Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6aa2526d-ee97-4c2d-916d-28e097673aca.roa
File:                     6aa2526d-ee97-4c2d-916d-28e097673aca.roa (raw, json)
Hash identifier:          divYfszR/UQD/XY43rUYysgnoPAes+74yjf9vWkO2hk=
Subject key identifier:   30:3C:28:A6:38:CC:2D:16:97:64:84:D4:A2:44:27:A7:1B:82:B5:C1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7A19F9BCBA9DD37910BF93188B6E5BFA43CC0B38
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6aa2526d-ee97-4c2d-916d-28e097673aca.roa
Signing time:             Fri 13 Jun 2025 16:10:35 +0000
ROA not before:           Fri 13 Jun 2025 16:10:35 +0000
ROA not after:            Fri 18 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ffb:a480::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:19:f9:bc:ba:9d:d3:79:10:bf:93:18:8b:6e:5b:fa:43:cc:0b:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 13 16:10:35 2025 GMT
            Not After : Jul 18 23:59:59 2025 GMT
        Subject: serialNumber=2e4677cfbb6de5063fa54d19d42f67a1d0b4db564dd00e8fc13ce3a658aab8a1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1a:18:0b:7d:77:d7:cd:a0:14:73:d0:ba:8d:
                    d2:21:01:5b:78:22:b0:fd:b0:0a:8c:4a:c6:49:bc:
                    7a:5c:d3:bd:a1:4f:4f:d9:91:04:15:2d:7a:3b:88:
                    d2:a2:4e:0b:79:0f:c5:f9:08:c7:b3:1e:83:be:3b:
                    03:30:78:0a:b6:26:df:98:20:1f:4e:ba:6e:e6:06:
                    fe:83:3b:e6:97:89:e7:cb:fd:00:95:93:9a:36:80:
                    59:fd:56:c9:52:e5:e3:bd:30:7d:6d:08:30:d0:81:
                    f5:a6:1a:2c:c5:9c:2d:89:65:6a:61:9a:45:38:be:
                    08:6c:69:7e:1a:96:4b:50:7e:5a:01:a7:83:bf:23:
                    0f:d3:58:a5:5b:2c:9e:e4:96:4a:0b:f1:c5:c4:b6:
                    94:c1:3a:c7:81:be:d0:e6:ec:38:b4:72:af:2d:7a:
                    fa:7a:71:39:72:7a:e9:32:22:e1:9a:f3:38:10:c0:
                    b5:23:2c:c0:9c:1b:e8:ed:31:54:d2:a6:e5:83:b6:
                    2f:cb:88:fd:30:78:62:a3:4e:6c:45:8b:4c:b3:ad:
                    63:a7:e2:33:06:75:cd:0f:1e:1e:de:7f:c5:be:2d:
                    ec:14:9f:60:e0:82:d3:9c:e8:b2:67:b5:42:29:a4:
                    f7:48:b9:ef:5f:4a:0b:d2:ab:91:3e:57:c1:3d:78:
                    60:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:3C:28:A6:38:CC:2D:16:97:64:84:D4:A2:44:27:A7:1B:82:B5:C1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6aa2526d-ee97-4c2d-916d-28e097673aca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ffb:a480::/46

    Signature Algorithm: sha256WithRSAEncryption
         2c:07:d0:7f:8e:65:b2:a9:3e:be:98:15:cb:f2:d2:26:bf:28:
         2b:81:2f:81:32:aa:c4:34:5e:0d:39:a9:91:76:44:1d:a6:e8:
         b1:07:eb:e5:45:0e:e4:e7:c6:37:0a:cc:02:ac:75:d6:ba:8f:
         b4:74:9d:9b:17:42:b2:76:88:68:77:c4:14:f5:f5:cc:e3:90:
         67:c0:87:6f:5d:15:f1:0c:93:8f:5f:be:b6:03:d2:40:4f:2c:
         11:91:76:c2:45:0e:1d:91:57:e0:61:db:31:2a:a5:cb:60:fc:
         e0:17:a4:8a:09:3e:ee:89:65:c7:0d:47:81:8b:4a:f5:e0:64:
         98:71:b8:e0:57:df:82:a2:85:ec:21:db:72:e0:35:7f:d9:60:
         92:e4:ba:8d:3d:64:d3:01:13:88:17:0c:0e:6f:db:60:90:23:
         e9:ad:9e:45:21:81:e9:72:63:8b:e7:ff:ba:0e:ae:b6:0e:8a:
         db:6f:b6:55:4f:a1:9d:bf:2a:d9:4d:7d:2b:6d:40:18:61:f7:
         a2:e3:7e:9d:f6:2a:42:d4:62:29:2b:24:c8:46:b1:a6:61:da:
         40:ef:f3:55:1f:95:5e:72:bf:5a:02:66:e9:70:bc:5e:db:67:
         3b:ee:5d:ae:56:28:72:68:ed:f7:6d:85:6e:11:5c:b1:1a:dc:
         80:e3:6f:f3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jun 17 11:48:34 2025 by rpki-client