Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7197fc77-ce49-4c0e-8e4c-16ceb92d4a53.roa
File:                     7197fc77-ce49-4c0e-8e4c-16ceb92d4a53.roa (raw, json)
Hash identifier:          uQT6fT/vPmQEXwCKi1BI8EqzzFT7NVZSsgMumLyUyFM=
Subject key identifier:   C4:2C:99:57:B5:71:EF:D7:06:1D:66:DE:FE:82:32:BB:84:57:AD:93
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       68A3E432674ACA048608C2D27A40F28EC4A13F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7197fc77-ce49-4c0e-8e4c-16ceb92d4a53.roa
Signing time:             Sat 26 Jul 2025 00:12:27 +0000
ROA not before:           Sat 26 Jul 2025 00:12:27 +0000
ROA not after:            Sat 30 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff6:1000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:a3:e4:32:67:4a:ca:04:86:08:c2:d2:7a:40:f2:8e:c4:a1:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 26 00:12:27 2025 GMT
            Not After : Aug 30 23:59:59 2025 GMT
        Subject: serialNumber=f447c26a863955b18823ea1c00070acc371845a136e229f98a9331f55d2ead61, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:57:1b:e0:6b:a6:53:a1:31:c1:04:e9:c2:ab:
                    3b:3e:b3:7a:82:32:03:b3:30:0a:9c:ea:e2:f1:ce:
                    52:80:f5:43:7e:ff:67:3a:56:7a:c8:55:46:38:b7:
                    fd:55:01:18:40:05:20:13:0b:c5:72:9f:7f:27:06:
                    ff:7b:9a:85:84:aa:4d:20:7f:70:0e:f0:5b:68:ae:
                    fa:be:9e:9b:c4:7a:c9:fc:e3:f1:e3:e9:7f:0b:bd:
                    47:23:44:84:c0:a8:5b:71:7f:83:54:c8:6d:ff:51:
                    7f:b2:33:02:b2:1e:dc:da:22:d5:4b:ec:b8:94:e1:
                    ea:f4:31:2c:12:2b:f6:b3:15:4d:d4:b1:94:65:81:
                    55:f9:80:54:17:70:97:84:08:82:92:b3:61:2e:cf:
                    c7:62:79:dd:0d:84:be:9e:50:03:fc:71:ba:e2:fa:
                    23:d0:8b:3d:1e:ec:da:20:72:ea:6f:b4:b3:e8:39:
                    3b:13:9e:8a:18:50:7e:ed:7d:53:f4:d9:c5:52:b9:
                    1d:d4:e0:2f:c6:14:1d:36:37:1a:bb:06:2e:36:73:
                    cd:f7:a6:17:2d:73:bc:19:50:3e:ab:98:8f:bd:ec:
                    06:f0:52:f8:18:18:6e:99:dd:65:11:ee:56:17:27:
                    02:b6:9d:c6:2b:44:c5:e2:d7:15:b1:d6:8d:01:3f:
                    4f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:2C:99:57:B5:71:EF:D7:06:1D:66:DE:FE:82:32:BB:84:57:AD:93
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7197fc77-ce49-4c0e-8e4c-16ceb92d4a53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff6:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         1c:7e:53:05:ba:68:c9:ec:ee:97:61:f4:83:e5:82:42:c6:37:
         bf:fa:12:3e:2d:bd:08:c3:cb:03:90:9a:69:e9:ce:34:11:17:
         bd:fb:c5:e8:e9:c6:ae:0f:36:c8:ca:62:67:50:2f:99:85:d8:
         24:43:c1:20:79:cb:eb:73:fb:ef:99:4b:8e:29:53:3d:07:7c:
         ad:64:c6:45:17:f4:bc:9d:b7:43:c0:3d:2d:70:73:64:5d:f1:
         01:d4:f2:a7:49:d7:3b:54:aa:95:5c:96:1d:27:99:b0:91:bc:
         54:25:cd:f3:ec:12:c3:28:75:bc:d8:d4:c0:aa:d5:9f:a6:34:
         b7:b2:e6:be:51:af:55:8a:7c:84:90:f5:a0:1d:b9:4c:91:af:
         97:b6:4a:4b:1b:e6:0a:0a:7d:49:08:25:d9:30:0d:d9:71:45:
         10:92:47:d1:53:45:0e:21:18:62:36:d2:ca:76:b9:95:38:aa:
         7f:d3:79:69:af:28:d5:87:05:e3:a1:d9:4c:86:be:71:cc:5b:
         06:8c:1e:fb:21:13:af:2c:90:5e:e4:ae:32:e6:77:bd:7c:4f:
         dd:c2:78:d2:4d:01:1b:e6:65:36:32:84:4d:bf:81:b5:0b:64:
         13:ae:90:81:8c:87:32:4a:cf:8b:8d:41:43:a9:c6:3b:3a:96:
         71:c0:59:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 06:06:53 2025 by rpki-client