Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c49749c5-4263-443f-a5d1-f0fc1a27edc1.roa
File:                     c49749c5-4263-443f-a5d1-f0fc1a27edc1.roa (raw, json)
Hash identifier:          Ctsj6WhJy/CkeVYdy54dfwuppFvVici7LnA2/U6BMKw=
Subject key identifier:   20:95:6E:63:3E:9A:B1:66:FA:41:E0:F1:18:A0:59:D4:06:0C:B3:F3
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       03245BE023081AECF771B4B5A0EB5F4E4E3759BB
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c49749c5-4263-443f-a5d1-f0fc1a27edc1.roa
Signing time:             Mon 14 Jul 2025 15:30:39 +0000
ROA not before:           Mon 14 Jul 2025 15:30:39 +0000
ROA not after:            Mon 18 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f1:8801::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:24:5b:e0:23:08:1a:ec:f7:71:b4:b5:a0:eb:5f:4e:4e:37:59:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Jul 14 15:30:39 2025 GMT
            Not After : Aug 18 23:59:59 2025 GMT
        Subject: serialNumber=824f3d5546193f7f308f6cdd99ed977d36c90f1c04623310f8298aca7d1b232f, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6d:85:db:9b:8a:fd:36:3c:d7:19:6b:7e:cd:
                    9e:60:d7:8d:04:94:91:09:da:5c:b1:93:43:3c:00:
                    38:6d:2f:66:34:51:3b:96:4f:a6:0c:3d:a9:74:0b:
                    60:e8:56:06:e8:cd:1e:c8:ff:d3:a5:66:3d:47:5a:
                    55:de:99:68:c5:0d:da:59:ca:21:6e:0a:ec:66:9b:
                    5b:5f:00:5c:b6:43:a7:08:f2:6a:8b:99:bf:ee:ac:
                    de:c7:1f:3b:f1:03:34:ce:68:c9:dc:0e:ec:3a:9a:
                    4e:5e:76:66:cc:75:51:a9:de:b7:a5:06:12:05:69:
                    45:6d:ad:f2:d7:b6:96:cd:b7:69:4e:3f:f5:f8:eb:
                    aa:17:8d:14:d6:89:aa:7c:80:30:14:3c:78:60:82:
                    19:e8:e4:c2:ac:4b:e0:8a:22:c0:c7:32:99:da:94:
                    5a:e8:27:e0:cf:c6:eb:e0:d8:02:c5:9f:81:41:47:
                    bd:31:2a:13:5a:9e:85:eb:da:c6:f2:ea:29:07:2e:
                    e4:21:3f:46:ae:f0:ab:52:02:2d:81:0c:c5:4d:98:
                    5e:63:8c:55:b7:ce:a8:03:9a:8f:c9:c9:c6:48:e5:
                    03:45:27:82:c2:e7:0f:4e:fe:1e:9d:d1:54:73:4b:
                    29:d9:b4:72:0f:f9:d0:d2:a7:68:12:09:48:74:a0:
                    83:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:95:6E:63:3E:9A:B1:66:FA:41:E0:F1:18:A0:59:D4:06:0C:B3:F3
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c49749c5-4263-443f-a5d1-f0fc1a27edc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f1:8801::/48

    Signature Algorithm: sha256WithRSAEncryption
         36:f3:1f:96:09:a7:e3:0a:23:79:9d:be:aa:ea:2b:12:31:06:
         2b:b3:5b:48:62:2d:7f:c8:61:98:fd:e5:6f:8c:a7:85:d1:72:
         a2:cb:a1:a6:f8:18:7b:b8:6d:35:c2:47:4e:97:7b:0d:f5:8b:
         50:ad:54:34:85:ab:f5:c5:ca:7e:f2:04:3d:bb:b9:90:df:6c:
         1f:13:b8:27:4c:b3:4b:69:be:34:05:d5:d6:79:ee:33:c4:96:
         d9:76:f2:01:14:a8:e0:0b:b7:96:60:6e:b2:b4:3f:05:c2:6e:
         a4:05:fa:6f:85:5f:9f:9c:86:8b:a0:4f:c1:56:ec:19:72:4c:
         e0:30:32:4f:58:71:9e:c1:94:f8:a3:ac:62:34:64:65:8e:fe:
         20:4f:98:b1:b7:01:62:bc:5d:5b:75:a1:2b:3f:98:af:8a:d2:
         d3:15:52:1a:0d:75:fd:39:d9:43:52:4c:17:6c:06:b1:2a:2f:
         a3:03:62:2e:d2:1f:dd:9c:7c:68:b0:69:62:44:f4:81:58:a7:
         f6:67:29:c7:43:b2:b0:d6:d8:19:82:ff:ab:06:b6:61:18:22:
         e5:52:d0:43:b5:43:a2:22:31:3d:6f:d8:da:88:1e:2d:59:93:
         86:8c:ec:76:d9:3a:c8:fb:0a:88:38:e4:b0:e8:f7:fa:20:cd:
         1b:56:5a:60
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Aug 5 17:27:52 2025 by rpki-client