Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0bedec2c-6f22-4399-a4c7-a5fe37e86127.roa
File:                     0bedec2c-6f22-4399-a4c7-a5fe37e86127.roa (raw, json)
Hash identifier:          7bXI2NWU8bm98nH9Idon4sPZDYQlmennYM9h9WmQl2c=
Subject key identifier:   7B:37:50:5A:09:54:B1:0D:B4:F6:5E:72:E8:82:1E:45:EE:FE:04:91
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1E97C765AA48DD26E8F4D59B2695BAECFCB9F13A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0bedec2c-6f22-4399-a4c7-a5fe37e86127.roa
Signing time:             Fri 25 Jul 2025 00:11:50 +0000
ROA not before:           Fri 25 Jul 2025 00:11:50 +0000
ROA not after:            Fri 29 Aug 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f60:e000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:97:c7:65:aa:48:dd:26:e8:f4:d5:9b:26:95:ba:ec:fc:b9:f1:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 25 00:11:50 2025 GMT
            Not After : Aug 29 23:59:59 2025 GMT
        Subject: serialNumber=f8e0a7345f5d3c27d1d1e2c3afaa229e8e09d1002cc503f84c4c4e2f8ff88b99, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:86:1d:6e:63:c4:9c:68:c5:db:a9:db:7e:f1:
                    1c:05:88:d9:46:52:41:b0:28:8b:74:35:b6:85:3e:
                    63:3f:b7:56:ec:ad:90:f2:74:8e:7c:1c:a0:7d:4b:
                    c4:f7:a4:a9:fa:a5:bc:58:06:4b:d2:11:4c:6b:25:
                    d2:f9:51:bc:3f:59:14:88:11:14:3f:08:c4:13:3d:
                    df:c4:e7:37:5a:35:0c:b0:8b:1b:76:5d:ec:60:61:
                    f2:b1:70:fb:24:4c:06:c0:a0:43:c8:70:c6:68:03:
                    10:72:4a:a6:2a:fc:65:fc:e1:a8:44:cf:df:e3:63:
                    4f:8f:c3:2d:0a:19:58:fd:e1:31:c4:4d:6a:5d:01:
                    d9:34:50:c4:04:1a:21:68:c3:6f:46:4d:b7:7f:73:
                    94:60:21:3b:96:31:71:dc:77:34:ee:2c:7a:94:dc:
                    40:0b:f7:76:a7:d1:76:26:1c:ff:26:4f:85:3e:bc:
                    75:45:0f:7d:63:9a:5f:51:12:a7:ee:bc:dc:98:4f:
                    54:9f:a5:1f:34:cb:60:33:66:4a:e7:27:e4:e8:58:
                    03:44:ad:27:27:38:da:81:61:c5:ec:9d:b2:9c:7b:
                    fc:4c:54:a0:25:f6:f1:ea:3f:58:38:57:85:06:cb:
                    dd:04:5d:e0:1b:ea:fb:64:ff:af:45:74:23:ea:e2:
                    88:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:37:50:5A:09:54:B1:0D:B4:F6:5E:72:E8:82:1E:45:EE:FE:04:91
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0bedec2c-6f22-4399-a4c7-a5fe37e86127.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f60:e000::/40

    Signature Algorithm: sha256WithRSAEncryption
         81:ce:6f:99:72:80:80:8c:81:e3:65:55:19:bd:96:13:4b:29:
         bf:16:67:f4:af:e5:fe:fe:ae:30:81:d9:99:57:42:58:83:56:
         09:1b:a5:8b:d7:43:a7:bc:94:f5:4e:63:c6:0a:05:49:38:00:
         50:7f:4c:4b:d6:91:f1:a1:64:e9:e0:3c:1f:94:1f:b3:6a:80:
         8e:08:a3:b3:82:b3:68:4d:f6:dd:95:0f:b9:2b:64:97:fb:90:
         aa:c4:f6:41:39:8b:b4:cc:47:51:02:60:83:c6:15:34:2b:59:
         ef:2c:77:b2:28:f8:16:fd:e1:42:f7:21:f9:19:a7:62:17:c0:
         80:20:4a:0f:17:dd:45:9d:76:44:8f:16:ba:d6:68:bd:12:a4:
         62:a8:0c:78:29:7b:4c:67:8d:3f:61:cc:61:73:d7:ca:6e:7a:
         02:d9:0c:33:87:ef:a0:29:db:a5:5a:b2:14:bf:6e:f4:b1:08:
         ae:2e:8b:d2:52:60:37:8b:4e:d6:d1:2e:67:47:f8:83:1a:c8:
         d3:36:8d:87:9b:c6:95:3e:31:29:05:b7:14:6c:e4:b7:7f:d2:
         fc:2c:77:bb:f3:20:38:20:af:6b:20:29:3b:3f:0d:3a:c2:8d:
         ef:7f:eb:cd:21:2c:f5:47:da:e5:a5:e7:af:87:63:df:78:47:
         7a:ae:ed:7e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:05:05 2025 by rpki-client