Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3283a168-489e-49fe-839c-d518cd5c1699.roa
File:                     3283a168-489e-49fe-839c-d518cd5c1699.roa (raw, json)
Hash identifier:          /mB85E4uKt9aI7b4qv8koG3mPiJsL8O/2fDv+RjIEqU=
Subject key identifier:   D9:D6:8F:86:29:AC:E3:72:26:87:DA:C7:1D:BA:7B:E9:90:AE:49:87
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0FFCA22B433FBE392A920786A13DA01D8CD842B6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3283a168-489e-49fe-839c-d518cd5c1699.roa
Signing time:             Tue 10 Jun 2025 16:30:24 +0000
ROA not before:           Tue 10 Jun 2025 16:30:24 +0000
ROA not after:            Tue 15 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f00:80b0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:fc:a2:2b:43:3f:be:39:2a:92:07:86:a1:3d:a0:1d:8c:d8:42:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 10 16:30:24 2025 GMT
            Not After : Jul 15 23:59:59 2025 GMT
        Subject: serialNumber=c14ec7e25e155b176ac2c1244717be5d7d7c3cfdad4df098e876bc2691ca1bd7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:64:de:c8:54:96:be:c1:3f:f3:31:d0:b5:82:
                    4f:62:be:f6:f9:6b:9c:67:c9:21:db:b3:52:00:df:
                    7c:2f:4a:b7:33:55:a7:b1:39:45:de:2e:46:f2:c6:
                    57:a4:f0:0a:f3:4a:56:78:5f:d0:d6:e3:b3:05:32:
                    cb:f1:ed:a1:77:fd:38:ea:6a:7a:17:53:b4:53:f3:
                    4a:84:2d:42:87:8f:82:dc:59:0c:84:cd:be:e3:7d:
                    fe:18:a1:ed:8c:ab:a5:c6:70:1c:b5:49:c4:ee:49:
                    a7:35:e2:2c:76:76:16:ff:3a:3b:63:b1:46:40:14:
                    11:57:e9:4a:f6:37:9e:59:aa:c2:4e:08:31:0a:cd:
                    44:a6:9c:70:2c:43:11:f0:2d:b4:5f:d7:ee:ea:47:
                    81:92:f1:1c:94:4c:82:43:14:96:05:98:5b:fd:2a:
                    4b:a1:40:b5:c8:e5:8d:66:e4:1c:86:bc:9f:4a:70:
                    5a:55:2e:5e:a9:21:4d:90:3b:10:c8:cd:b1:da:65:
                    2c:c0:eb:18:6f:79:18:ea:83:38:3c:62:28:e9:b3:
                    2c:3b:b6:72:e4:7b:03:17:1a:f1:cd:b3:4e:80:33:
                    28:67:7e:4c:2c:04:b6:7d:ea:ee:1b:59:11:8b:e3:
                    e7:3e:01:d9:c5:ca:af:b0:bf:fa:0f:b9:f5:2d:f3:
                    b8:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:D6:8F:86:29:AC:E3:72:26:87:DA:C7:1D:BA:7B:E9:90:AE:49:87
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3283a168-489e-49fe-839c-d518cd5c1699.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f00:80b0::/48

    Signature Algorithm: sha256WithRSAEncryption
         5b:2d:32:01:6c:58:dd:0f:ae:5f:01:09:f5:33:d5:31:84:74:
         77:b6:17:19:a6:bb:30:03:33:5a:ad:5a:e0:b7:1b:68:3e:49:
         6c:2f:60:99:fd:22:94:06:c6:70:68:1d:77:43:8b:1b:79:a4:
         dc:0c:33:2f:91:db:eb:1b:b5:b4:65:36:29:d6:e9:af:fd:f0:
         35:b5:27:ac:e7:df:a4:84:aa:9e:73:cb:93:81:e5:39:24:e4:
         c5:96:dc:91:e6:ad:08:44:ba:97:10:e9:19:5e:34:a5:d7:44:
         9f:95:da:69:fe:30:f7:ad:16:bd:f3:1c:84:51:db:8e:bd:87:
         66:63:0c:15:29:cd:3b:83:4d:b1:11:06:f9:61:f2:77:cf:b8:
         68:c7:73:e3:67:8d:8c:0c:be:6f:87:67:6e:73:46:dc:a4:fc:
         df:cf:61:dd:28:a7:9d:45:47:19:ac:3a:fa:58:f9:bf:95:92:
         db:f3:45:85:c2:2f:5b:65:ff:39:88:98:6a:cc:9a:2b:08:c8:
         3b:9d:aa:d7:db:8d:6d:1b:37:cd:4c:6e:8b:4c:cc:12:ec:72:
         a7:07:b0:04:05:51:44:61:8f:15:85:81:d9:ff:de:0a:a1:47:
         a9:3c:e1:47:56:8e:89:d2:c1:c8:86:a8:fe:e9:1c:83:c5:bc:
         47:55:11:4f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jun 17 22:58:01 2025 by rpki-client