Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/31414b48-86de-460c-97b2-cffafc473a46.roa
File:                     31414b48-86de-460c-97b2-cffafc473a46.roa (raw, json)
Hash identifier:          sAjmjSS1IAc2aU2VkUTT/Kdj/AVGMI+pGoaQPx9hxUE=
Subject key identifier:   88:74:14:03:ED:AB:28:B2:2B:79:6A:CF:1C:8C:CB:C5:49:AB:03:8C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       12C74E2723CDE55A1F75B76993522706D9810C38
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/31414b48-86de-460c-97b2-cffafc473a46.roa
Signing time:             Fri 13 Jun 2025 15:01:48 +0000
ROA not before:           Fri 13 Jun 2025 15:01:48 +0000
ROA not after:            Fri 18 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff7:e0c0::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:c7:4e:27:23:cd:e5:5a:1f:75:b7:69:93:52:27:06:d9:81:0c:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 13 15:01:48 2025 GMT
            Not After : Jul 18 23:59:59 2025 GMT
        Subject: serialNumber=fd333ff18426d9842ce52bfa54ab93cf5f42565527c01527f6fb7ee01ffbe334, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a5:d3:65:b1:36:8d:33:93:ba:30:4a:47:63:
                    aa:80:09:3b:94:4f:56:bd:61:48:43:5b:11:0f:10:
                    25:e9:27:ae:c1:02:f8:02:a2:9a:ee:ff:c9:38:08:
                    e0:09:11:1b:3f:f5:fc:04:ba:19:4d:50:5c:3d:b4:
                    65:ba:84:14:88:82:2d:05:ad:d6:00:4d:e6:3d:8d:
                    a6:91:59:4f:5f:06:cd:51:07:8d:7c:1f:c1:9d:f5:
                    7e:92:79:48:bc:a2:18:85:9f:d3:b2:9a:4f:84:d1:
                    3c:e3:db:58:4d:9f:1c:bb:c5:79:2f:61:90:d3:f0:
                    ad:0b:5e:d8:75:a6:3a:13:3e:70:da:ee:1e:ca:4e:
                    27:f5:ad:ef:06:dd:25:d1:d5:b0:79:77:e5:e9:4d:
                    7e:d3:00:a9:06:55:3a:ff:b1:f2:a9:71:f4:dd:b5:
                    a1:b8:d3:33:87:6f:2a:aa:77:81:00:f5:04:5e:0a:
                    ea:c1:19:5a:ce:b3:ff:0d:52:f5:5a:c7:1a:b9:57:
                    ac:f3:b7:c8:f2:be:b6:dd:9b:bc:86:69:e1:eb:60:
                    1f:05:3c:44:9a:4f:5d:8a:e4:00:47:52:71:db:df:
                    6f:67:5d:a8:9d:8a:9d:b2:2a:4b:1d:48:4a:a2:a1:
                    ce:65:f7:98:44:09:1e:86:2b:8f:9a:fd:f1:7b:95:
                    a0:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:74:14:03:ED:AB:28:B2:2B:79:6A:CF:1C:8C:CB:C5:49:AB:03:8C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/31414b48-86de-460c-97b2-cffafc473a46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff7:e0c0::/46

    Signature Algorithm: sha256WithRSAEncryption
         77:18:f7:c6:31:ee:28:62:47:31:75:eb:1f:c0:35:93:c8:93:
         cd:2f:ed:51:30:c1:43:d9:53:a6:b3:e7:b5:0c:27:88:19:3d:
         ad:f8:34:59:ba:17:cf:f9:d6:96:86:75:f1:83:7c:fa:4e:84:
         b6:fc:2c:47:5c:b9:5b:f1:3e:20:e7:cf:dc:70:4f:02:28:45:
         8a:13:f7:6b:c6:c8:b0:66:c0:3a:42:53:d8:44:47:c5:66:73:
         52:9f:48:35:61:e4:ff:6a:b7:db:d0:ee:cf:65:31:de:7e:45:
         8e:c0:c0:0c:6b:65:98:6a:02:9a:14:d7:9b:58:a1:59:d0:02:
         50:04:56:b4:db:05:68:e4:75:e4:82:bf:35:e6:44:ef:a9:b2:
         6c:d5:5d:cd:d5:ec:8e:e7:72:5d:bc:41:43:1d:61:ad:de:3d:
         5f:28:1b:d7:92:c3:d8:0f:4f:90:eb:0a:06:e1:4b:e4:24:4d:
         6f:52:fa:79:0b:32:21:66:f0:92:21:01:5f:4c:59:3d:5b:4e:
         48:9c:f3:58:69:af:70:92:af:dc:a6:21:c7:fb:81:90:9c:b9:
         c4:81:5b:f9:8f:26:d7:00:dd:83:be:ab:fc:5d:16:2d:99:ab:
         1d:c8:cc:84:62:02:c0:25:5c:e6:28:13:11:8e:96:ac:01:7b:
         e6:3c:82:92
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 14 19:06:00 2025 by rpki-client