Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a272600a-9414-4881-b3df-55f7c5722f94.roa
File:                     a272600a-9414-4881-b3df-55f7c5722f94.roa (raw, json)
Hash identifier:          r8iq2OKFjPYdJeZCVaa+NRdtdEE2oaKsX2tg55gCk78=
Subject key identifier:   EF:48:B1:F3:3A:51:42:FF:17:00:91:B1:D4:BD:56:AA:59:C8:D8:40
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       03BEE6FE936B185890D12C6C4D6161E59A4E5B98
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a272600a-9414-4881-b3df-55f7c5722f94.roa
Signing time:             Tue 22 Apr 2025 16:51:09 +0000
ROA not before:           Tue 22 Apr 2025 16:51:09 +0000
ROA not after:            Tue 27 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f18:c000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:be:e6:fe:93:6b:18:58:90:d1:2c:6c:4d:61:61:e5:9a:4e:5b:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 22 16:51:09 2025 GMT
            Not After : May 27 23:59:59 2025 GMT
        Subject: serialNumber=1c14545f0b5c266a2488abd67dff2627f72e646b876af38a0fc6334db137b86b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:05:b6:5c:c8:77:0b:82:35:78:46:a0:89:41:
                    ae:d0:36:1e:b4:ea:40:c1:dd:ee:19:09:e9:61:c9:
                    0d:cf:57:82:e0:0e:52:ea:9a:6d:fc:3d:9e:77:42:
                    a4:80:f9:63:45:6e:7b:11:c5:fc:34:95:ab:a5:23:
                    33:4d:6b:5d:ed:8d:45:2b:f9:b7:ef:d0:fc:37:ea:
                    20:a5:8a:93:6a:c9:e3:0b:1e:db:49:57:35:12:75:
                    d9:88:45:e7:be:5d:2b:dc:55:4a:92:b8:71:b1:17:
                    4d:b3:46:a0:fc:9e:35:0b:9f:8c:53:e3:24:f4:c6:
                    0c:38:38:04:3c:48:a9:c6:7c:f5:3b:32:e5:67:01:
                    c1:1b:12:5c:31:04:80:f3:94:f7:43:c8:d4:d9:60:
                    8c:99:23:50:09:5e:75:62:c4:6c:e9:16:1c:ed:31:
                    5b:1b:99:71:c6:30:a3:f4:f7:3e:15:db:5b:30:da:
                    6b:9e:92:f3:2f:6b:f0:9e:92:94:a6:aa:d7:44:32:
                    e5:fe:7f:1a:1b:dc:1b:27:9f:33:62:a2:6e:3a:a9:
                    12:a8:28:15:ee:3e:d6:90:31:47:88:22:e3:a4:6f:
                    a5:bf:30:62:e8:80:6c:96:6a:6a:5b:6e:73:61:e6:
                    55:69:ca:6d:0c:e0:e5:d7:36:89:49:4b:23:dc:c3:
                    85:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:48:B1:F3:3A:51:42:FF:17:00:91:B1:D4:BD:56:AA:59:C8:D8:40
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a272600a-9414-4881-b3df-55f7c5722f94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f18:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         c8:b2:4e:38:78:77:43:28:8f:a1:76:8c:f9:6d:75:25:01:ac:
         27:13:bc:b5:02:54:a6:4e:8f:c2:86:98:e5:b1:1a:2c:d9:85:
         7f:ba:4f:94:23:15:e4:9b:55:51:2e:bc:85:dc:3e:a1:a5:21:
         1b:f8:56:3e:90:fa:47:d1:b5:a2:e0:9a:6d:b2:7d:6c:b5:53:
         53:25:64:91:24:a6:dd:57:6a:ef:c2:55:9e:a9:4d:8b:df:f8:
         a6:8e:30:42:50:eb:25:58:93:b2:90:ca:08:b9:01:f5:54:05:
         1f:c4:8a:56:6b:2d:17:11:fe:d4:c1:9d:64:d0:a8:33:4b:54:
         f9:dc:f4:66:fe:0a:7b:a3:d1:d7:2b:fb:e6:25:c1:73:0a:56:
         65:9b:ca:1b:c3:52:3b:fd:e0:ec:c3:df:7d:da:9b:59:75:1c:
         21:22:59:6b:77:2a:24:ae:18:c7:c3:58:d0:48:a7:ea:a9:a0:
         db:74:47:5e:d0:78:c7:84:0d:62:04:f7:47:84:35:3a:29:26:
         48:61:8f:5a:d7:f4:0f:05:4e:20:b6:01:ec:be:f2:08:e4:04:
         66:ed:9b:b6:30:6f:98:a8:20:8c:6e:06:73:03:22:9a:a8:0b:
         41:a0:da:a6:da:61:7a:b8:92:e9:4e:47:b8:07:df:12:5a:e1:
         77:a5:5f:12
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 26 14:56:04 2025 by rpki-client