Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b700ba59-e7b4-4735-adc4-f2dba045282c.roa
File:                     b700ba59-e7b4-4735-adc4-f2dba045282c.roa (raw, json)
Hash identifier:          iuTjBTqzAOEw4hNQhU0sPgQEKtUkonM+mNyJr4YVIbQ=
Subject key identifier:   B0:78:35:74:16:D8:EF:36:68:DE:E4:7B:CC:3B:43:BB:61:08:B8:6C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1ADAF4382825FE93FE539EF28D2071E4F888986E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b700ba59-e7b4-4735-adc4-f2dba045282c.roa
Signing time:             Fri 01 Aug 2025 16:10:27 +0000
ROA not before:           Fri 01 Aug 2025 16:10:27 +0000
ROA not after:            Fri 05 Sep 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f00:80d0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:da:f4:38:28:25:fe:93:fe:53:9e:f2:8d:20:71:e4:f8:88:98:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  1 16:10:27 2025 GMT
            Not After : Sep  5 23:59:59 2025 GMT
        Subject: serialNumber=b177aad90165233ba52f6b99f3a142ad658a6bc793c0ed8fe70e6e8ee7e4a50b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:08:ff:06:07:56:7b:28:f0:73:1e:21:29:50:
                    6e:5e:f0:ce:63:bc:bd:a1:19:37:93:0b:0e:7d:d0:
                    7a:ed:16:b9:a4:6d:06:e2:5f:a4:1d:7b:55:c0:45:
                    f3:bb:bc:55:79:bf:91:b3:36:66:eb:09:ae:7f:38:
                    86:58:f9:87:94:4e:16:9f:06:a2:0d:96:b7:89:e2:
                    e5:79:ed:a6:fe:cf:5d:5a:17:09:1a:f8:bd:51:f8:
                    3d:78:35:c9:62:d0:a3:15:71:fb:80:52:7b:68:ea:
                    93:83:74:b2:7f:18:9e:ed:27:56:22:52:6d:86:cf:
                    3f:96:f0:cc:c9:41:df:6a:78:33:25:30:95:1a:c3:
                    ed:58:b6:77:26:19:6f:68:2d:ef:dd:4a:b7:e3:60:
                    3d:0d:ca:38:04:a0:0f:4d:3f:9f:d3:ec:5a:22:12:
                    b0:f1:83:54:09:84:f9:46:44:42:84:4e:43:8f:16:
                    f6:ed:ff:00:fa:95:e5:52:36:ac:1b:3b:25:56:63:
                    1f:e9:9a:0d:cf:ff:c2:ff:f2:05:c4:cc:09:25:ac:
                    8a:66:56:f6:bb:e4:0d:37:6e:ae:d6:88:93:ce:2c:
                    07:c5:7f:5c:2b:d2:a0:7f:b1:a6:bb:d1:1a:b5:89:
                    63:fb:66:b3:43:b7:3c:e4:1f:ce:79:04:ee:56:cd:
                    fa:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:78:35:74:16:D8:EF:36:68:DE:E4:7B:CC:3B:43:BB:61:08:B8:6C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b700ba59-e7b4-4735-adc4-f2dba045282c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f00:80d0::/48

    Signature Algorithm: sha256WithRSAEncryption
         9e:86:bc:54:2f:97:5e:fb:e2:5d:03:b2:74:07:18:21:4c:f5:
         f9:86:8a:b5:a8:b1:3b:43:68:9c:c1:25:e9:ed:40:89:46:5c:
         a5:69:bf:72:d1:d2:97:b9:14:6c:70:57:f7:12:ea:5c:20:95:
         cb:ef:db:6c:92:46:8e:52:1a:64:78:89:bd:45:85:9c:3d:ab:
         b0:15:e6:3d:db:db:90:c8:2e:43:ea:57:76:49:0b:81:f0:bb:
         a5:24:81:55:e5:63:97:30:0c:fe:04:d1:77:35:03:6e:f3:df:
         55:08:57:f0:a4:d5:ca:9f:ac:02:9a:be:e7:e8:09:7b:63:34:
         c6:fa:7b:9f:83:39:fe:aa:f7:2b:a8:76:91:7d:7a:e8:fa:dd:
         0a:51:c5:dc:d0:eb:d7:34:c8:bb:53:72:e1:4c:88:eb:7c:aa:
         5e:3c:8f:30:e3:98:80:1b:7d:dd:35:6a:fe:fa:6f:22:31:62:
         8d:56:37:cd:58:9a:d8:98:1a:63:bf:b2:13:3c:37:59:79:30:
         85:dc:4c:f6:50:01:48:49:b5:3b:6a:ea:bd:14:d9:ec:29:9e:
         b6:e9:6b:7a:5e:0f:af:63:6f:be:d2:3f:c2:35:55:62:aa:da:
         f3:ff:61:5b:3e:ae:43:ea:b7:6e:5c:65:aa:4b:a8:d1:53:24:
         49:3b:66:77
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:27:02 2025 by rpki-client