F5:06:31:B0:92:17:E3:E0:B0:88:3F:FD:E1:31:58
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af26cb48-f252-4748-8895-3681196bc385.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.217.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b6:41:25:71:e5:73:71:aa:59:6c:09:ce:16:17:42:77:6a:8c:
         2b:c2:be:5a:69:b5:60:3d:f5:44:5d:48:23:43:71:1a:49:12:
         e8:05:c5:95:77:09:bf:be:de:20:56:16:d5:f7:f0:9c:85:69:
         33:36:ff:65:59:dc:68:4e:1e:40:9f:b1:c2:95:31:26:92:b6:
         dc:59:8a:f6:2b:51:75:9b:f7:5f:0c:4d:a9:b8:fe:d4:83:4e:
         82:8f:3d:78:e5:fd:c7:90:ee:56:f7:1e:ba:f8:70:cb:f7:cd:
         44:73:e9:26:ea:7a:1a:ae:84:e2:60:c8:59:10:bb:4b:2d:1c:
         af:7d:de:42:ca:a3:77:9c:98:6e:9a:6a:c0:36:7f:08:d1:9a:
         a6:ff:a8:5c:d7:e2:c2:7b:76:5d:51:4a:0c:64:66:82:3e:92:
         05:e5:ff:5e:21:4a:a3:34:36:3f:07:93:b9:40:ed:4e:39:ba:
         9b:9e:53:b5:27:db:a9:d9:af:bb:81:d9:4f:84:6d:93:77:d3:
         f4:02:58:21:b0:18:ba:2e:b9:a7:60:84:29:43:55:da:93:18:
         42:ba:32:70:fc:8b:e4:b5:ac:80:eb:53:18:20:52:f2:62:65:
         f9:0d:01:1e:d0:39:1d:ef:2f:1d:88:f2:c8:3d:0d:2a:23:8c:
         75:c6:71:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 08:41:16 2025 by rpki-client