Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/25da85c3-57b2-493b-a9ef-e4d429d3a252.roa
File: 25da85c3-57b2-493b-a9ef-e4d429d3a252.roa (raw, json)
Hash identifier: KUZpfP9eB9G3ICmRbzl6hUsxRtaIyGsplabzthJEBgA=
Subject key identifier: 07:57:46:23:F0:A4:09:AA:5B:57:E6:C8:66:28:8C:81:DF:89:C9:45
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 49B472FD1516F0986FB86E208BB8B12B86174A19
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/25da85c3-57b2-493b-a9ef-e4d429d3a252.roa
Signing time: Wed 02 Apr 2025 00:20:19 +0000
ROA not before: Wed 02 Apr 2025 00:20:19 +0000
ROA not after: Wed 07 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fbb:2000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:b4:72:fd:15:16:f0:98:6f:b8:6e:20:8b:b8:b1:2b:86:17:4a:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 2 00:20:19 2025 GMT
Not After : May 7 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b1:11:ad:8a:47:c3:73:42:86:dc:3f:87:ca:
11:55:43:2b:68:b2:85:6f:e6:73:69:bf:a7:68:f2:
fe:34:9b:92:3a:d3:9c:96:2c:fb:47:58:cd:1f:13:
ce:72:1b:6c:ad:f1:4e:d1:cc:70:a7:fc:23:7a:99:
99:15:ab:1b:54:29:f1:d0:cc:a0:5f:ea:82:db:d9:
31:40:b3:13:1e:9c:84:18:5d:81:90:d6:0d:6d:62:
65:f2:78:7e:7d:69:fd:22:44:39:19:66:eb:d5:0b:
12:3d:52:51:ab:ab:bf:29:58:9b:d4:90:5b:75:be:
b5:57:32:ba:03:ad:5f:27:ff:9b:1b:25:78:9e:9d:
b9:b5:7b:67:64:c5:50:e1:03:02:46:07:b2:a7:69:
e6:ca:af:fa:8e:59:b5:21:70:41:6e:2f:b7:e0:81:
a6:9f:64:59:6a:af:75:fc:23:2f:45:fc:be:97:a5:
c5:3a:ac:9d:9d:7b:0e:7b:cf:21:43:e0:a5:19:4b:
e5:33:06:2e:91:1d:bf:5f:d0:05:19:72:f2:6a:9e:
5f:d1:a5:b6:1d:f4:5f:41:a2:9e:2b:31:2b:7d:2f:
81:91:99:ad:a7:3c:bb:a0:7d:72:ea:e5:33:7d:78:
78:ea:ec:da:96:4a:c5:b3:35:fc:c3:b6:cf:4f:de:
4e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:57:46:23:F0:A4:09:AA:5B:57:E6:C8:66:28:8C:81:DF:89:C9:45
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/25da85c3-57b2-493b-a9ef-e4d429d3a252.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fbb:2000::/40
Signature Algorithm: sha256WithRSAEncryption
c2:db:0e:cc:0a:24:68:7d:5b:ad:1a:21:88:5e:a7:b8:5c:0a:
da:d1:2d:69:94:dc:c8:4c:a3:30:02:7c:09:ce:46:1d:77:75:
44:56:91:60:98:e8:dc:62:71:6c:d0:3c:e0:c2:db:80:38:64:
91:50:ac:e6:a2:19:f6:5c:22:0f:4c:01:30:fa:ef:98:18:d6:
72:23:62:f5:65:25:e1:60:92:80:fc:bc:15:ae:60:cf:17:fb:
20:da:c3:34:f7:76:9a:36:d0:bb:b8:a2:49:3a:a1:4a:ed:49:
35:c5:8e:8b:51:36:54:6b:96:d1:03:f9:db:d2:33:40:e7:c1:
d0:22:5d:10:f0:ad:2a:70:7b:6c:e1:50:40:d0:91:34:02:92:
46:57:94:bd:2a:b3:8e:c2:2e:ba:23:21:e8:03:64:21:11:98:
a0:07:ea:1d:7b:bb:2f:17:00:da:9c:a7:aa:c8:ca:c1:06:46:
6f:85:e3:10:44:15:53:ae:fe:21:aa:c8:f8:43:c8:8d:3c:a6:
e0:a5:14:bc:fc:5f:57:c7:7f:85:4f:3f:03:b4:35:40:6e:07:
08:08:75:ed:eb:5f:c8:66:35:ca:22:d1:e3:31:b1:7d:15:9a:
c5:e9:d7:63:16:db:58:27:d9:23:8d:bd:ee:16:d8:0f:51:64:
23:04:0e:ce
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Apr 9 14:32:19 2025 by rpki-client