Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ce4e21b0-d401-42ee-a867-231a78f7cba0.roa
File:                     ce4e21b0-d401-42ee-a867-231a78f7cba0.roa (raw, json)
Hash identifier:          pHC/Ohj/Na9cWnUi0ZOKyIAIpWFNurxRRHKYHqK1PaA=
Subject key identifier:   45:72:62:35:B9:DA:EC:19:8F:43:98:DC:4C:83:44:AC:66:FD:CB:9B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       123946027573E38252CEC17ED5FD0ED1BC5E0558
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ce4e21b0-d401-42ee-a867-231a78f7cba0.roa
Signing time:             Fri 01 Aug 2025 15:42:09 +0000
ROA not before:           Fri 01 Aug 2025 15:42:09 +0000
ROA not after:            Fri 05 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f61:8020::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:39:46:02:75:73:e3:82:52:ce:c1:7e:d5:fd:0e:d1:bc:5e:05:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  1 15:42:09 2025 GMT
            Not After : Sep  5 23:59:59 2025 GMT
        Subject: serialNumber=cb365e505c20fa7cfef576ddc303fe70f087fc9cbcf17874bb04ebb0ec3f4001, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1d:0f:f3:dc:0f:43:d4:10:c7:50:84:9a:cd:
                    7a:45:3c:ff:7b:6c:bb:1b:bc:35:47:45:bb:14:cf:
                    fe:d2:f1:66:c9:72:04:90:60:49:f0:a1:23:47:0d:
                    3e:09:e0:ee:61:73:16:0d:04:0a:b8:ca:7b:6f:93:
                    7f:a0:c5:35:68:4f:de:26:aa:96:7d:46:d0:86:00:
                    d0:b6:a7:1b:da:e7:b2:a8:54:a4:2b:7b:24:80:ee:
                    c9:ea:8f:6e:de:ac:ee:bf:d5:2d:20:86:6a:79:f0:
                    89:4c:5c:99:08:3c:f1:99:2e:b8:d3:0d:fd:8a:7f:
                    80:70:b3:37:27:b6:de:9f:a3:8a:83:f2:d3:13:3d:
                    cb:75:3c:96:26:36:e6:fc:dc:d8:53:19:3e:e7:9f:
                    8a:29:9b:b3:96:c6:35:80:8a:10:dd:6d:9e:33:5a:
                    42:ab:06:70:3a:9d:f2:61:61:ec:5d:f2:08:b0:d5:
                    73:e2:e2:c9:08:a3:3b:24:b4:c8:3e:a0:dc:b3:dc:
                    64:d1:fe:05:1c:e1:44:bd:88:92:dc:2c:dc:38:77:
                    b2:36:8d:66:39:86:68:15:f8:1d:97:68:c5:bd:f8:
                    5e:0e:0a:27:43:40:2b:4a:ec:f6:5b:c0:20:42:1e:
                    4f:a1:b5:65:d1:1c:a2:cd:0b:74:3a:c6:88:70:17:
                    70:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:72:62:35:B9:DA:EC:19:8F:43:98:DC:4C:83:44:AC:66:FD:CB:9B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ce4e21b0-d401-42ee-a867-231a78f7cba0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f61:8020::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:b2:0f:28:4b:d6:df:b7:bd:c6:59:c7:51:47:ac:48:92:30:
         14:f5:ab:2e:16:b2:33:b7:af:f9:da:19:98:78:03:59:e7:d0:
         7f:18:82:d2:f4:b6:33:4a:a5:af:36:aa:99:34:91:87:0f:a3:
         ae:b9:41:2f:a3:8a:b0:83:c9:ec:e5:d6:4e:62:ae:06:d6:a8:
         8d:80:87:ae:d1:9c:19:3b:c9:3d:ce:85:6c:43:43:ed:c3:62:
         10:87:77:25:b0:5c:f9:a0:e0:be:4a:60:ca:c7:57:58:ce:09:
         b7:f2:e6:a9:27:fa:10:43:4b:90:d1:77:f3:0d:c6:48:4b:60:
         17:19:8c:34:be:c0:e8:20:91:02:cc:e0:f4:58:1a:ec:f3:cb:
         65:0e:6f:48:9b:8d:4a:4f:72:d4:78:b9:10:92:89:a1:5a:27:
         fe:63:70:ad:2b:19:f2:e0:43:5a:03:c7:68:af:cb:17:41:ff:
         13:e2:46:e2:25:d2:e4:47:5b:d0:01:8f:9e:6c:69:23:b5:7a:
         d9:4d:69:3a:27:6f:5e:09:f8:28:b6:70:51:7b:a1:2d:8d:07:
         7a:1a:1e:e3:4a:85:44:0b:4a:d4:3d:28:d3:f1:5c:4e:30:4a:
         0d:a3:7c:01:67:34:18:ba:f6:5e:f5:64:15:6b:d7:4c:09:60:
         31:b5:73:5c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Aug 5 16:51:50 2025 by rpki-client