Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2c885d6-4061-421b-99ff-f05202cdada5.roa
File:                     f2c885d6-4061-421b-99ff-f05202cdada5.roa (raw, json)
Hash identifier:          m2uPHj29xKT3pinUqFzAi/MimTliUBRcih1WnrJ7ow0=
Subject key identifier:   81:DA:95:ED:2D:F3:57:40:89:6E:68:B6:B5:3B:1C:1E:48:C6:D1:C6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6403B10E8AF89D4F530490CB43A9333A266EB780
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2c885d6-4061-421b-99ff-f05202cdada5.roa
Signing time:             Fri 27 Jun 2025 00:31:43 +0000
ROA not before:           Fri 27 Jun 2025 00:31:43 +0000
ROA not after:            Fri 01 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        44.223.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:03:b1:0e:8a:f8:9d:4f:53:04:90:cb:43:a9:33:3a:26:6e:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 27 00:31:43 2025 GMT
            Not After : Aug  1 23:59:59 2025 GMT
        Subject: serialNumber=db945c6b287e8ebff85c43e191ee7655101aac4d4ac70d181f89b8c69035993e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:34:5c:b0:49:67:e7:7b:a3:87:4e:ad:48:e8:
                    8f:33:be:f1:19:b3:9c:7e:00:5e:8f:c0:62:15:8a:
                    f3:c5:26:19:ab:0d:c5:0b:6c:22:68:7a:97:f3:1a:
                    b9:dc:65:d3:9c:e5:6a:fa:29:43:33:05:c8:1b:e5:
                    e0:c8:6f:a9:0d:da:5c:86:1e:73:19:f4:19:60:f9:
                    d0:15:c3:e2:ff:67:30:4c:fe:01:4d:56:5d:0c:9f:
                    71:8b:f1:01:47:5e:6a:57:8b:a3:bc:66:54:4d:47:
                    39:10:2b:07:46:84:08:62:be:05:45:34:07:49:39:
                    d8:5b:5f:ac:03:56:c0:8d:1c:b9:b2:bf:11:56:fe:
                    4b:6f:83:ca:3a:1c:38:a0:a9:e1:42:06:8d:69:5a:
                    30:c5:b0:83:86:9e:92:58:b7:95:21:2d:c5:da:b9:
                    3e:9b:cb:17:4f:81:0e:a4:fb:f2:6a:d6:19:29:6e:
                    08:00:e1:00:97:cf:b9:cb:40:11:1c:47:ac:e5:ca:
                    ee:2b:a3:44:ba:6d:29:a6:b4:02:fd:7f:3e:6f:e1:
                    2c:f8:a6:03:19:92:56:b7:2a:a9:36:0e:a3:e3:64:
                    eb:ef:3b:51:a3:ff:9d:34:54:05:13:08:d9:bc:71:
                    22:62:31:f8:04:cc:3b:73:cc:40:6f:e4:8d:0a:a1:
                    e5:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:DA:95:ED:2D:F3:57:40:89:6E:68:B6:B5:3B:1C:1E:48:C6:D1:C6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2c885d6-4061-421b-99ff-f05202cdada5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  44.223.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:a5:de:f6:de:92:4b:fe:fd:b7:72:68:7f:63:41:ad:92:94:
         09:8d:89:b6:6f:23:fc:35:7d:dd:0b:8f:65:d1:50:f5:17:32:
         af:3b:b0:cd:ff:3e:90:e0:23:7d:c1:0e:4e:9c:3b:da:c1:0b:
         1f:18:4a:98:51:70:4a:b2:71:c7:db:82:2a:98:6c:4e:ac:73:
         37:e4:6e:e8:c0:85:fc:33:53:26:e4:5d:17:3f:a2:84:91:5d:
         ba:f8:23:c5:93:63:33:c1:63:c1:5a:06:ca:a4:02:f3:6e:80:
         11:ea:f3:d4:27:3f:ce:2d:77:7e:3b:1a:68:b4:0b:f8:24:84:
         5e:08:df:6e:c0:83:46:a0:55:5a:93:6e:c0:b3:92:c7:97:36:
         5a:9c:8d:0c:70:42:0f:80:28:80:03:d8:43:97:dc:d6:b6:2e:
         00:17:24:f5:90:a7:82:3d:3a:32:64:49:d6:ce:70:f9:59:2e:
         5e:a9:33:d5:e1:d1:8f:65:d0:3c:f7:f1:0b:0c:6b:88:7f:ee:
         28:5a:b8:c3:f4:c9:1c:a9:e9:ff:4f:27:bc:0d:25:42:3d:c3:
         3c:36:ff:df:55:07:a9:3f:c8:11:e2:3f:f9:a3:25:99:c3:33:
         a7:4c:30:2b:00:d6:c8:89:c0:56:a3:3d:9a:f7:f2:70:f7:2f:
         83:a3:d8:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 05:23:08 2025 by rpki-client