Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/76dea53b-00c8-4fbf-95bd-1a58ae1e45f4.roa
File:                     76dea53b-00c8-4fbf-95bd-1a58ae1e45f4.roa (raw, json)
Hash identifier:          No8FdXoyOpdnB5M5WGIKN/HKf9kewdJH543FXrp7mng=
Subject key identifier:   02:F6:17:50:64:69:AF:B3:82:DE:19:53:A1:74:30:53:DA:5D:BA:C8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       608DF06F4DE780A3EB5688039CFB911177DF57D5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/76dea53b-00c8-4fbf-95bd-1a58ae1e45f4.roa
Signing time:             Wed 11 Jun 2025 00:22:12 +0000
ROA not before:           Wed 11 Jun 2025 00:22:12 +0000
ROA not after:            Wed 16 Jul 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f00:81e0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:8d:f0:6f:4d:e7:80:a3:eb:56:88:03:9c:fb:91:11:77:df:57:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 11 00:22:12 2025 GMT
            Not After : Jul 16 23:59:59 2025 GMT
        Subject: serialNumber=866236120d73f8c6e5bcc3bde57ee96ea624ec3fa7535f6ab139296e8a78207b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f9:d1:bd:2e:5b:0c:f8:63:9e:29:43:a0:0e:
                    12:2f:ec:d2:a0:4b:86:40:ab:2f:b7:50:3d:e2:c3:
                    9f:39:cd:82:87:df:db:96:01:5b:f0:65:e6:62:ad:
                    15:b7:f0:58:d7:ef:bf:d0:78:b6:a0:86:2f:32:c0:
                    fa:e8:c5:53:1b:9a:bd:9d:15:82:29:d4:b7:ce:f6:
                    84:49:c0:0d:ae:3f:e1:50:e5:c8:fd:b7:91:4b:93:
                    02:ac:b4:41:f1:8d:f3:f3:5f:e3:c9:c9:45:cd:a0:
                    36:2f:bd:f4:ba:3a:6c:f0:08:4e:a5:96:2d:97:2e:
                    ee:81:0f:76:49:98:2d:4b:34:5c:f6:f4:af:38:da:
                    86:ec:e9:19:66:1e:91:0d:44:71:dd:c1:b2:d8:d5:
                    f1:8e:89:6a:af:f5:c5:35:4b:90:32:a3:4d:ac:05:
                    ce:cd:e5:01:be:94:f5:4f:95:c9:0d:d4:da:c6:06:
                    d1:29:62:23:52:2a:df:9f:10:ce:de:fb:07:09:da:
                    52:4e:dc:5f:2c:f2:8e:73:31:ce:28:73:96:39:e7:
                    56:9a:76:70:89:8a:22:86:99:28:be:74:71:b3:96:
                    cf:8a:bd:a7:30:54:1b:b1:7f:cf:d1:f5:95:f1:42:
                    58:b0:6b:03:45:6c:c9:84:08:1d:c9:fe:da:59:b2:
                    94:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:F6:17:50:64:69:AF:B3:82:DE:19:53:A1:74:30:53:DA:5D:BA:C8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/76dea53b-00c8-4fbf-95bd-1a58ae1e45f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f00:81e0::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:1a:0a:70:ad:27:2e:3e:14:fd:b1:2a:f2:0d:54:63:13:af:
         ef:64:03:eb:bf:86:3d:fe:7f:4b:18:88:b4:4b:73:13:34:bd:
         51:fa:01:c7:6f:9d:54:e8:c5:78:b2:85:28:f3:84:e8:05:e7:
         93:3b:c0:64:f2:94:47:ef:e4:9a:e8:16:e9:de:b4:39:19:7b:
         58:45:29:de:10:dd:69:9f:4d:cb:99:ff:4b:a5:86:6d:7f:0e:
         62:cb:d4:50:ba:03:02:c2:9f:1d:5c:0e:74:6e:69:a9:d3:93:
         69:7b:74:e9:16:be:3c:2b:f2:bd:aa:bf:82:bb:96:21:0d:c5:
         f7:79:63:f8:8b:3e:f9:51:93:cc:65:f5:88:c9:4f:cd:4d:5a:
         aa:19:21:fe:7d:8d:be:2d:97:86:f7:a9:15:79:b3:81:a6:46:
         2b:b7:c7:14:07:41:09:83:13:99:59:83:d5:3b:df:0f:e9:b1:
         70:b2:21:ff:30:ba:c7:bc:db:f1:ee:54:37:06:52:d7:1c:09:
         53:15:67:f3:8a:a1:ed:ad:13:8c:ea:ac:bb:14:c4:07:e9:fd:
         88:a0:18:67:b9:38:be:1e:ae:b5:18:93:74:ed:08:97:a2:ea:
         f7:e7:a2:47:81:15:9a:e4:f2:43:88:81:f8:e7:0f:aa:10:3b:
         e7:4f:de:cb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jun 16 22:14:34 2025 by rpki-client