Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/789e08e1-94bd-458e-ab49-16492240f27e.roa
File: 789e08e1-94bd-458e-ab49-16492240f27e.roa (raw, json)
Hash identifier: 1iZ02H2ktxhbWpekLn+haGw3XRI9sga3b2raXCGDMwo=
Subject key identifier: 78:62:B3:C3:A9:E2:E6:98:24:B5:C4:9C:8C:74:53:2C:C0:DD:1C:B3
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 241AD2DADC662BD57F35C98B9DE2D8103585945A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/789e08e1-94bd-458e-ab49-16492240f27e.roa
Signing time: Tue 08 Apr 2025 00:00:23 +0000
ROA not before: Tue 08 Apr 2025 00:00:23 +0000
ROA not after: Tue 13 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 207.223.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:1a:d2:da:dc:66:2b:d5:7f:35:c9:8b:9d:e2:d8:10:35:85:94:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 8 00:00:23 2025 GMT
Not After : May 13 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e9:02:47:35:4e:fd:b2:89:db:ed:9f:91:78:
1f:5d:c6:f1:39:73:da:52:79:64:23:2b:fd:45:04:
62:67:7d:d2:8d:77:63:ff:76:11:72:62:86:3a:f1:
3e:bb:52:9b:cb:9e:ab:ed:35:dc:d3:3f:c5:be:f6:
55:84:a3:14:b3:6f:9c:ef:ea:dd:38:5f:8f:0d:ce:
14:3d:b5:10:36:0e:a4:a9:49:f5:67:06:c2:5e:96:
86:c4:8b:dd:33:0e:25:cf:a7:d4:2d:b0:f3:a1:b4:
55:a8:0a:73:98:6b:a1:99:37:0d:8e:d9:ba:8a:31:
a7:24:75:f5:07:a4:3d:4f:a5:a8:23:c7:88:c3:2f:
59:c3:a6:b8:46:09:67:d6:7c:b8:27:a7:57:0f:1f:
d7:08:df:88:5d:de:80:f3:40:55:8f:77:5d:9d:e3:
00:34:59:13:c2:cd:2b:2e:97:df:3a:25:a0:f5:03:
c9:20:79:1d:9d:53:04:ef:90:ba:21:d4:03:30:9f:
16:61:61:12:f3:22:27:3a:d2:f6:bd:52:99:67:f8:
48:9f:3a:d5:00:ab:d9:54:0c:39:99:a0:ae:a5:e7:
3a:a3:1d:93:cc:8b:cd:28:81:69:1d:c4:88:9b:cc:
d6:5c:57:b3:e0:08:6a:55:be:fb:78:59:6f:ab:f3:
84:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:62:B3:C3:A9:E2:E6:98:24:B5:C4:9C:8C:74:53:2C:C0:DD:1C:B3
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/789e08e1-94bd-458e-ab49-16492240f27e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
207.223.192.0/19
Signature Algorithm: sha256WithRSAEncryption
29:74:c1:b1:82:97:8b:fa:43:c9:17:83:0f:6c:25:e1:c2:69:
61:2f:8e:46:c4:69:a0:94:dd:02:14:db:9f:7d:ec:fc:38:30:
f3:c1:11:e3:e2:93:2b:ff:22:c1:f5:13:ae:0e:be:fe:ce:80:
e4:6c:a8:83:9c:1a:a8:5d:be:62:ed:7c:d2:05:0f:7d:84:e0:
62:1c:f2:78:15:4a:e8:5c:c6:75:2d:cb:27:5b:fc:3b:10:04:
33:85:7b:2b:7a:cd:0b:b9:82:55:e9:20:2a:16:4d:6e:51:7f:
22:67:8b:74:c2:c4:87:41:f1:bb:df:a5:1b:58:64:92:7c:d9:
8e:68:f1:45:3c:87:0f:30:16:3a:38:b1:cd:89:09:16:40:ac:
91:75:dc:a7:40:83:73:9a:16:c6:0d:4f:e5:5b:74:d1:98:d2:
a8:b8:e5:12:cc:c9:08:a4:6b:21:c0:0c:6f:f0:14:57:23:c4:
fe:b4:c1:8e:b6:aa:e8:c1:12:19:43:73:ca:73:d4:79:50:3a:
54:76:8a:a4:1f:0f:69:3c:55:85:1b:be:7e:7d:22:bf:93:da:
f5:46:92:aa:d6:02:7b:c8:b5:17:e1:34:4d:a8:59:33:a6:00:
43:89:8f:89:ba:72:71:12:cc:a9:cc:09:d9:e6:b8:4c:fd:16:
d2:bc:88:e1
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUJBrS2txmK9V/NcmLneLYEDWFlFowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDA4MDAwMDIzWhcNMjUwNTEzMjM1OTU5
WjB6MUkwRwYDVQQFE0BkOGEwMjRiNzc1ZGQwNDFjZDBhMmRmZWI3ZjhlMjJiZTY3
MzY2YmQ5ODE0MmM0ZTg4NzkyM2YxYTA3ZmE5ZTQ1MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCU6QJHNU79sonb7Z+ReB9dxvE5c9pSeWQjK/1FBGJnfdKN
d2P/dhFyYoY68T67UpvLnqvtNdzTP8W+9lWEoxSzb5zv6t04X48NzhQ9tRA2DqSp
SfVnBsJelobEi90zDiXPp9QtsPOhtFWoCnOYa6GZNw2O2bqKMackdfUHpD1Ppagj
x4jDL1nDprhGCWfWfLgnp1cPH9cI34hd3oDzQFWPd12d4wA0WRPCzSsul986JaD1
A8kgeR2dUwTvkLoh1AMwnxZhYRLzIic60va9Upln+EifOtUAq9lUDDmZoK6l5zqj
HZPMi80ogWkdxIibzNZcV7PgCGpVvvt4WW+r84RbAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUeGKzw6ni5pgktcScjHRTLMDdHLMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzc4OWUwOGUxLTk0YmQtNDU4ZS1hYjQ5LTE2NDkyMjQwZjI3ZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAXP38AwDQYJKoZIhvcNAQELBQADggEBACl0wbGCl4v6Q8kXgw9sJeHCaWEv
jkbEaaCU3QIU25997Pw4MPPBEePikyv/IsH1E64Ovv7OgORsqIOcGqhdvmLtfNIF
D32E4GIc8ngVSuhcxnUtyydb/DsQBDOFeyt6zQu5glXpICoWTW5RfyJni3TCxIdB
8bvfpRtYZJJ82Y5o8UU8hw8wFjo4sc2JCRZArJF13KdAg3OaFsYNT+VbdNGY0qi4
5RLMyQikayHADG/wFFcjxP60wY62qujBEhlDc8pz1HlQOlR2iqQfD2k8VYUbvn59
Ir+T2vVGkqrWAnvItRfhNE2oWTOmAEOJj4m6cnESzKnMCdnmuEz9FtK8iOE=
-----END CERTIFICATE-----
Generated at Fri Apr 11 06:27:34 2025 by rpki-client