Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/63e2842f-3b08-431e-b27b-922097dd5d02.roa
File: 63e2842f-3b08-431e-b27b-922097dd5d02.roa (raw, json)
Hash identifier: hMtNaxIeO1hntXij5X7Dmt5YlI3Cj4DtIcRgSmrbtxc=
Subject key identifier: E4:57:A9:C7:72:05:99:07:C5:D6:F9:6B:27:51:11:97:0C:12:A7:F5
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3038932BB92DB64B0D895294E22C9D5DD16EE98F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/63e2842f-3b08-431e-b27b-922097dd5d02.roa
Signing time: Fri 28 Mar 2025 15:00:22 +0000
ROA not before: Fri 28 Mar 2025 15:00:22 +0000
ROA not after: Fri 02 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ff6:2000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:38:93:2b:b9:2d:b6:4b:0d:89:52:94:e2:2c:9d:5d:d1:6e:e9:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 28 15:00:22 2025 GMT
Not After : May 2 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b6:dc:d3:32:87:01:6c:13:2c:3a:e4:1c:ef:
30:3a:b3:24:70:b5:4a:3f:dc:6d:7a:68:4f:69:2e:
c2:47:6a:ab:28:e5:d6:6c:bf:47:a9:55:d8:eb:de:
f6:c0:b5:4c:db:c2:b1:55:9d:f8:76:10:13:d1:10:
f9:b2:ed:f9:ef:51:f0:95:40:2e:44:5e:c0:5c:d9:
a7:e9:25:5b:e1:61:ee:3e:a5:6d:2e:dc:56:44:da:
63:c9:2a:d5:17:b4:57:0a:2d:01:9c:07:56:dd:0b:
56:9b:f0:0f:d8:17:73:ea:51:9b:c8:13:24:6f:56:
16:5f:a7:eb:d9:d6:3a:1b:63:21:8a:a9:5f:e6:3d:
75:74:bf:1d:6e:6f:2e:62:9f:94:bc:1d:88:69:30:
74:07:cb:21:04:d0:46:09:ae:43:b9:4a:18:cb:5f:
53:9c:40:27:86:be:50:de:e0:2a:9f:a2:3c:2e:1a:
cf:dd:bb:4a:49:1e:5e:e4:81:94:09:09:e8:cd:c4:
bf:ac:e7:d3:12:f2:d7:8a:d1:9f:8d:11:30:3e:0b:
fd:10:7a:91:59:76:5b:73:40:3b:ff:7b:87:65:6d:
38:05:cc:8b:9e:11:75:df:ff:80:0e:cf:8c:7d:12:
72:0b:50:9d:71:ed:89:85:2f:40:2d:99:f9:c5:43:
b0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:57:A9:C7:72:05:99:07:C5:D6:F9:6B:27:51:11:97:0C:12:A7:F5
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/63e2842f-3b08-431e-b27b-922097dd5d02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff6:2000::/48
Signature Algorithm: sha256WithRSAEncryption
18:69:24:0c:b4:88:56:72:77:96:57:d8:c4:b3:d9:03:7b:85:
08:8c:72:6c:c7:22:4b:c4:98:7f:4a:ff:63:9b:1a:9b:a2:c2:
ed:d4:67:8a:76:e4:89:ef:be:ed:80:b4:d7:4f:aa:62:72:fd:
42:9e:96:81:1f:b8:15:02:7f:44:67:54:e0:3e:74:3d:9e:4f:
0d:2b:fa:4f:ee:ec:28:6f:32:bf:a3:cf:0f:f5:93:81:f1:af:
82:c0:bf:4e:2d:c3:75:65:83:b7:b2:6c:e5:fb:b6:1a:f6:11:
c1:11:ea:72:7e:15:fd:c6:b1:dc:bf:d5:f0:1c:2c:04:ae:37:
d6:a8:4f:cb:92:40:82:1e:a2:9c:6e:b0:50:bc:a2:88:08:14:
2f:65:92:e1:df:1d:a1:03:e6:7d:4e:0d:14:eb:f2:46:7c:bb:
3f:58:42:d9:4f:bd:16:2a:6d:e8:93:90:80:0c:32:8f:04:9a:
a6:c3:c2:6a:c3:52:ea:2a:46:d5:ad:da:b8:3b:ab:0b:ca:ee:
c5:c3:3f:47:02:3d:e2:90:c5:f0:41:e1:40:b5:b5:bd:dd:43:
47:32:2d:fc:71:31:89:7c:f8:bf:fd:c8:c0:42:16:d8:78:51:
03:0a:b2:e2:51:a4:98:9b:f1:b7:58:44:31:1b:08:be:c4:26:
5f:cb:1c:2c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Apr 9 12:26:35 2025 by rpki-client