Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c463e88-0f7c-4897-ac99-34b8567b1dc9.roa
File:                     4c463e88-0f7c-4897-ac99-34b8567b1dc9.roa (raw, json)
Hash identifier:          ZgQrDHQ8bvu9C0lG2ZwkSxsPY18VKomKPzdzHm9TaD8=
Subject key identifier:   10:51:89:A7:4B:D5:2B:C5:51:E8:A8:07:56:C2:EB:B6:E2:6D:D0:19
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       119B6B5D4037A94816DA4C13F138B481DA79A958
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c463e88-0f7c-4897-ac99-34b8567b1dc9.roa
Signing time:             Fri 13 Jun 2025 15:31:53 +0000
ROA not before:           Fri 13 Jun 2025 15:31:53 +0000
ROA not after:            Fri 18 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fff:8000::/39 maxlen: 39
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:9b:6b:5d:40:37:a9:48:16:da:4c:13:f1:38:b4:81:da:79:a9:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 13 15:31:53 2025 GMT
            Not After : Jul 18 23:59:59 2025 GMT
        Subject: serialNumber=0b38a570280774ebe5f7a47016ef558f9ccb1070a2bc549dbb4794c26c5b73d6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:7f:03:11:e3:bf:86:a8:1c:e4:cf:c8:1d:30:
                    dc:5e:94:a1:a0:bd:1d:bc:85:27:6e:a2:1f:9b:6a:
                    de:ce:0a:4b:d1:93:d3:a1:4d:6c:21:75:14:28:f4:
                    86:fe:c4:db:40:94:f9:6c:09:97:69:77:bc:11:63:
                    97:33:93:14:7e:94:06:7a:42:a4:b6:18:03:53:15:
                    fa:d3:22:ff:18:3a:41:0d:92:19:2e:b0:2e:40:cd:
                    0a:52:ca:77:04:f3:a5:e3:56:4c:ae:e0:3f:68:82:
                    0c:4b:77:33:f1:75:85:5b:34:7b:bc:d9:ba:7c:57:
                    03:b3:45:4f:3a:1d:15:4d:61:76:c4:4c:74:a7:56:
                    21:d6:7a:f1:a2:9a:a4:58:22:bc:b9:6e:69:c5:39:
                    db:14:9a:79:75:53:26:24:b6:f6:a6:e6:7d:b4:ff:
                    f2:ca:be:a9:b5:41:6d:d0:25:97:13:b6:ea:4b:78:
                    0f:d5:b9:99:32:e2:2e:1d:f9:ed:65:0c:83:f1:08:
                    f9:73:6f:25:be:3b:b9:2b:72:a2:51:b8:1f:69:94:
                    a2:52:c7:cb:2d:44:ab:54:65:61:b6:6d:4d:9c:e5:
                    ac:be:d0:ac:d9:bb:2d:77:fb:57:64:b4:cb:5e:53:
                    35:bf:62:eb:c5:cf:bc:aa:95:5e:04:84:14:b2:f1:
                    71:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:51:89:A7:4B:D5:2B:C5:51:E8:A8:07:56:C2:EB:B6:E2:6D:D0:19
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c463e88-0f7c-4897-ac99-34b8567b1dc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fff:8000::/39

    Signature Algorithm: sha256WithRSAEncryption
         aa:b6:a2:00:11:7b:51:c9:ca:b6:a0:dc:e9:ad:a0:3d:c7:a1:
         4d:79:ea:57:8c:02:41:1a:05:41:b8:00:e0:9d:31:29:9d:28:
         ae:43:22:7d:41:06:48:1c:57:5d:9a:a1:e9:89:38:0d:76:f2:
         4f:3c:ac:f6:8a:ed:64:69:c6:0c:48:73:45:8c:ee:d6:f2:9b:
         25:88:cf:d0:6f:01:b1:8d:93:05:85:de:a0:e8:a9:50:ca:4e:
         f6:8b:4f:b7:60:c9:08:b2:00:66:da:ab:84:1d:b8:47:49:f3:
         78:57:7d:04:1f:58:fe:f2:2c:1d:ad:95:16:c6:aa:3e:49:a6:
         9a:69:c6:06:b2:66:97:a2:c4:84:94:74:fd:27:43:1e:19:be:
         e0:9f:28:ae:bd:bd:b8:57:9a:82:1a:30:54:d1:61:4a:3b:61:
         3e:91:cd:72:4b:e7:5b:2f:c1:4e:81:e2:1a:16:0d:e1:9d:1b:
         fe:bc:ab:60:ce:2c:ba:07:2c:7d:19:2c:2c:9f:6b:8f:50:26:
         21:dc:7f:66:5c:d7:e3:4c:0b:c9:35:d5:6b:aa:56:c8:28:37:
         8c:d3:ba:27:40:64:f6:48:a3:40:bb:15:e5:6a:d8:e9:80:7d:
         68:88:a5:61:f2:d5:1f:dd:ff:bc:6e:2b:fb:b2:03:9b:e5:f6:
         7d:4e:4b:f4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 14 18:51:11 2025 by rpki-client