Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/186224eb-58a9-4d11-bc6b-39128a803177.roa
File:                     186224eb-58a9-4d11-bc6b-39128a803177.roa (raw, json)
Hash identifier:          cI2frmHzP8CLCuJJgG8aDd4iZWomQo++RrBRrODLhMQ=
Subject key identifier:   BC:4F:FF:B7:80:77:00:A0:B1:85:C5:A7:F7:7E:1C:96:29:64:80:7D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       496D7D7759DE09C37A5FADB66C96A30658475C9A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/186224eb-58a9-4d11-bc6b-39128a803177.roa
Signing time:             Fri 13 Jun 2025 16:21:17 +0000
ROA not before:           Fri 13 Jun 2025 16:21:17 +0000
ROA not after:            Fri 18 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f69:6000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:6d:7d:77:59:de:09:c3:7a:5f:ad:b6:6c:96:a3:06:58:47:5c:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 13 16:21:17 2025 GMT
            Not After : Jul 18 23:59:59 2025 GMT
        Subject: serialNumber=1d79ac2e306804611ddaa421960e80d382d61c4e83b99210d46dba3140484622, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e7:39:e4:8b:2f:11:88:52:d5:53:9b:ed:a8:
                    52:a6:01:25:8b:c7:23:01:9a:ab:af:12:51:3e:86:
                    4c:af:0a:0b:6c:5e:07:2f:64:49:23:f6:e8:37:98:
                    ad:46:b7:80:1f:a3:2c:c9:7a:a0:60:24:bf:65:19:
                    1d:a9:d7:40:5a:f4:c0:72:c7:7d:0d:95:97:ad:16:
                    68:f0:2e:e8:38:95:e8:38:56:a0:7c:19:37:0a:c6:
                    a0:17:68:20:9a:af:69:b7:30:aa:ab:29:51:70:8c:
                    fb:65:98:28:e9:86:db:f1:83:a4:a3:cc:87:87:23:
                    7e:dc:63:e6:ef:db:b8:86:4e:96:00:75:9e:e7:b9:
                    95:31:b0:cd:e2:33:40:7b:b6:78:c9:fc:93:bf:b4:
                    5b:44:6b:1c:12:59:48:91:e9:95:69:4f:c8:f4:9b:
                    21:b3:38:07:c6:dd:d7:fb:28:3c:b7:71:bc:20:c7:
                    7a:55:cb:23:4d:68:64:79:3c:8f:62:e7:e5:c8:f0:
                    da:dd:b0:c0:4c:c1:d4:15:cc:37:8f:cd:65:4f:3f:
                    ca:3f:7d:de:0d:34:0f:61:ac:e3:0c:11:8b:a4:d9:
                    2d:95:3c:a8:e9:98:c8:68:90:12:60:10:52:a8:6e:
                    d3:69:46:47:c2:5a:38:3c:0e:43:c7:64:1a:cf:f8:
                    0c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:4F:FF:B7:80:77:00:A0:B1:85:C5:A7:F7:7E:1C:96:29:64:80:7D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/186224eb-58a9-4d11-bc6b-39128a803177.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f69:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         57:01:53:ac:7c:2a:c5:65:52:6c:66:e9:43:ed:b3:8b:1b:22:
         37:79:cf:c4:39:5b:3f:a6:7d:21:c1:c0:5f:66:5c:67:a4:d4:
         87:33:9d:9b:f1:4a:89:e4:2f:07:1c:8a:c2:60:eb:be:20:95:
         19:b3:e5:a1:43:fa:3e:d8:d0:ef:15:2b:fb:b3:58:0f:eb:05:
         cf:a6:23:7b:c8:7c:25:02:8c:f7:aa:c6:9b:9e:c4:5d:43:f3:
         7d:98:5f:9a:59:50:47:15:b5:af:b3:39:dc:7a:62:e6:82:53:
         b0:40:48:3a:c6:ce:29:71:70:23:99:77:12:a5:d6:95:2d:d6:
         e9:ce:21:b9:18:c0:9f:74:bb:ef:ae:61:0e:b0:e1:38:a5:d0:
         26:d9:47:42:f4:78:a7:e6:45:8f:61:a6:45:94:5b:fc:e8:ec:
         31:bd:8c:f8:31:19:6a:5d:35:ee:dc:30:0a:5c:ec:ab:f6:92:
         30:f6:1a:23:03:b7:39:d8:4a:ef:d4:56:84:e9:62:4e:33:15:
         3f:46:78:47:9a:9b:f6:22:ad:f7:34:34:56:65:53:85:17:58:
         e5:38:53:de:6b:a1:b8:9e:7b:c0:e9:bb:83:83:17:ad:08:b8:
         ab:1c:02:53:d0:09:56:be:73:44:24:8d:3e:26:e7:42:a2:55:
         e9:c6:ea:37
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 15 08:24:02 2025 by rpki-client