Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8c14bc31-de03-4016-bcdd-7ffb34f33c54.roa
File:                     8c14bc31-de03-4016-bcdd-7ffb34f33c54.roa (raw, json)
Hash identifier:          dxFbpJfybVrheSPWGLvIuMNDai3iOdS0xWay/GMjX7E=
Subject key identifier:   C2:CD:77:21:04:67:6C:8B:FA:0B:BD:01:84:3A:96:88:37:80:63:9E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       31207CBC1CA3F9FB54499F9A8B9D30315506E7BD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8c14bc31-de03-4016-bcdd-7ffb34f33c54.roa
Signing time:             Fri 13 Jun 2025 16:40:15 +0000
ROA not before:           Fri 13 Jun 2025 16:40:15 +0000
ROA not after:            Fri 18 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fb9:8000::/39 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:20:7c:bc:1c:a3:f9:fb:54:49:9f:9a:8b:9d:30:31:55:06:e7:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 13 16:40:15 2025 GMT
            Not After : Jul 18 23:59:59 2025 GMT
        Subject: serialNumber=e78661855adbab671ca989cb5eff8aeff90a69857d8e5ea3506792bae6c4a531, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:50:e6:d6:99:f7:a1:c0:4e:90:01:69:4f:1c:
                    33:10:cc:57:89:db:64:f3:45:36:c6:20:05:fe:69:
                    a7:b3:44:62:3b:10:c7:4a:e2:e1:a2:1a:f4:16:a2:
                    8a:8b:54:b9:c1:89:ad:85:56:8e:48:4d:26:2d:23:
                    6f:c5:98:9a:43:9e:8b:7e:7a:15:a6:fd:e6:c6:5d:
                    0e:1e:fa:c8:aa:95:f3:12:04:70:5a:32:84:77:79:
                    61:dc:36:85:dd:d7:61:44:e0:e3:92:5f:d3:53:2a:
                    35:56:0a:06:de:3b:38:4a:50:d9:7d:51:cd:5b:fa:
                    a1:0a:bc:b0:ca:6c:8d:50:ab:2a:99:48:1b:c2:04:
                    31:6c:da:ff:83:84:c0:7b:61:a9:25:f5:f8:41:3e:
                    6b:3d:fe:7b:9f:af:66:29:75:b5:66:09:0e:e2:96:
                    70:ac:74:3d:33:fa:68:49:62:b0:c4:21:0f:e1:5f:
                    0a:27:53:45:59:c8:32:20:fb:91:96:0e:12:ae:d1:
                    df:be:d4:60:93:74:94:c7:00:16:a1:ae:b3:4a:54:
                    fe:a6:99:f7:33:22:ef:de:25:8a:5d:95:14:43:c8:
                    b6:8e:df:4c:5a:3b:db:0f:b0:b8:dd:46:67:17:c5:
                    c7:8b:c1:1e:d4:25:0c:76:1e:c8:fd:9b:19:e2:f9:
                    38:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:CD:77:21:04:67:6C:8B:FA:0B:BD:01:84:3A:96:88:37:80:63:9E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8c14bc31-de03-4016-bcdd-7ffb34f33c54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fb9:8000::/39

    Signature Algorithm: sha256WithRSAEncryption
         b5:ff:d7:7a:95:67:fa:35:02:e0:4d:45:3e:ce:b1:81:29:57:
         2e:70:b8:f8:03:ba:c0:4b:8d:44:5b:db:f8:4a:f9:83:7c:c8:
         6e:a3:f7:54:47:4c:06:23:10:cb:d0:1e:5b:c4:6f:39:e4:27:
         7e:a7:e7:28:fc:d8:6e:f8:2e:87:d5:10:c4:08:c3:d8:aa:54:
         3f:ae:73:1c:64:14:8f:35:9d:e1:4f:8f:34:ea:b8:2f:3e:e0:
         cc:26:8d:9a:31:00:3f:6c:5e:94:d2:44:44:1c:ad:ad:03:e8:
         1a:d5:e1:34:23:a2:27:72:f7:31:e7:38:f2:4a:aa:3f:27:5e:
         30:b2:e9:3a:59:40:78:59:37:b1:83:5a:13:b5:4b:c3:55:5c:
         ec:c1:41:35:71:97:d7:03:d4:d9:8d:19:fc:62:f9:59:ce:ab:
         4b:10:34:d0:69:c6:78:c7:0e:6e:5e:cc:f3:80:bf:44:dd:b7:
         63:e8:77:1e:3f:ba:6f:1c:27:fd:28:19:59:d1:1d:a8:67:54:
         e9:8a:d1:92:b7:36:c8:77:86:55:48:ac:ba:5b:7a:8a:33:7d:
         dc:bf:4f:cf:12:3c:15:5d:48:16:54:1d:65:c4:b7:38:c0:ad:
         79:ac:c0:fa:c1:6d:57:6d:db:5a:d3:9b:d2:42:a4:16:8e:6b:
         09:43:b1:2e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 14 06:37:27 2025 by rpki-client