Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fbd49bcd-224f-4a8b-93d2-80dc17cdd84c.roa
File:                     fbd49bcd-224f-4a8b-93d2-80dc17cdd84c.roa (raw, json)
Hash identifier:          wAGOADRUmqzuCtR42Ko61jpJ8Ai+Wj7JTPqYoozSfJA=
Subject key identifier:   38:8A:24:CC:62:8E:DC:F1:0A:E2:F0:6D:E4:64:D2:F6:68:36:A9:C9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       60E5EFF2881DF50D3ADF46D588035E710B1EABBD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fbd49bcd-224f-4a8b-93d2-80dc17cdd84c.roa
Signing time:             Mon 23 Jun 2025 15:32:27 +0000
ROA not before:           Mon 23 Jun 2025 15:32:27 +0000
ROA not after:            Mon 28 Jul 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        64.252.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:e5:ef:f2:88:1d:f5:0d:3a:df:46:d5:88:03:5e:71:0b:1e:ab:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 23 15:32:27 2025 GMT
            Not After : Jul 28 23:59:59 2025 GMT
        Subject: serialNumber=19cadbf5489e3df0bbf466ad0c0542cc964ab40eb05a05735f2a593d6179ca45, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6d:c1:e6:9f:43:45:87:fd:86:0e:7d:d2:b2:
                    3b:2a:64:ae:01:8a:3f:dc:42:7a:00:9d:ee:43:90:
                    3d:43:f8:53:a2:2e:e8:ef:96:e0:87:40:a2:4e:9a:
                    95:d1:94:81:70:31:56:f9:af:da:84:75:74:f4:26:
                    56:6f:95:86:a0:dd:7f:68:47:aa:9b:1e:1b:75:29:
                    08:32:42:24:53:f7:3f:6a:db:6e:cb:72:d8:02:97:
                    be:bf:6f:dc:5c:6c:4e:b0:44:34:b9:a2:ad:2b:57:
                    ae:9f:57:e2:e5:ec:9f:af:a1:76:da:31:10:1f:62:
                    77:96:83:ee:66:96:fc:c0:dd:b9:f0:9c:d0:e7:2b:
                    30:dd:58:4b:39:e5:ab:0a:0b:56:cf:df:f7:24:aa:
                    ed:a3:52:2f:3f:f6:ff:c7:3a:9a:b9:1b:7e:d3:35:
                    27:43:61:01:de:c9:c7:d5:31:a8:9b:2a:82:46:14:
                    db:2d:97:3e:28:9d:8d:8b:24:03:fd:67:f8:22:fc:
                    fd:b6:6e:5b:ea:44:2b:01:28:cb:c9:16:ef:fd:7c:
                    c7:2f:96:ff:ab:0b:f0:05:ff:d7:73:11:dd:6e:7f:
                    2f:6d:8b:5d:c3:e2:79:4d:aa:17:21:24:16:dc:f2:
                    5d:83:ff:02:33:b0:21:e9:8d:4f:98:2e:c1:42:4c:
                    d2:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:8A:24:CC:62:8E:DC:F1:0A:E2:F0:6D:E4:64:D2:F6:68:36:A9:C9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fbd49bcd-224f-4a8b-93d2-80dc17cdd84c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.252.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:5b:35:e3:f3:12:93:45:20:51:63:c3:79:10:84:45:83:67:
         9d:88:6e:da:c4:1e:cb:d7:7d:96:94:64:a2:97:96:f7:0e:5a:
         7c:c2:a7:5c:8e:2c:b1:49:20:05:5f:6d:b1:fe:82:7e:68:86:
         ac:34:41:bb:12:1e:7e:54:d1:b4:40:b0:33:30:2e:9d:49:8b:
         7f:41:70:e1:f2:57:d4:c1:f6:90:83:21:9a:66:88:ce:06:ce:
         d8:ee:fe:1b:2e:48:11:61:ce:56:75:07:4e:4f:01:82:6b:2c:
         99:ef:77:73:4f:db:ae:54:53:88:38:14:ff:05:8a:0a:02:52:
         39:cf:53:9d:96:5c:98:48:49:c3:d1:12:62:68:da:6b:4c:c1:
         57:58:2d:2d:b3:f6:dc:7e:99:2c:44:a2:d5:56:72:e9:f8:01:
         55:68:25:b2:b6:1f:39:cc:9f:6f:80:ab:91:22:e4:5b:60:31:
         d4:9a:58:0a:a6:07:23:4e:28:20:6f:eb:0c:7c:c0:86:74:48:
         94:92:97:ff:0c:41:31:50:10:68:c0:d8:dd:5f:02:99:4e:f3:
         5c:68:80:88:d2:42:84:fc:78:48:9a:c6:1a:e9:13:df:f9:fa:
         0b:b3:c2:bc:ff:a8:d1:27:de:8c:6a:82:f3:f0:84:a8:fe:6f:
         15:fc:db:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:04:33 2025 by rpki-client