Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c748147-8998-4672-8c3d-5171a4d8afff.roa
File: 7c748147-8998-4672-8c3d-5171a4d8afff.roa (raw, json)
Hash identifier: iAQ2VaWZqNMsori61VGIbx+YhbxspEeDi2ZJE5hfzxY=
Subject key identifier: A2:36:8B:08:F1:81:5C:B3:4C:ED:32:9D:A6:FC:FD:5B:98:8C:1B:3D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 09DEE527C000C736F22B5B8DBD7C950785E43183
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c748147-8998-4672-8c3d-5171a4d8afff.roa
Signing time: Mon 07 Apr 2025 15:11:05 +0000
ROA not before: Mon 07 Apr 2025 15:11:05 +0000
ROA not after: Mon 12 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 16.52.0.0/14 maxlen: 14
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 18 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:de:e5:27:c0:00:c7:36:f2:2b:5b:8d:bd:7c:95:07:85:e4:31:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 7 15:11:05 2025 GMT
Not After : May 12 23:59:59 2025 GMT
Subject: serialNumber=24667bf6e74f28f265a3a8868ebe8ae7055ff79804c580e4faa3c8bac405abe4, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:05:2f:7e:de:29:ee:02:b4:b0:d7:e2:b0:fe:
a5:35:cc:8a:bc:e2:7b:72:cf:3f:d1:01:18:24:15:
a7:63:14:c6:6b:02:2f:77:64:3d:33:a8:ad:c7:ac:
74:08:f7:6c:49:b0:aa:86:92:09:4b:d5:52:41:1d:
55:e4:cc:10:e2:65:f7:29:55:1d:62:bd:72:a3:2d:
e5:89:95:45:0d:e6:fe:5d:37:26:8b:62:c5:c1:69:
ba:cb:5d:c5:2c:7d:06:66:e0:c9:00:af:74:b8:72:
ff:7d:59:8f:3e:4c:5a:f7:3a:16:fe:76:c5:67:de:
30:0a:e4:2b:58:d3:bc:e9:75:51:28:43:f9:de:2e:
1d:c4:1f:41:45:fc:84:27:31:02:e2:d4:07:d4:8c:
f6:7b:76:12:df:90:cc:0e:14:36:99:1b:a2:fc:05:
68:e0:44:8c:fb:3f:4f:9c:08:73:f1:78:cd:39:16:
55:0f:d7:1e:7c:65:ab:6a:af:ee:41:87:56:76:b8:
37:00:22:80:0e:0e:da:3a:2c:31:96:14:1b:ea:84:
e6:ac:e5:45:2d:5f:5c:cb:86:25:2a:e5:aa:5a:6f:
bf:19:54:dd:40:31:7d:11:91:12:68:28:5f:6c:1c:
26:8e:e3:5b:36:70:27:c0:1a:a1:2c:d2:10:19:98:
8b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:36:8B:08:F1:81:5C:B3:4C:ED:32:9D:A6:FC:FD:5B:98:8C:1B:3D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c748147-8998-4672-8c3d-5171a4d8afff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.52.0.0/14
Signature Algorithm: sha256WithRSAEncryption
be:c2:55:c8:ab:6e:43:da:f0:fe:13:bf:6e:de:52:1f:2e:b5:
2a:23:3f:1e:30:c9:a1:43:7d:1c:89:32:28:0b:c8:ca:eb:c6:
7e:4c:04:2e:19:30:47:10:1a:4f:30:ea:fe:f2:05:fb:34:5b:
f8:c8:42:ed:38:c9:94:6c:58:4d:03:a0:8f:e9:47:40:09:d7:
58:5c:48:7d:f6:b8:65:71:04:3d:61:bc:20:29:2c:d9:ed:77:
99:af:c5:e3:0f:a3:6d:d6:48:d1:03:9a:ad:a7:ed:86:52:0c:
c1:fc:7c:98:dc:ce:53:73:88:f8:dd:e2:09:d9:3f:5f:f7:a8:
92:f8:09:17:fe:59:8b:23:7d:d8:fb:be:4d:ad:71:51:f4:5d:
aa:60:91:eb:d3:8b:51:60:2f:ff:23:4b:10:b0:f5:e2:ea:2f:
24:87:14:58:93:1e:7e:2e:74:2c:4a:e5:b3:b7:78:8c:09:81:
93:f2:dd:1f:1f:68:fa:f7:7b:9b:d9:ac:39:8d:29:b6:5d:05:
a0:1b:50:8d:df:ad:7a:bc:84:f8:ee:80:a5:29:f1:f5:da:72:
03:6e:9e:14:75:f5:12:30:2b:c0:f5:da:7d:3a:47:dd:9b:b6:
1e:71:ad:50:f9:67:00:8b:ed:81:8a:e5:24:32:68:4c:04:10:
ce:4c:92:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 11:40:53 2025 by rpki-client