Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1a394da0-b9e1-4544-b143-d3b9d73fe845.roa
File: 1a394da0-b9e1-4544-b143-d3b9d73fe845.roa (raw, json)
Hash identifier: obZHBAI1bkPQEhmTaKnM41LvBFzW9aaMZ2tCbC88QEM=
Subject key identifier: 3B:B8:AE:6B:6F:6B:D4:59:10:EC:5E:BA:F3:FD:5F:C7:99:77:B0:30
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 737BFB4E22CD9537B3FEB83B5B9BD2289A66D8C5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1a394da0-b9e1-4544-b143-d3b9d73fe845.roa
Signing time: Mon 31 Mar 2025 15:22:23 +0000
ROA not before: Mon 31 Mar 2025 15:22:23 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f68:e000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:7b:fb:4e:22:cd:95:37:b3:fe:b8:3b:5b:9b:d2:28:9a:66:d8:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 31 15:22:23 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cc:a6:24:70:30:40:b6:98:81:97:93:7d:13:
e5:d8:e9:ff:51:7f:18:93:c6:cf:96:6a:e1:06:3f:
83:20:f5:60:2f:c1:46:40:74:08:3d:01:73:b1:18:
b7:c4:2d:ce:d3:a3:25:de:56:fd:e9:0a:6c:88:a9:
6b:f8:21:ff:45:bc:31:c5:ac:1e:6f:34:00:e2:51:
fe:d4:43:cd:fb:c7:79:d4:94:5f:e3:99:c7:7c:db:
21:0a:40:de:6a:9b:ae:0c:91:e7:30:37:de:29:42:
5c:de:3d:57:37:30:30:61:8e:47:3d:6d:80:6e:db:
52:d9:46:06:0f:0c:7b:fa:08:3b:b0:09:d6:d1:80:
2d:2e:83:ac:2a:eb:30:0e:e5:a5:20:96:0c:38:19:
d5:b7:7b:d2:20:39:ed:97:19:bf:d6:e5:6f:ed:9f:
69:c3:82:f6:81:3a:8b:52:52:08:fb:26:41:6e:16:
9c:c0:01:67:95:80:d3:4c:04:91:be:4e:65:1c:41:
17:66:a5:f9:a4:22:60:d2:4b:b4:7e:5c:8b:76:fa:
7e:7b:5f:23:2c:10:9c:d2:fa:73:92:55:d8:f8:28:
84:1f:9b:85:01:ba:55:ac:5c:93:fb:73:48:58:d9:
df:4d:49:b5:76:5d:88:dd:55:e0:ed:e0:ed:ed:1b:
f6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B8:AE:6B:6F:6B:D4:59:10:EC:5E:BA:F3:FD:5F:C7:99:77:B0:30
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1a394da0-b9e1-4544-b143-d3b9d73fe845.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f68:e000::/40
Signature Algorithm: sha256WithRSAEncryption
c2:ec:f6:96:75:1a:72:49:8e:69:e1:1f:b2:08:24:ac:03:c6:
cf:f6:39:13:5a:41:0d:ae:06:8b:e8:b5:0a:81:f5:14:8a:48:
d5:61:c1:d2:5e:0c:0a:d7:9e:f2:9a:71:0b:aa:bb:21:de:5e:
92:a5:fc:a9:21:50:33:38:38:11:31:46:4d:8b:b0:8c:10:ce:
44:9d:6e:7d:49:85:71:09:3a:de:c2:ad:c7:50:6f:e7:50:71:
96:07:85:58:71:a2:ca:e3:e3:89:90:4d:39:5c:de:97:27:87:
2e:f4:9d:46:c8:fb:ad:74:5f:74:12:ee:a6:f6:91:26:59:26:
1f:76:4a:05:73:51:ab:02:05:03:2c:97:9e:f5:86:00:42:d3:
7d:cd:5d:30:d5:1b:65:1f:21:16:2a:31:26:cf:c9:58:08:29:
41:14:a4:a6:a3:f6:60:53:63:6d:2a:e7:b8:16:1c:d5:85:36:
2b:6a:56:0f:8d:22:fb:c6:f8:9d:8d:e2:9b:7e:13:47:4a:1f:
8a:54:d9:ed:65:a9:ae:7c:08:e7:4d:07:63:34:4b:94:83:bb:
3e:2a:e4:02:36:43:cd:bf:f6:d2:19:6c:d5:2a:b4:7d:99:f2:
4a:19:07:b4:c8:4f:76:23:9e:d9:7c:34:71:a2:f4:58:9c:09:
2d:dd:15:47
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUc3v7TiLNlTez/rg7W5vSKJpm2MUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzMxMTUyMjIzWhcNMjUwNTA1MjM1OTU5
WjB6MUkwRwYDVQQFE0AzZTI4YzQ1YmU2YjM4ZmIxMTgyNmZiZDc1ODJmN2Q1MDk4
MmM4ODkyNzY2NWFkZTJhOTVlZDhkYTZhZWJkMzJiMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC3zKYkcDBAtpiBl5N9E+XY6f9RfxiTxs+WauEGP4Mg9WAv
wUZAdAg9AXOxGLfELc7ToyXeVv3pCmyIqWv4If9FvDHFrB5vNADiUf7UQ837x3nU
lF/jmcd82yEKQN5qm64MkecwN94pQlzePVc3MDBhjkc9bYBu21LZRgYPDHv6CDuw
CdbRgC0ug6wq6zAO5aUglgw4GdW3e9IgOe2XGb/W5W/tn2nDgvaBOotSUgj7JkFu
FpzAAWeVgNNMBJG+TmUcQRdmpfmkImDSS7R+XIt2+n57XyMsEJzS+nOSVdj4KIQf
m4UBulWsXJP7c0hY2d9NSbV2XYjdVeDt4O3tG/ZdAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUO7iua29r1FkQ7F668/1fx5l3sDAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzFhMzk0ZGEwLWI5ZTEtNDU0NC1iMTQzLWQzYjlkNzNmZTg0NS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB9o4DANBgkqhkiG9w0BAQsFAAOCAQEAwuz2lnUackmOaeEfsggkrAPG
z/Y5E1pBDa4Gi+i1CoH1FIpI1WHB0l4MCtee8ppxC6q7Id5ekqX8qSFQMzg4ETFG
TYuwjBDORJ1ufUmFcQk63sKtx1Bv51BxlgeFWHGiyuPjiZBNOVzelyeHLvSdRsj7
rXRfdBLupvaRJlkmH3ZKBXNRqwIFAyyXnvWGAELTfc1dMNUbZR8hFioxJs/JWAgp
QRSkpqP2YFNjbSrnuBYc1YU2K2pWD40i+8b4nY3im34TR0ofilTZ7WWprnwI500H
YzRLlIO7PirkAjZDzb/20hls1Sq0fZnyShkHtMhPdiOe2Xw0caL0WJwJLd0VRw==
-----END CERTIFICATE-----
Generated at Fri Apr 11 04:29:43 2025 by rpki-client