Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/95e22508-19cf-4432-8b3a-79d513cb62d8.roa
File: 95e22508-19cf-4432-8b3a-79d513cb62d8.roa (raw, json)
Hash identifier: 8kw5d/AXGIpedXtnk/mzQNEcIjos8dCaGw4rzKfR3HQ=
Subject key identifier: ED:C2:8D:AB:7E:F3:93:AD:C2:60:23:A4:66:FC:5B:32:D3:F5:E5:3D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3767DB1499F59095D17A456EE559E4998D180F76
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/95e22508-19cf-4432-8b3a-79d513cb62d8.roa
Signing time: Tue 08 Apr 2025 00:31:46 +0000
ROA not before: Tue 08 Apr 2025 00:31:46 +0000
ROA not after: Tue 13 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 56.254.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:67:db:14:99:f5:90:95:d1:7a:45:6e:e5:59:e4:99:8d:18:0f:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 8 00:31:46 2025 GMT
Not After : May 13 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6a:6e:07:d7:6a:48:39:5a:3c:be:1c:30:3d:
e1:c6:b2:c7:5d:b2:f6:38:37:bf:83:ae:8c:a6:f6:
0b:31:2b:1a:c3:27:27:17:77:6b:d8:5f:bc:78:e0:
dc:66:c6:ae:19:b8:9f:fb:9e:fe:bd:a7:38:de:50:
55:95:3a:3b:5d:52:78:91:e1:95:09:d9:7d:2c:95:
dc:30:2d:70:21:9b:e3:e4:33:18:8d:17:ad:1d:24:
77:48:9f:d5:cd:46:40:76:90:ec:e2:69:b9:c3:43:
e9:f4:78:5a:14:f3:2a:dd:5f:56:9e:9a:5a:14:c8:
c1:85:44:33:fa:20:d3:6e:c2:d0:f0:8f:2c:c8:b6:
4d:95:46:82:71:8a:db:2f:29:a4:e2:1f:1e:aa:b9:
d1:33:46:34:3b:9a:cb:f5:e4:4a:db:21:57:2b:54:
9b:6c:fa:33:18:6a:ee:67:28:1d:29:7f:14:ce:c6:
b8:b7:d7:79:19:65:11:33:82:4a:f2:37:3d:cb:d3:
83:a3:ab:2c:74:5a:49:99:cb:4c:6d:cf:e2:52:a5:
fe:7f:3f:f5:d3:6d:83:9c:bf:ef:96:ec:a9:71:7f:
f9:09:3f:be:d6:4d:9e:05:04:ce:5c:68:d0:33:77:
13:e1:f9:d1:05:d1:cf:47:9f:da:95:12:40:65:cf:
20:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C2:8D:AB:7E:F3:93:AD:C2:60:23:A4:66:FC:5B:32:D3:F5:E5:3D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/95e22508-19cf-4432-8b3a-79d513cb62d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.254.0.0/16
Signature Algorithm: sha256WithRSAEncryption
40:96:a8:58:a2:d7:aa:36:10:3e:e0:18:9e:ca:7b:10:cd:56:
69:54:a5:59:40:9e:50:d5:ad:12:f6:b5:ee:a8:43:76:c5:f4:
ea:a4:6c:5a:f4:63:0e:8d:f8:a5:66:6d:2b:8e:a5:54:de:65:
cb:53:66:2a:25:58:e7:ab:ee:a6:68:2d:c8:74:28:f9:03:25:
cc:db:83:c6:ff:3b:a4:44:24:94:da:5b:e9:2b:0b:1b:57:97:
57:85:72:b7:b9:6d:0b:e9:66:45:19:dd:6f:64:d6:97:7a:ff:
62:90:3d:27:52:36:2b:b5:9b:c9:27:60:9a:f8:71:2e:f9:99:
10:e1:9a:ff:fc:85:47:08:de:6b:99:13:28:c1:b7:9a:b6:a8:
b8:64:5e:6d:1e:e0:e6:a8:07:88:1f:6a:f3:5e:3d:25:d1:8c:
7b:09:92:70:1f:78:1b:67:d5:25:dc:05:2b:dd:80:de:5a:55:
94:0f:2f:8a:58:03:7f:00:62:da:9e:18:3a:78:90:56:44:94:
8f:7e:f5:c6:ed:85:88:35:af:e2:b4:41:6d:33:8a:ff:d5:ad:
e4:bc:27:97:59:30:0f:ce:b4:21:a1:f0:f8:c0:8e:07:67:f8:
6d:c0:a0:29:88:c5:d2:3b:25:25:0a:2a:8e:f7:a1:e5:12:10:
fd:6d:d7:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 08:11:08 2025 by rpki-client