Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8c837ec2-a674-4dd2-926c-0d3cdf6bb9b6.roa
File:                     8c837ec2-a674-4dd2-926c-0d3cdf6bb9b6.roa (raw, json)
Hash identifier:          wnjBiey2Zkzqtm2I/+A6NQ4ppl2CsdI9Eg3o8Y1bDaM=
Subject key identifier:   4C:63:93:72:4B:F0:7B:DB:92:DE:AF:75:5E:D6:9F:2D:8A:27:34:6E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       320751CF31C15C168C46F272E8922D5B41548F55
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8c837ec2-a674-4dd2-926c-0d3cdf6bb9b6.roa
Signing time:             Mon 04 Aug 2025 16:30:35 +0000
ROA not before:           Mon 04 Aug 2025 16:30:35 +0000
ROA not after:            Mon 08 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff6::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:07:51:cf:31:c1:5c:16:8c:46:f2:72:e8:92:2d:5b:41:54:8f:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  4 16:30:35 2025 GMT
            Not After : Sep  8 23:59:59 2025 GMT
        Subject: serialNumber=c91eee495538dd80c766c346f1f424bfdab5f0cb9027bab433a4ff4c2dfa47b4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:22:32:fe:f4:22:63:41:7d:79:3d:88:d9:d3:
                    2e:f2:03:e1:05:d4:da:f3:0c:c0:2a:4d:51:6c:f8:
                    9b:fe:c6:3f:96:10:25:f8:9b:94:53:20:b7:22:15:
                    e4:4a:6b:25:8b:53:f9:0b:e2:43:96:ff:95:a8:fb:
                    2e:eb:8e:b4:ad:b0:61:3f:f6:c6:92:0e:f1:b9:fe:
                    c2:ce:05:8c:b9:51:cc:b9:a4:ce:70:d7:c6:c8:61:
                    2f:5b:90:60:28:0a:0e:23:72:f9:97:c1:12:50:2e:
                    fc:69:7e:ca:81:10:b0:cd:a2:db:20:c8:05:99:d1:
                    d6:fd:b4:91:78:f0:7d:60:51:37:bb:f3:2d:00:89:
                    e5:12:1d:03:9c:39:5e:cb:9a:f5:c2:bc:1c:db:39:
                    8c:be:29:32:a8:15:b8:f1:d3:56:33:01:3c:55:a6:
                    36:ee:cf:4f:47:dd:5e:7f:8a:4e:2e:9f:a4:53:6e:
                    99:b3:10:59:8a:52:73:16:19:1a:e1:64:30:54:06:
                    9b:a8:53:af:6d:86:2a:7d:3b:12:3a:b9:c4:0c:a7:
                    03:0d:cc:37:18:ca:25:58:c5:3e:f4:5f:a5:4f:99:
                    16:4a:0f:7c:c8:f2:d3:75:29:fb:6a:68:5f:c3:db:
                    4d:06:09:60:d8:ca:7b:b6:4d:61:f3:8f:09:ae:e4:
                    1a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:63:93:72:4B:F0:7B:DB:92:DE:AF:75:5E:D6:9F:2D:8A:27:34:6E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8c837ec2-a674-4dd2-926c-0d3cdf6bb9b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff6::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:9a:e7:b2:f3:49:bb:3a:45:3a:3a:5d:ee:91:49:57:17:80:
         d2:b0:d2:09:33:37:61:9b:a8:84:f0:4a:5d:05:03:17:3e:13:
         fd:8b:4e:fe:24:8c:e9:e4:15:45:c9:07:e4:17:58:42:75:47:
         b5:c8:f8:a1:19:23:76:1f:88:4a:53:cc:0e:87:d1:40:7c:b7:
         b9:35:40:2f:11:1c:ce:ce:9b:22:d6:11:cf:27:db:1e:b7:a0:
         87:65:55:37:ce:33:20:10:a8:ec:e3:7e:f7:f4:7d:de:db:6d:
         f3:a4:e3:c8:7a:88:25:01:4b:90:49:36:f8:cd:f1:fd:ab:c2:
         c0:8e:e7:32:bc:0c:42:73:54:49:90:96:7a:f6:92:20:67:84:
         71:82:5b:af:42:37:bd:96:7c:04:a2:35:12:eb:a8:80:e2:c4:
         61:b2:f9:c6:40:49:bd:73:de:18:b0:77:85:c5:91:ce:f6:8f:
         48:f9:6e:bc:17:15:5e:63:55:a7:33:53:a6:e9:97:a6:90:69:
         b9:b4:53:2e:4b:a0:01:9f:79:e9:a2:0c:39:97:27:73:f5:ae:
         7b:87:6e:76:80:61:a4:7f:de:23:a6:36:a0:15:94:29:62:e6:
         8a:1c:8d:30:9c:cf:cf:b7:a8:50:ce:11:0a:b8:5a:ea:f5:b4:
         c0:20:6d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 16:40:03 2025 by rpki-client