Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/935554bb-6d4f-4ce6-9c67-38656b1d3c1e.roa
File:                     935554bb-6d4f-4ce6-9c67-38656b1d3c1e.roa (raw, json)
Hash identifier:          Ayof0FoFgOxWnq+q4o+/q/0HzMp/W1lHuB1rHQRIJDY=
Subject key identifier:   CB:6E:19:1E:9D:05:EE:90:8E:90:54:74:16:AE:16:55:5C:29:D2:10
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       558BD49239DEB54DC652C645568B42AB5E4C9569
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/935554bb-6d4f-4ce6-9c67-38656b1d3c1e.roa
Signing time:             Mon 04 Aug 2025 17:00:13 +0000
ROA not before:           Mon 04 Aug 2025 17:00:13 +0000
ROA not after:            Mon 08 Sep 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f1b:4800::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:8b:d4:92:39:de:b5:4d:c6:52:c6:45:56:8b:42:ab:5e:4c:95:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  4 17:00:13 2025 GMT
            Not After : Sep  8 23:59:59 2025 GMT
        Subject: serialNumber=0ea002c35dd7266bc3488f9d992245ba556c264d2c210e48b841fae9051eff71, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:58:8b:fe:08:16:bb:80:5d:1c:e7:30:61:88:
                    5c:f4:ad:8b:88:82:d3:f3:4f:50:2e:47:5f:33:7d:
                    1d:56:74:5a:31:a4:f9:97:3b:6d:23:73:cb:28:57:
                    78:53:7c:bf:1f:f9:45:fa:fd:45:30:28:ed:9a:7a:
                    04:0e:6e:2f:e7:bb:2c:24:0c:65:46:d4:87:1b:7d:
                    41:53:66:6f:bd:20:4f:2f:23:1a:27:ac:d2:1d:6e:
                    5a:14:6b:96:73:3e:65:14:c6:2f:a0:9b:36:b0:64:
                    98:0b:44:0e:6b:10:65:4d:83:58:91:1b:7f:82:77:
                    69:fd:9a:0a:38:d7:c1:d1:0f:26:0a:8e:b1:fd:e8:
                    ae:65:92:f7:79:9f:01:d5:28:ff:a1:5d:14:86:7e:
                    df:ff:44:af:df:63:c3:1d:64:c3:70:8d:eb:d9:16:
                    64:b7:58:23:fc:6f:90:38:c6:0d:d8:f5:06:f8:47:
                    af:55:59:3c:1f:7f:5e:43:9f:10:d4:69:36:29:e2:
                    de:5a:8d:1e:9f:54:71:11:3b:c7:84:e5:e8:34:ac:
                    fd:ae:2e:96:74:e6:89:0c:29:a9:a8:d1:b2:0f:e7:
                    9f:5a:c1:18:ae:70:7a:44:a5:16:67:f4:d7:46:88:
                    55:37:56:44:20:cd:94:72:aa:40:cf:92:21:ae:0e:
                    c2:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:6E:19:1E:9D:05:EE:90:8E:90:54:74:16:AE:16:55:5C:29:D2:10
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/935554bb-6d4f-4ce6-9c67-38656b1d3c1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f1b:4800::/37

    Signature Algorithm: sha256WithRSAEncryption
         ca:4b:05:41:ad:11:c6:e3:ec:63:48:88:06:45:8f:f0:85:9e:
         41:75:f2:b8:40:4b:95:fd:5b:6d:b7:a9:e1:cb:f6:fb:e5:d9:
         14:6b:5a:23:c8:d8:8a:84:f3:71:d3:53:2c:28:08:06:99:df:
         55:5e:4e:9d:4d:11:30:f8:1d:c5:6f:ad:87:25:af:3a:4f:bd:
         fb:ec:55:f9:75:75:a3:e2:cd:80:dd:d4:1e:4e:0b:f8:72:5c:
         ab:2c:31:14:71:04:cd:cd:91:be:cf:cc:9b:2e:f7:32:d1:36:
         18:ad:dd:0c:10:aa:a6:86:51:07:2a:e0:2e:27:3c:60:15:57:
         3d:64:78:d9:d2:e3:c4:a9:e3:f5:60:ea:ee:42:57:f5:11:66:
         a7:59:98:a5:d1:a2:a8:66:86:9a:87:a4:d6:a2:90:7a:f4:1b:
         03:43:1c:7e:d7:56:cc:b9:2c:18:e5:c1:d1:1c:06:ac:5d:f4:
         75:40:77:bf:ab:d6:f6:3b:90:26:11:09:5c:7d:17:ee:b6:7e:
         f3:17:43:d1:7f:ff:dc:f5:9f:8f:b4:12:99:52:5e:39:fe:ad:
         4b:23:bf:4f:84:1e:b3:26:f1:db:a2:95:29:75:0e:a1:24:4d:
         77:11:80:c2:e8:01:f0:78:85:80:a0:a2:6d:0f:81:1f:a8:46:
         e7:a4:a2:33
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Aug 6 05:26:55 2025 by rpki-client