Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eae82c23-ee5e-45d3-86ca-6380321381d0.roa
File:                     eae82c23-ee5e-45d3-86ca-6380321381d0.roa (raw, json)
Hash identifier:          LAaAFxr9/nc8CTWbHSrPlaDyIVDJ3zCh2nyV8zNch5k=
Subject key identifier:   D7:3C:CC:FA:47:9C:0D:58:E9:2E:36:F4:C6:9F:68:B8:AF:99:86:7E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       C427A408D0FB59B2D10E4903C62EA3E4C13E20
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eae82c23-ee5e-45d3-86ca-6380321381d0.roa
Signing time:             Sat 02 Aug 2025 00:40:20 +0000
ROA not before:           Sat 02 Aug 2025 00:40:20 +0000
ROA not after:            Sat 06 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        16.56.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            c4:27:a4:08:d0:fb:59:b2:d1:0e:49:03:c6:2e:a3:e4:c1:3e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  2 00:40:20 2025 GMT
            Not After : Sep  6 23:59:59 2025 GMT
        Subject: serialNumber=eae7bc658fc658a409c8f48e0250a0fda312ddfe15408c022a42378dd9b504b3, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:bc:51:b8:09:3e:aa:34:cb:81:b0:b1:09:b0:
                    fc:41:78:10:59:58:b6:b0:9a:eb:14:7c:cd:e9:c8:
                    d4:04:c9:e2:8e:71:95:09:be:3f:82:df:fd:f1:30:
                    31:e1:1a:1b:05:b7:f9:c9:79:09:7a:2e:4e:3f:c4:
                    29:92:2a:92:0d:eb:88:a2:5a:d7:12:ee:66:1d:03:
                    ec:75:dc:b8:db:ad:80:22:83:9f:c6:fa:a7:21:e1:
                    f9:bc:69:d7:cf:17:b0:3d:08:85:8c:c1:c9:9f:79:
                    ad:1f:a6:7b:63:4d:a1:b7:81:e3:a6:b3:45:45:e3:
                    39:4e:a5:a3:f0:3c:1d:a3:d3:d0:44:6e:b2:ce:b4:
                    57:c9:75:83:6a:8c:86:11:f1:90:d7:b1:63:a3:0f:
                    1d:f5:22:e1:ef:8c:25:bb:03:84:5b:d1:49:1e:24:
                    b9:0d:7e:c4:ba:7f:9c:f9:ae:a2:72:8e:be:d0:66:
                    a3:7a:0e:07:a1:bd:af:2b:4d:3a:8c:7e:c3:bc:76:
                    d7:e4:19:54:8e:a4:ed:a3:0a:bb:93:52:26:72:3d:
                    03:62:85:91:08:64:14:5d:59:6d:40:c7:b9:42:4b:
                    21:b4:27:62:50:d2:4c:f9:22:6e:e7:d0:85:f9:af:
                    47:92:76:d9:5b:1c:d6:a0:d3:65:e9:f2:80:f5:45:
                    85:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:3C:CC:FA:47:9C:0D:58:E9:2E:36:F4:C6:9F:68:B8:AF:99:86:7E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eae82c23-ee5e-45d3-86ca-6380321381d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.56.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         70:37:db:a9:55:0a:0b:e7:0e:d6:46:f3:d2:ac:1d:cf:6d:75:
         1c:fb:44:89:84:73:ba:6e:dd:6b:0b:f7:67:c0:ee:bb:97:42:
         f8:76:a0:d1:93:b3:b6:f1:22:ef:35:85:07:48:24:35:76:e0:
         a1:d8:89:d7:fc:1a:d7:12:6d:73:21:60:48:f6:14:9b:c6:dc:
         12:3b:c2:1b:05:fa:07:92:a1:9a:04:50:c3:ee:50:f0:76:04:
         d1:f2:f3:65:84:02:18:de:8c:c4:6e:9b:55:3f:1d:05:da:8b:
         b9:5f:c3:56:aa:38:b5:34:08:63:ec:e2:02:79:9b:83:dc:89:
         ae:33:2a:d9:fd:d0:33:9d:1e:3c:54:48:6a:14:82:eb:eb:25:
         fa:e7:64:b2:59:6a:41:e7:dd:41:ac:33:7c:27:42:36:f8:c1:
         ee:c8:f5:05:4d:68:b2:b2:d6:22:f2:60:29:50:a3:37:27:a9:
         79:10:86:27:b5:00:2b:50:ce:66:ee:73:da:5d:60:b7:18:2c:
         59:98:2c:c0:44:30:06:90:cc:9e:d0:63:59:83:87:37:77:36:
         77:74:65:56:ac:c3:95:4a:52:6d:1d:1d:17:98:f3:a8:a4:5c:
         19:3a:e9:4a:fb:3a:e0:63:17:2f:0c:54:5c:e2:a5:f1:cd:43:
         f0:9a:61:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:20:55 2025 by rpki-client