Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/714cd314-c418-4e0b-9ec6-d0e6db63a509.roa
File: 714cd314-c418-4e0b-9ec6-d0e6db63a509.roa (raw, json)
Hash identifier: do3wyblfJRRTRyG4j1LRpBbhhC1atsxEpMXmScZPlNE=
Subject key identifier: F5:18:57:F2:AC:E9:A1:CE:8F:CE:41:D4:33:8E:1A:45:0C:6F:4D:47
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 32041B984B58458ADFE607D352BDDF96497223CF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/714cd314-c418-4e0b-9ec6-d0e6db63a509.roa
Signing time: Wed 09 Apr 2025 00:21:27 +0000
ROA not before: Wed 09 Apr 2025 00:21:27 +0000
ROA not after: Wed 14 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 63.246.112.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:04:1b:98:4b:58:45:8a:df:e6:07:d3:52:bd:df:96:49:72:23:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 9 00:21:27 2025 GMT
Not After : May 14 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:bf:44:d6:c6:c9:23:ab:6e:69:78:60:f8:97:
93:49:02:6f:a0:44:78:57:76:c1:33:77:e7:27:c6:
ea:c1:99:af:80:8d:cc:2d:7b:58:02:44:f2:44:61:
ec:07:e6:70:6f:2a:13:7c:ef:7f:5b:7c:19:7a:c4:
b8:3d:ed:21:fc:39:a7:92:72:41:9e:8b:26:9c:b4:
68:4c:ef:38:39:b2:20:a9:b6:1b:2d:b1:e0:5a:09:
6e:a9:fa:09:8d:be:a1:f3:f9:1b:44:0e:19:27:ed:
17:f9:88:14:8b:09:1a:06:86:85:63:bf:b1:6e:b8:
a3:bc:d1:e6:c8:95:21:f6:a9:bf:3a:f7:23:5a:88:
df:21:bb:f6:46:d1:e4:ca:14:a5:cc:db:9d:54:48:
85:07:35:f5:b3:c1:69:78:af:81:58:4f:00:3f:f6:
c3:30:69:df:d9:da:4b:17:a3:cc:5e:e5:ec:c0:a6:
88:9e:8a:bb:df:82:11:8e:57:5b:7f:47:a9:5a:9f:
32:41:64:17:d3:5d:1d:76:a8:8e:be:4d:f1:43:c6:
ed:d2:e1:be:c7:fb:36:0d:1f:27:27:fd:bb:48:da:
fb:a3:1f:d7:df:74:bf:e7:11:3a:71:dc:e5:45:01:
9c:8f:48:92:17:83:cb:7f:36:98:9b:a9:7b:1f:71:
d4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:18:57:F2:AC:E9:A1:CE:8F:CE:41:D4:33:8E:1A:45:0C:6F:4D:47
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/714cd314-c418-4e0b-9ec6-d0e6db63a509.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
63.246.112.0/20
Signature Algorithm: sha256WithRSAEncryption
98:92:ce:10:50:1c:86:02:e8:a7:a0:29:20:44:71:98:5c:f1:
a7:09:a4:1c:9a:e9:9d:a0:cc:6b:13:f1:ae:11:de:f3:20:5d:
51:97:5e:2f:44:b6:f0:c5:56:c2:47:77:bf:89:0a:ee:bf:3d:
14:84:1b:3d:d3:e4:87:3b:b6:0b:11:16:24:8c:2c:46:6d:5b:
67:9e:4b:07:33:90:97:6f:47:12:44:6e:6a:6e:ae:11:03:f2:
b9:e8:fa:65:0d:75:b3:55:0b:c8:e9:d5:10:5d:67:dd:6f:73:
e5:6d:42:f0:f1:14:0e:b9:db:c7:40:fb:0c:d3:62:24:78:22:
22:67:1f:ec:d5:9b:a7:25:23:d6:fa:83:6f:a1:ff:cb:36:f1:
eb:bb:9e:c0:e5:6c:fb:75:74:2f:a1:11:9d:ae:c9:ab:d7:32:
1f:7c:27:8f:a4:fd:13:f4:c2:e2:a8:9f:eb:3b:ea:61:97:3a:
4d:a0:fc:2a:1f:25:fd:69:db:88:ef:ab:12:12:95:f0:2a:57:
a7:19:ab:46:4c:1f:ba:40:47:d9:b1:bd:51:73:4f:cb:85:31:
8c:2d:e2:f0:8c:89:1a:85:2c:9b:97:00:31:4c:48:b6:39:42:
3f:e2:3e:ec:75:a3:df:68:d3:2a:ff:cd:aa:45:ed:97:98:30:
53:13:64:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 03:14:27 2025 by rpki-client