Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0cf50ad6-9442-4597-8c89-e5beb52d50eb.roa
File:                     0cf50ad6-9442-4597-8c89-e5beb52d50eb.roa (raw, json)
Hash identifier:          WEvSCBzbaZRiGrlpb97J/S7EujiSSfT1XkaCkoTzxws=
Subject key identifier:   57:DE:5F:0E:69:F7:32:08:60:D9:DF:F2:2F:28:2B:54:50:FB:A8:95
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4F58EE782D5408DA2BE36ABAFAE01765E2F1A28F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0cf50ad6-9442-4597-8c89-e5beb52d50eb.roa
Signing time:             Wed 06 Aug 2025 00:31:07 +0000
ROA not before:           Wed 06 Aug 2025 00:31:07 +0000
ROA not after:            Wed 10 Sep 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f2a:c800::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:58:ee:78:2d:54:08:da:2b:e3:6a:ba:fa:e0:17:65:e2:f1:a2:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  6 00:31:07 2025 GMT
            Not After : Sep 10 23:59:59 2025 GMT
        Subject: serialNumber=85ca47ef6da7214f5784f5dfa3177fe9b1a6c6029ba77b1890a4c4531ad199d0, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e3:35:9e:f1:50:5e:9d:fe:95:af:28:48:5e:
                    c3:55:3f:82:37:4f:ce:2b:85:67:39:2f:50:b4:0a:
                    7a:36:d6:93:5a:70:7c:82:43:36:7a:e2:cc:bb:0b:
                    ee:79:a1:89:f1:5f:e1:f7:3a:0c:d5:e3:c4:a6:12:
                    50:20:bf:29:dc:50:c9:ae:32:1d:e8:0f:0b:fb:2c:
                    3b:0e:1a:a3:9c:4d:a6:8a:36:66:85:7e:ba:a1:7b:
                    7c:e6:29:f0:a9:54:03:fd:bc:ca:f8:19:bb:d1:0c:
                    00:fd:51:94:18:e0:62:5e:2b:bd:01:0d:e9:a5:15:
                    4b:b3:ec:c3:95:4f:2a:a9:0d:34:60:f7:14:6c:27:
                    3f:01:03:e3:b8:75:66:02:e7:d8:93:27:ee:9d:f8:
                    c9:02:31:1e:7e:e3:d9:50:ab:87:7e:f6:1d:7c:6a:
                    c1:20:f9:25:2e:11:6f:1a:4a:89:a9:ce:d5:25:13:
                    cf:62:38:1c:4e:41:cf:04:c7:d6:5a:fc:cf:1c:03:
                    de:91:25:08:a2:8d:a0:e5:3a:c5:a2:48:d3:aa:cd:
                    5e:86:e2:c9:ad:a6:98:d9:2c:d4:a1:bd:e1:8a:f0:
                    78:2c:ec:11:04:88:44:07:91:9d:b4:86:b2:b5:62:
                    61:e7:fb:2d:eb:3c:f1:7b:61:06:16:eb:dc:f2:f7:
                    f8:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:DE:5F:0E:69:F7:32:08:60:D9:DF:F2:2F:28:2B:54:50:FB:A8:95
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0cf50ad6-9442-4597-8c89-e5beb52d50eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f2a:c800::/37

    Signature Algorithm: sha256WithRSAEncryption
         1d:44:0f:99:8f:fd:15:8d:10:c2:5c:a6:e2:fc:2e:54:a1:fe:
         db:4f:13:09:0b:a1:57:d4:ee:74:65:de:db:45:ca:d2:f7:aa:
         2e:66:ce:e0:a5:09:84:f9:04:cd:53:51:5b:66:d8:d1:31:bf:
         1d:7b:a9:03:ec:4f:bc:df:d1:c5:60:21:5a:36:e4:1f:f1:b3:
         f6:82:ef:45:52:c4:48:5c:62:84:6d:19:0e:57:0a:5e:3f:e9:
         2e:79:45:c8:83:1c:c2:07:89:2b:91:ad:9f:fb:32:5d:d7:a4:
         69:75:e5:73:a8:52:9b:0a:a9:8b:1d:93:51:f1:4b:8e:b3:d3:
         3c:ad:ac:79:9b:63:ff:3b:3e:3c:df:3b:07:57:af:7c:7f:fc:
         1a:b1:14:66:e4:17:c6:d6:7e:11:19:dc:e2:90:cd:46:3e:3d:
         53:71:f0:72:48:3e:27:6c:81:04:de:90:e4:1e:e4:15:5d:27:
         0e:5d:43:98:e1:75:8d:ed:3f:2d:f3:7c:a2:ec:86:96:aa:fd:
         1a:ae:e2:17:04:5a:f5:d7:66:78:1a:4f:11:36:70:8e:d2:db:
         82:05:79:90:2c:9f:94:d6:cb:d8:e0:68:30:00:7a:5e:8d:3c:
         33:94:7a:9a:81:5c:b4:fd:02:5f:22:c0:f6:2d:ac:41:6e:9d:
         fc:90:c0:92
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:01:52 2025 by rpki-client