Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4cd2cc9b-78f0-4971-a170-a90ca08b933f.roa
File:                     4cd2cc9b-78f0-4971-a170-a90ca08b933f.roa (raw, json)
Hash identifier:          xJzD5BdD/ZzLKG7dOxosiTOdaADfGjK9vmoQrvJHlw0=
Subject key identifier:   AF:A4:07:70:B0:02:83:CC:55:7D:BD:3D:8A:B6:0F:BC:75:CD:C0:D4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7EAF79621B2810ABA7594E6C3EA85BB5DFF21DB6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4cd2cc9b-78f0-4971-a170-a90ca08b933f.roa
Signing time:             Fri 13 Jun 2025 17:32:10 +0000
ROA not before:           Fri 13 Jun 2025 17:32:10 +0000
ROA not after:            Fri 18 Jul 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f10:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:af:79:62:1b:28:10:ab:a7:59:4e:6c:3e:a8:5b:b5:df:f2:1d:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 13 17:32:10 2025 GMT
            Not After : Jul 18 23:59:59 2025 GMT
        Subject: serialNumber=23bbcc2a89d3647d77d8a87bfc00fd1f1612c286f16518142fef6daf74f229e8, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:71:03:40:d1:60:14:72:12:3e:b7:a3:0b:57:
                    f9:c7:73:ca:54:69:e9:c6:21:0c:c5:9f:3d:76:6c:
                    06:5a:16:a5:79:b4:b7:1c:8a:1c:f0:11:39:d0:f5:
                    cf:a0:07:f6:aa:c3:4a:9f:b8:ce:cf:8b:ed:ba:da:
                    41:a9:be:1b:17:59:75:a0:15:ed:66:01:b0:eb:5b:
                    4e:7e:00:9f:e8:dc:24:5c:59:22:82:01:a4:b3:da:
                    22:df:46:54:f6:eb:2a:5a:94:76:a9:b3:8e:88:fe:
                    d6:e8:f8:5b:18:ba:e3:6f:69:e4:c4:15:a3:c1:4e:
                    3b:ec:ab:ce:fd:fb:f4:39:5b:bc:2f:a0:4e:2d:25:
                    d8:5b:85:42:b0:cb:61:8e:6d:35:93:0b:6f:0b:6d:
                    15:d0:00:86:b5:5c:b0:5a:4e:a7:82:82:cf:73:5f:
                    e6:79:9e:56:f7:a1:62:de:90:c0:5f:17:c3:1f:1a:
                    9a:42:91:57:62:1c:f9:b2:5e:0e:41:01:65:c0:b9:
                    36:0c:f4:00:9f:99:ce:42:89:ba:93:8c:e6:b5:0e:
                    60:fb:30:45:09:c0:87:11:51:07:1c:3e:2c:b6:ff:
                    dc:44:6b:6e:c1:34:7d:4b:66:f9:20:a6:ae:01:70:
                    2b:67:84:b9:e7:2d:17:92:9a:a0:c9:83:91:0c:74:
                    d5:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:A4:07:70:B0:02:83:CC:55:7D:BD:3D:8A:B6:0F:BC:75:CD:C0:D4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4cd2cc9b-78f0-4971-a170-a90ca08b933f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f10:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         48:e8:78:2c:dc:98:b0:16:a9:61:e2:06:7c:8c:d2:e9:96:f3:
         c8:31:a8:ec:7c:2f:84:1e:5c:79:3e:c3:24:02:8e:6b:a3:b4:
         2e:6c:55:21:52:b7:27:96:e7:6b:50:52:5c:e7:d2:49:72:14:
         fe:95:44:0a:13:0e:e5:a5:6a:26:64:77:0b:6c:8e:e9:40:4f:
         c1:c1:96:0c:f2:9a:7e:29:38:2a:c1:a5:de:85:a1:48:13:a2:
         48:11:e9:53:ad:a5:8e:9f:bc:d1:5d:43:32:c2:9a:d9:6a:6d:
         6f:d4:a4:0b:c2:0c:8f:2c:ea:01:47:a6:97:51:d8:75:37:1d:
         30:49:27:53:d4:8c:15:1e:72:f5:a7:31:34:af:dc:3e:80:ab:
         93:22:d9:fb:15:25:2d:d4:e7:f6:d4:bc:ee:1a:df:72:06:34:
         bd:7c:d1:3e:df:0f:71:39:b7:8c:a1:e2:69:97:c3:35:99:3c:
         f7:3b:a4:e1:96:66:8f:5d:ad:0b:51:8c:ef:2a:c4:06:59:1d:
         d5:95:c1:ef:30:cf:e0:0d:77:3a:49:c6:86:a9:6f:00:ee:a8:
         b9:2a:57:ae:57:76:4b:b0:28:34:56:35:14:d1:be:5f:7b:60:
         03:18:b7:d2:62:d7:ef:96:7a:87:c9:c1:9e:a8:4b:4d:a1:de:
         1c:89:64:c4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 15 12:55:39 2025 by rpki-client