Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59167a0a-38a5-40ce-b8dd-17fb1df5fe38.roa
File:                     59167a0a-38a5-40ce-b8dd-17fb1df5fe38.roa (raw, json)
Hash identifier:          8kUZhvaohMdBqPXL46TpAv5kyg/oyNJ3uqRD26GKlVg=
Subject key identifier:   98:22:40:DD:AD:4C:98:E7:47:A5:3A:52:2E:DD:70:E5:AF:BB:B0:31
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1152EFCF699B1D806ECDAF5F7D89DFAD2F27DCFA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59167a0a-38a5-40ce-b8dd-17fb1df5fe38.roa
Signing time:             Fri 13 Jun 2025 15:21:19 +0000
ROA not before:           Fri 13 Jun 2025 15:21:19 +0000
ROA not after:            Fri 18 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fff:8010::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:52:ef:cf:69:9b:1d:80:6e:cd:af:5f:7d:89:df:ad:2f:27:dc:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 13 15:21:19 2025 GMT
            Not After : Jul 18 23:59:59 2025 GMT
        Subject: serialNumber=c863f6a6e3f264dcf41679d06368cf30ff27ac70290f725d3599d172830a8f6a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:74:71:de:13:2b:81:14:9b:c0:91:86:9e:98:
                    e8:84:c6:1b:6a:ce:39:5d:4a:bf:49:b1:48:a4:0b:
                    45:40:4d:46:31:c4:9f:d2:1f:1a:90:47:32:db:ee:
                    10:8d:03:d7:7b:b9:31:e2:6a:ef:3d:a4:93:32:3e:
                    20:f5:fd:f1:65:4d:98:97:80:c7:38:c4:01:4b:43:
                    d5:83:19:82:07:92:11:61:38:32:8d:3a:70:bc:e8:
                    0d:06:44:10:3a:d7:61:97:d1:5d:b3:4f:69:f5:c8:
                    aa:df:f9:8f:c8:a9:2c:19:f4:05:f1:48:6c:84:7e:
                    9c:64:13:05:fd:af:d6:64:8a:75:48:b6:46:d3:0d:
                    e9:a4:79:53:1f:83:83:78:65:67:d8:4e:54:24:8d:
                    6a:03:5f:b4:45:b3:9f:e9:52:aa:75:77:37:ea:ca:
                    b8:27:45:ee:c4:23:82:e9:f9:d2:e4:b5:9c:62:dd:
                    e4:15:5d:90:13:94:38:21:0e:21:b7:ce:ff:4c:d9:
                    4d:39:50:e4:76:83:f9:20:dc:2b:ed:37:f6:23:14:
                    28:a2:47:7d:96:35:3f:c9:ae:75:57:34:ff:e0:13:
                    8d:eb:5a:22:94:37:aa:f7:75:46:02:99:62:38:3a:
                    26:b4:95:89:dc:ba:46:e6:b3:6b:4b:95:c7:17:c1:
                    8f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:22:40:DD:AD:4C:98:E7:47:A5:3A:52:2E:DD:70:E5:AF:BB:B0:31
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59167a0a-38a5-40ce-b8dd-17fb1df5fe38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fff:8010::/48

    Signature Algorithm: sha256WithRSAEncryption
         24:a6:78:8f:9d:0d:8b:2c:32:5c:58:3e:65:cf:cb:cc:22:2f:
         63:1a:64:63:54:16:8d:03:6d:0a:76:2d:bc:d6:3d:ba:c5:e1:
         c7:82:58:04:de:36:5b:04:ae:f4:5d:b4:42:f4:96:29:f0:8e:
         e2:a3:53:74:27:1e:c3:72:eb:7e:35:2d:53:c8:d3:33:c5:c0:
         3e:35:30:1b:25:41:89:0f:62:5a:c2:85:3f:98:95:9a:d4:2f:
         6a:ba:90:24:eb:e4:6c:3f:9b:08:6b:de:12:2d:34:59:b8:d5:
         3a:aa:4b:de:7d:27:ee:4c:63:0a:23:09:ab:2f:6c:7a:4d:9b:
         4e:82:9a:04:ce:6f:6a:e8:e8:f8:34:30:f2:85:51:b0:2c:96:
         fa:20:0c:01:95:14:ff:f9:77:cf:45:44:1c:5d:b4:08:93:b2:
         f4:6e:9d:43:1f:f7:f9:48:85:05:0a:30:98:04:f6:3b:7b:51:
         b1:e6:fe:44:2c:02:51:b3:77:a0:61:62:35:dc:42:23:f7:59:
         75:62:b9:56:5e:e8:d3:e1:f0:16:f9:fe:ae:ea:11:70:53:a4:
         d2:b0:68:00:0f:00:36:1d:30:73:8c:dd:2a:31:2c:1f:e4:3f:
         7b:80:44:14:ca:66:27:41:61:ab:00:fb:2b:c4:e8:14:3b:61:
         ba:fc:90:33
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 14 18:53:26 2025 by rpki-client