Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22e0224f-add1-4750-9889-4168c3af1743.roa
File: 22e0224f-add1-4750-9889-4168c3af1743.roa (raw, json)
Hash identifier: Lrh2UZ3kNlZ5ozZD/SG1i5NrYONQvYV3/nQCOp/6DNI=
Subject key identifier: 92:25:8E:8B:D3:57:11:F2:E5:34:34:5A:8A:76:C5:56:C1:E7:7E:D8
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 788416CA128E2F1D7563E556B59721E9C8CED70C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22e0224f-add1-4750-9889-4168c3af1743.roa
Signing time: Wed 09 Apr 2025 00:00:16 +0000
ROA not before: Wed 09 Apr 2025 00:00:16 +0000
ROA not after: Wed 14 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 104.153.112.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Apr 2025 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:84:16:ca:12:8e:2f:1d:75:63:e5:56:b5:97:21:e9:c8:ce:d7:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 9 00:00:16 2025 GMT
Not After : May 14 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6b:67:81:ba:1e:cd:14:1a:00:ee:b4:0d:7a:
3f:42:d6:47:8c:7d:9f:9d:84:10:8e:01:2f:72:12:
3c:62:7d:66:28:da:eb:5b:0e:64:92:1a:72:9b:5e:
09:0f:f7:12:ba:0c:c7:2a:47:ff:58:1a:78:e0:8d:
2c:69:45:95:11:1a:43:78:6c:c6:25:b4:7b:2b:9f:
cf:3a:6a:af:2a:d4:ca:d9:bb:09:2e:46:29:5a:1e:
42:62:fe:0d:2a:bc:22:2a:24:41:f1:6a:f2:4d:d4:
dc:13:d5:93:74:f9:14:62:a7:ee:55:46:02:22:52:
11:d8:3f:c4:76:b3:68:cb:0d:67:7e:ba:ff:d4:af:
e7:70:33:36:f4:bf:b5:65:c9:0e:1d:3d:26:e4:54:
1a:d2:b9:b9:f1:11:67:4b:2e:be:43:1b:cf:3b:d1:
62:30:55:7e:79:a7:08:ca:c4:b8:97:67:d9:0d:74:
91:ab:ab:5a:e2:41:cf:47:07:43:b6:cc:2c:9b:f9:
32:bd:80:b8:14:2a:32:38:29:b8:03:0c:92:d4:d5:
1d:6c:26:18:a4:f6:55:45:2e:35:d1:b3:33:5c:e9:
15:d6:1a:33:6b:1c:e5:bc:49:fc:99:92:7f:54:e6:
5d:2f:13:ee:fd:1c:d7:5e:b1:6b:c9:0b:0c:ab:34:
f7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:25:8E:8B:D3:57:11:F2:E5:34:34:5A:8A:76:C5:56:C1:E7:7E:D8
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22e0224f-add1-4750-9889-4168c3af1743.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.153.112.0/21
Signature Algorithm: sha256WithRSAEncryption
5d:48:9d:0c:1e:76:1b:58:ba:83:93:6c:2b:60:3b:54:b2:49:
0f:71:f7:4d:2e:f4:ba:5d:da:bc:ad:4d:9a:79:c5:f8:ba:ce:
d8:e0:c4:3f:19:e1:d1:b5:51:ee:c8:a5:b8:35:91:e0:5e:44:
5a:bf:65:b5:f1:67:e1:74:30:15:bf:05:50:25:7d:b8:22:c3:
fd:00:f3:bc:2b:fc:5f:91:4b:6b:c8:96:2e:69:8d:a2:ff:5b:
f0:e8:a1:c2:cf:58:9b:e2:7d:ae:04:e5:1c:85:03:00:a4:97:
02:c0:60:63:05:ba:44:0a:8f:ec:d0:47:c0:26:8a:01:da:ba:
0b:b2:c0:e6:b3:b6:07:6a:28:2d:b5:91:14:c9:73:65:d7:35:
c1:2c:41:08:71:16:a3:05:79:2d:f3:76:97:0a:3c:86:55:33:
bf:8e:c0:11:4c:ec:e7:40:a4:12:50:d7:ab:28:58:00:b7:4e:
b0:46:c0:fd:ae:87:ca:c1:1a:d7:11:bc:26:df:98:55:c3:cf:
e7:0d:29:50:ae:2c:e4:56:b0:15:b0:0b:80:53:b1:53:da:9a:
20:37:75:01:b0:16:d4:f5:0e:0f:33:81:d6:04:8e:bd:10:00:
50:78:a3:ae:d2:07:e9:2b:c5:6c:d2:5b:5e:cc:1c:f9:9b:7f:
cc:5b:7e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 17:14:39 2025 by rpki-client