Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62f1c6ae-c3ca-4326-b75a-fa2d7d8712d9.roa
File:                     62f1c6ae-c3ca-4326-b75a-fa2d7d8712d9.roa (raw, json)
Hash identifier:          wCVN/D67tRMCM+M9UvUIKnkYtNTiDj/dmvdqvFPt5Pc=
Subject key identifier:   75:58:E1:B2:DF:D3:D9:B8:4E:81:66:EF:78:61:53:49:C7:1F:C4:CB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6D55802A090981B028EB66BEACAFBBC92FA7E50E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62f1c6ae-c3ca-4326-b75a-fa2d7d8712d9.roa
Signing time:             Fri 11 Jul 2025 00:11:05 +0000
ROA not before:           Fri 11 Jul 2025 00:11:05 +0000
ROA not after:            Fri 15 Aug 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1ff3:8040::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:55:80:2a:09:09:81:b0:28:eb:66:be:ac:af:bb:c9:2f:a7:e5:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 11 00:11:05 2025 GMT
            Not After : Aug 15 23:59:59 2025 GMT
        Subject: serialNumber=142e759160f6286affd9cb2e94cd20bc01b6896f877eaa5bb6bdf4c728ae2cad, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a5:cd:a3:62:05:4a:f0:86:b1:6e:54:2d:d6:
                    3a:50:1f:20:91:02:b9:99:c5:fa:24:b2:06:4e:6c:
                    3b:9c:a6:e9:d5:df:21:17:c7:6b:51:48:2c:99:b5:
                    dc:9e:9c:5a:04:eb:74:31:05:8f:e0:55:87:10:b3:
                    5d:53:dc:fa:ca:a3:62:fe:e1:3e:d1:c8:e4:fb:bb:
                    1b:e3:29:f8:2d:bb:85:45:39:cc:ab:3b:4d:bf:9a:
                    fc:fb:51:cc:da:c3:0a:db:c8:1b:7f:d1:76:22:ff:
                    8e:c1:dd:24:1d:61:53:10:76:a2:18:6b:14:32:9b:
                    d5:d7:c1:7c:db:eb:e4:6e:d6:0a:f9:a2:35:d7:d8:
                    ed:60:2b:26:ac:62:b4:8c:ca:19:10:0d:0a:6b:6f:
                    65:39:aa:d4:a5:f4:39:db:82:c9:d1:4f:64:06:36:
                    8d:96:0c:d7:ef:d5:a2:7e:72:30:25:38:dd:ea:61:
                    bc:f2:f4:cf:09:5e:18:56:de:5c:99:5b:83:54:8c:
                    d7:11:fe:7d:7b:e0:0f:70:97:04:87:64:0a:fe:e2:
                    26:6b:50:04:0b:7b:21:1b:61:00:c9:08:5d:f0:41:
                    e8:72:2f:88:32:da:bc:95:15:b3:eb:3c:b6:83:e6:
                    20:12:f8:11:96:fb:2d:8a:b1:6d:f2:ac:00:b1:85:
                    9a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:58:E1:B2:DF:D3:D9:B8:4E:81:66:EF:78:61:53:49:C7:1F:C4:CB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62f1c6ae-c3ca-4326-b75a-fa2d7d8712d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff3:8040::/46

    Signature Algorithm: sha256WithRSAEncryption
         14:38:0c:f1:49:d3:a6:fe:d5:63:7d:ad:0d:25:2c:50:82:2e:
         ce:11:d6:f6:4a:c6:e2:f5:e5:81:a2:32:44:f7:da:55:30:f1:
         6f:40:5c:b1:1f:91:d3:90:18:f5:5b:d9:a0:87:c0:ff:0d:52:
         b9:5b:56:7d:73:3b:10:03:cf:87:06:a8:06:c0:22:03:e1:ba:
         6e:c5:8a:10:b3:e2:54:2f:f5:a2:80:3b:5e:41:f1:cb:64:a3:
         9e:ee:76:1d:81:20:f1:3c:f2:eb:09:49:00:78:ae:79:ec:23:
         89:e9:67:39:56:46:fb:e1:10:f0:2f:20:f7:58:46:b5:e5:eb:
         ae:34:86:9e:2b:08:fe:38:71:5d:24:ba:88:c5:f9:ba:bb:d0:
         55:37:03:e5:2e:8d:95:d2:37:c7:7a:78:50:47:aa:ca:54:ef:
         a5:93:c4:e3:7e:8e:dd:c1:17:eb:e4:8e:7e:fd:c9:75:9e:79:
         99:78:19:50:4b:a0:c5:6b:e0:da:0c:7c:ea:75:75:7c:a8:81:
         58:7c:d0:95:d5:03:e9:2b:99:91:19:84:ce:71:1a:7d:93:07:
         f4:d6:e0:c8:6d:63:fb:e7:52:00:db:45:9a:04:9f:50:ce:64:
         d0:67:02:26:15:b0:e6:9d:f1:16:1b:99:22:46:40:11:b4:3d:
         04:48:bc:94
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jul 21 18:11:22 2025 by rpki-client