Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/76a6b741-9ed5-427e-ba24-bbe29e46d622.roa
File:                     76a6b741-9ed5-427e-ba24-bbe29e46d622.roa (raw, json)
Hash identifier:          Tc0uzm42VM4r54Orep781X+LNu1QvFwteCPCF4ztAms=
Subject key identifier:   8B:E7:8F:D3:9C:18:0D:C0:F2:A9:58:C7:B5:83:AF:9E:7F:EF:6D:C5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4692418AF9FEEFA221C4E518844EA2ED8B151157
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/76a6b741-9ed5-427e-ba24-bbe29e46d622.roa
Signing time:             Mon 04 Aug 2025 15:20:27 +0000
ROA not before:           Mon 04 Aug 2025 15:20:27 +0000
ROA not after:            Mon 08 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f61:e000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:92:41:8a:f9:fe:ef:a2:21:c4:e5:18:84:4e:a2:ed:8b:15:11:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  4 15:20:27 2025 GMT
            Not After : Sep  8 23:59:59 2025 GMT
        Subject: serialNumber=38d299338fcaacd3a07c16f71c48b75ff8b1d5f4d640389c9966b22996b212dd, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3f:f3:62:c5:40:1b:32:f2:0d:57:03:25:e6:
                    9d:ec:42:d3:3c:18:e6:8d:df:25:13:a2:1b:78:c9:
                    8b:ef:67:ab:d4:66:60:35:a1:f0:ce:d3:a7:65:e2:
                    a0:07:58:3e:e7:b2:e3:58:6d:a6:43:1a:6d:52:d3:
                    b1:b5:15:57:57:f9:aa:49:3a:15:87:7c:c4:05:fb:
                    9b:c5:1e:af:3e:eb:b8:a7:4a:23:f4:af:41:f2:d7:
                    3a:e0:4f:fc:1d:a7:aa:d7:76:e8:ad:36:62:df:e7:
                    75:9a:3f:8f:11:34:c6:72:c3:4e:d3:ca:39:40:da:
                    0e:5f:0e:f6:d7:07:74:ff:5a:a3:20:71:b1:65:27:
                    f0:47:37:0f:a2:63:74:80:e1:ce:06:4f:c1:c6:46:
                    c2:75:cb:ab:77:d0:a1:26:51:35:4a:01:62:6a:e4:
                    f0:13:c2:79:01:c6:e8:b0:fe:fd:51:8b:01:22:57:
                    f6:08:b5:fa:09:44:33:b2:33:46:5f:44:1d:53:f2:
                    aa:32:f7:01:fb:7f:5a:4f:7e:03:66:aa:f4:76:8f:
                    a7:cc:86:51:73:7b:7e:14:bf:22:8a:10:da:bb:27:
                    70:d9:a6:ab:99:75:0a:e0:51:4e:6f:10:ed:01:0e:
                    fe:09:cd:15:cf:f7:b6:0c:02:32:4c:e3:80:f2:5a:
                    b0:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:E7:8F:D3:9C:18:0D:C0:F2:A9:58:C7:B5:83:AF:9E:7F:EF:6D:C5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/76a6b741-9ed5-427e-ba24-bbe29e46d622.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f61:e000::/40

    Signature Algorithm: sha256WithRSAEncryption
         d3:32:6c:40:6e:1e:f0:d7:af:28:f6:5e:5c:a0:67:57:2a:53:
         90:cb:2b:f6:b9:27:0a:2c:1e:2c:fd:09:dc:cc:0c:43:d7:a5:
         5e:07:7f:3c:23:1d:2b:02:35:6c:f3:2d:11:ef:24:33:df:a9:
         6c:9a:d5:b4:60:de:87:21:25:ac:bf:de:53:a5:c6:07:21:90:
         05:4f:0c:38:12:45:00:3c:3f:e8:30:fa:9a:b9:b6:93:1c:35:
         6c:29:a5:1e:a0:17:cf:b9:c7:12:50:88:92:32:0c:03:c8:2c:
         22:d5:54:21:f2:cd:e3:68:9b:72:d4:1a:57:79:52:b0:59:86:
         2c:81:38:68:dd:ef:6b:78:ea:87:c2:33:c8:be:e1:be:64:56:
         91:64:b5:5a:2a:23:d2:39:c8:4f:bf:e4:db:a9:19:fe:18:ca:
         79:52:1a:f2:dc:ca:f4:1c:84:e9:59:d1:48:e2:37:7f:c8:20:
         04:f0:85:7b:e7:12:2b:b9:ec:72:61:49:fd:9c:c7:ba:9a:56:
         2d:6b:98:35:47:1e:2f:41:ec:54:4a:b9:5b:ad:34:49:a2:06:
         63:73:cb:ca:40:ae:1b:09:c3:38:ec:0e:92:bc:d1:eb:24:a8:
         43:76:20:6e:6b:d2:66:5c:cc:a2:49:c9:cc:ed:c4:3d:e9:d1:
         c7:a7:33:23
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Aug 6 14:22:03 2025 by rpki-client