Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0e38c9d2-1a67-4093-a53b-ef1b5ba7c156.roa
File:                     0e38c9d2-1a67-4093-a53b-ef1b5ba7c156.roa (raw, json)
Hash identifier:          GuCgj7pMhBZsKSt6D4FYXe3xPT9vPzFJYPcq7qqPeTE=
Subject key identifier:   CD:E3:73:9A:63:D0:96:53:67:EC:0A:D4:BB:E0:0C:25:22:4B:9D:5D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3FC8A5C329A91347DFBCAA19CEE9DF388BFC4F9F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0e38c9d2-1a67-4093-a53b-ef1b5ba7c156.roa
Signing time:             Wed 16 Apr 2025 19:07:19 +0000
ROA not before:           Wed 16 Apr 2025 19:07:19 +0000
ROA not after:            Wed 21 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff4:8000::/39 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:c8:a5:c3:29:a9:13:47:df:bc:aa:19:ce:e9:df:38:8b:fc:4f:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 16 19:07:19 2025 GMT
            Not After : May 21 23:59:59 2025 GMT
        Subject: serialNumber=cc27d60606bf2b9992f088d48ac2ef72354c2afa4e49768b13170c19e359320a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c3:71:16:b6:3d:c6:f3:45:06:3e:ba:b4:a6:
                    4b:16:b1:6d:33:67:05:54:36:c9:85:5d:e0:86:62:
                    2f:b2:80:e6:eb:17:b6:98:99:d1:97:d4:0f:49:fd:
                    34:48:a4:ed:54:9f:26:08:91:6e:83:cc:05:47:3f:
                    c1:33:fe:59:97:84:c0:8a:6a:ab:21:d4:5b:44:b9:
                    86:b0:51:0f:e9:9d:f2:3c:4b:a6:82:26:7e:e1:38:
                    37:95:f4:30:8e:e3:c7:6f:b8:07:db:f5:e9:ee:b9:
                    52:e2:6c:bc:26:ac:e2:28:d7:8b:55:db:53:d3:6f:
                    2f:85:13:a7:da:00:71:f1:90:dd:55:63:b1:48:d7:
                    6e:dd:ec:d2:4f:a7:88:64:de:bb:c4:10:e0:55:05:
                    e0:10:e7:e0:2c:d1:3d:13:19:ec:83:9d:16:3c:46:
                    0c:9c:69:e5:81:d2:e0:34:68:e0:aa:1d:9c:56:3f:
                    2f:76:62:5f:a4:fa:7c:69:ac:45:d4:28:34:98:f6:
                    65:61:71:17:32:71:32:af:eb:5d:6b:f7:15:7c:e8:
                    af:8b:f8:d6:14:ae:ea:48:04:b9:70:79:50:bb:92:
                    ce:42:f0:19:9d:0f:8c:af:30:37:d1:8c:ad:ee:66:
                    5a:9f:64:34:2a:eb:f3:6a:4a:61:00:29:d3:10:92:
                    ad:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:E3:73:9A:63:D0:96:53:67:EC:0A:D4:BB:E0:0C:25:22:4B:9D:5D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0e38c9d2-1a67-4093-a53b-ef1b5ba7c156.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff4:8000::/39

    Signature Algorithm: sha256WithRSAEncryption
         b8:a8:41:a1:67:be:89:cf:6e:13:c1:f8:af:93:9d:01:43:d5:
         e1:6a:80:dc:6d:d2:44:8a:1f:12:16:e5:04:3d:fa:ce:40:9b:
         56:65:60:45:5f:2b:a0:70:37:f3:50:d6:9b:f3:81:47:57:a1:
         3d:19:9d:9d:d1:7d:dc:7c:2a:26:ad:36:b4:53:91:d8:9b:f4:
         04:2f:85:34:08:44:fb:1c:ff:92:8f:d3:4c:8c:2d:3b:15:31:
         63:36:e5:f3:46:9f:07:92:eb:58:a5:e9:d3:df:e4:37:cc:e0:
         0b:0a:91:5e:37:d2:51:bc:81:f4:89:1a:5a:40:48:12:16:9b:
         81:74:9c:a7:58:82:bc:36:d3:c0:36:2f:b5:20:73:3c:4d:1d:
         42:8b:37:c7:79:2d:a7:82:36:23:fb:9e:54:f8:b6:e0:3f:2d:
         85:23:b2:87:6e:8c:ff:4c:4b:d0:cb:fa:97:80:c7:4b:5b:8a:
         9a:9c:b0:9f:e1:41:5e:be:4a:54:09:91:a2:3b:07:bc:10:25:
         14:85:d0:c9:b0:42:a8:57:66:eb:d1:b5:ca:d7:d0:02:75:05:
         e7:47:2e:09:e7:f9:32:a1:46:77:5e:0c:fd:a6:65:78:2e:ee:
         03:9b:6c:c2:88:fd:ac:23:e6:0a:7d:43:9d:91:50:24:8c:8c:
         6e:49:0c:78
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 26 18:11:03 2025 by rpki-client