Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/50aa830a-891f-4ae0-bee7-f2758c54eae3.roa
File:                     50aa830a-891f-4ae0-bee7-f2758c54eae3.roa (raw, json)
Hash identifier:          cl6Gf99STdRW6Ux82bmL5hW6xIno8hcSMG0XHbsX1bo=
Subject key identifier:   7F:DB:95:50:E1:4A:90:AB:2C:54:64:AD:4A:66:74:C3:7D:6B:60:37
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       2E4FB5CC22AE8529BC1A798B1975FF9AA5A01C4C
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/50aa830a-891f-4ae0-bee7-f2758c54eae3.roa
Signing time:             Tue 05 Aug 2025 18:30:40 +0000
ROA not before:           Tue 05 Aug 2025 18:30:40 +0000
ROA not after:            Tue 09 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:50::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:4f:b5:cc:22:ae:85:29:bc:1a:79:8b:19:75:ff:9a:a5:a0:1c:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Aug  5 18:30:40 2025 GMT
            Not After : Sep  9 23:59:59 2025 GMT
        Subject: serialNumber=d0600124fccf0114dd40f4e276d17c610926db8163199b0fae284528eee0c984, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:81:77:13:3b:af:ed:83:f1:74:2b:0c:43:09:
                    f4:b6:8f:29:5d:a3:8d:56:bc:07:bb:6f:58:fb:fd:
                    13:01:da:9c:f8:67:48:22:03:0a:3f:18:a5:02:c9:
                    27:53:a8:ba:da:5a:45:15:c3:9c:de:84:92:29:3c:
                    5c:d7:7e:9a:36:8e:ad:8a:2c:cf:fa:fc:dd:88:d9:
                    f3:af:69:97:10:c4:61:b3:e1:37:03:9b:27:cd:da:
                    a0:76:1a:48:7c:81:06:57:3d:c7:58:1f:f7:b6:7d:
                    b9:1c:09:ae:da:3a:63:4c:cb:5d:51:94:fe:62:98:
                    5f:45:26:b2:f8:86:7f:fe:a8:69:27:8c:da:b1:72:
                    54:fe:68:c8:b3:b2:b7:c5:50:17:39:6d:af:75:ec:
                    6d:da:08:7f:5f:aa:11:d6:89:69:9c:d1:cf:37:aa:
                    9c:bd:5e:58:f4:d4:18:32:78:b7:4e:0b:2d:5e:3c:
                    75:3d:47:4e:a9:88:27:10:64:9a:a2:61:d2:6b:e0:
                    14:81:a3:e3:39:4f:cc:8a:21:95:b9:4b:0c:5a:22:
                    dc:0d:64:54:79:d4:07:4d:49:35:55:c8:b1:e3:1b:
                    fa:b5:18:20:03:f1:54:7c:44:18:f1:7d:e4:0d:36:
                    67:b8:dd:7d:d5:ff:21:5d:ca:6b:c7:27:0b:49:c8:
                    ef:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:DB:95:50:E1:4A:90:AB:2C:54:64:AD:4A:66:74:C3:7D:6B:60:37
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/50aa830a-891f-4ae0-bee7-f2758c54eae3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:50::/44

    Signature Algorithm: sha256WithRSAEncryption
         0f:5b:b3:75:4c:1c:4c:e8:46:69:84:7a:e4:87:22:e5:ed:41:
         51:e0:44:99:d8:03:bb:07:b9:25:89:81:30:2a:63:90:ad:e6:
         37:9c:39:a2:18:aa:05:4b:90:6d:7e:c5:34:c2:33:f1:08:b0:
         c6:90:98:89:b1:72:5b:02:d1:7f:fb:60:4a:c6:f7:6e:5c:83:
         55:66:ae:00:90:42:10:4b:99:86:a4:64:18:77:0f:cb:1d:b0:
         1a:a8:4b:14:82:5d:02:4c:5f:cd:e2:40:0c:cc:81:a5:15:41:
         ed:a6:24:53:e3:05:40:df:b0:77:3f:09:ea:ff:84:39:01:9c:
         6b:d5:39:b6:da:e5:8c:74:d9:f3:84:97:27:0f:d9:8f:94:9a:
         12:58:69:4c:20:bc:1b:94:81:d3:33:c8:ab:22:4f:fd:52:83:
         b0:49:44:82:78:f7:11:49:27:3a:9a:4b:f8:d9:d6:d3:04:d5:
         33:60:79:ff:a4:16:67:0a:c1:fb:34:c0:b5:11:8f:87:b7:e5:
         4f:47:b3:65:ca:7c:17:ab:ac:e2:2e:66:81:e2:9d:7c:23:4d:
         e7:e0:c3:92:4c:17:3f:fa:6b:c5:41:3d:20:ee:7c:b3:14:b8:
         aa:67:2c:2c:ba:2a:b2:ec:1e:0f:0e:1e:a0:98:d5:20:a8:2c:
         35:5b:46:ae
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Aug 8 00:44:11 2025 by rpki-client