Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ececb56-9d12-4215-aa1e-a4b9ad6e9a77.roa
File:                     5ececb56-9d12-4215-aa1e-a4b9ad6e9a77.roa (raw, json)
Hash identifier:          qh2WbEld1Hst1j9JXwhqm7lL90Ti1h83rkvgl5t2I+g=
Subject key identifier:   E2:89:C6:F4:1F:7D:DE:26:80:B6:70:6A:B1:DE:85:D8:39:3C:26:DA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       091A505B4CE47DFCA2591BE3FBBBA9C1C06329B2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ececb56-9d12-4215-aa1e-a4b9ad6e9a77.roa
Signing time:             Fri 13 Jun 2025 17:20:30 +0000
ROA not before:           Fri 13 Jun 2025 17:20:30 +0000
ROA not after:            Fri 18 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f21:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:1a:50:5b:4c:e4:7d:fc:a2:59:1b:e3:fb:bb:a9:c1:c0:63:29:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 13 17:20:30 2025 GMT
            Not After : Jul 18 23:59:59 2025 GMT
        Subject: serialNumber=79dcf46bc8b6eab2594739a6366a9b17fb60195b2f6159d658d96a90ade250a2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:10:80:0c:83:9d:f7:59:6a:79:e6:70:84:1c:
                    49:57:2b:a5:56:a0:1c:50:c8:4d:50:9b:d8:b1:50:
                    99:e2:b5:f8:3e:99:db:ac:b5:13:29:be:19:2b:45:
                    1e:aa:7b:19:ff:e3:a5:0c:a7:26:cb:aa:90:1a:c3:
                    72:f0:95:24:bf:a8:41:64:82:94:da:28:89:77:c2:
                    79:de:d6:a7:82:b5:2c:db:f9:0d:61:cd:1b:40:c9:
                    a5:53:97:fc:20:90:20:d0:64:cf:6a:83:d9:6b:42:
                    a7:ce:cd:67:89:1a:10:4a:d1:16:02:f2:f7:db:d1:
                    e9:41:f9:30:6d:35:0d:13:f8:25:30:0a:8c:9c:66:
                    11:77:94:75:85:96:f8:e3:18:5f:ab:8c:80:4e:42:
                    11:65:9a:1a:6a:b4:4f:29:78:ab:fd:dd:87:bd:2a:
                    99:0e:21:ae:2b:8f:2d:a5:36:a9:9d:c5:f7:ac:ef:
                    80:be:81:6e:9d:63:30:18:8c:c3:b3:2a:cc:61:b3:
                    aa:46:0c:29:19:79:cb:e4:1b:b7:0f:e7:70:d6:ff:
                    0b:d3:f4:3b:7c:13:c8:90:da:c6:c0:83:0d:0e:de:
                    93:69:3f:25:c3:22:62:a1:20:bb:3e:d4:1c:4a:20:
                    01:28:bc:b4:e9:a0:1d:18:d7:0e:42:10:a4:19:61:
                    ce:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:89:C6:F4:1F:7D:DE:26:80:B6:70:6A:B1:DE:85:D8:39:3C:26:DA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ececb56-9d12-4215-aa1e-a4b9ad6e9a77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f21:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         83:4a:db:d5:f1:10:93:e2:ae:f4:3e:c0:d5:a8:ea:07:c9:60:
         14:74:93:3c:94:dc:20:33:00:83:c8:6c:fc:e3:c8:78:1f:cc:
         19:92:3f:d0:9d:bf:72:ca:d4:8e:3c:df:78:57:63:02:5d:2e:
         4b:97:c6:bd:33:fd:8f:66:80:de:ac:78:21:8d:d5:a8:0d:89:
         a0:bb:e0:66:61:30:5d:b4:6e:49:15:a3:2a:51:35:83:7c:fc:
         ab:c4:10:83:4b:44:6e:33:5b:26:f7:f5:e4:bc:d5:7a:ac:63:
         c0:ae:f0:03:fa:54:54:bd:ec:ad:36:ad:16:8f:ec:fe:78:81:
         a9:c4:73:2c:83:4e:5c:40:bc:24:c8:23:8d:17:9b:40:8e:67:
         6c:86:f2:97:1a:dc:87:56:3a:71:b1:e2:3b:24:a5:ca:b4:cb:
         76:79:2d:48:91:33:fa:3b:5a:5c:4e:49:0e:72:b3:db:c8:09:
         97:72:ee:41:a5:8f:a4:b9:68:5e:b3:df:5a:b4:6e:a2:56:13:
         62:be:47:f1:6c:35:fa:fc:65:a1:0c:12:87:99:53:f7:14:3f:
         6d:52:0e:d8:71:5d:55:e3:3b:9a:06:aa:10:3e:4c:52:ea:d6:
         48:c0:fd:7d:3a:bf:ab:99:25:31:34:2c:ff:5b:67:0e:b9:c8:
         c5:f0:b1:73
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 14 06:35:07 2025 by rpki-client