Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aab2944d-648d-4a63-8324-98420640d724.roa
File:                     aab2944d-648d-4a63-8324-98420640d724.roa (raw, json)
Hash identifier:          Yjn9zNodllPHEqc5CWzN6BQc8Nqawc70gJHdrxpgwIU=
Subject key identifier:   4E:5C:2A:6D:D3:4A:0E:13:C6:31:25:CB:B8:54:6E:0A:CC:FF:EC:75
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       360FA9C2E9E55FD11E8EFA8BC8901B6E5B3B6CEA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aab2944d-648d-4a63-8324-98420640d724.roa
Signing time:             Mon 21 Jul 2025 15:42:03 +0000
ROA not before:           Mon 21 Jul 2025 15:42:03 +0000
ROA not after:            Mon 25 Aug 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        2600:1ff3:20c0::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:0f:a9:c2:e9:e5:5f:d1:1e:8e:fa:8b:c8:90:1b:6e:5b:3b:6c:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 21 15:42:03 2025 GMT
            Not After : Aug 25 23:59:59 2025 GMT
        Subject: serialNumber=36b7123598eab35551f44bc8fdd2cb91916ce341682b9244f59601d3fa3ec670, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9e:87:e1:fe:ce:da:4e:8b:13:53:e6:1e:a2:
                    77:cf:72:a1:67:c8:b2:bf:23:27:08:7a:15:70:a0:
                    f3:3c:73:43:52:e4:7f:a5:2e:0f:b6:ef:f5:86:c4:
                    56:9f:1c:6e:33:7e:ad:e1:55:6c:9b:03:87:ee:eb:
                    d1:53:6b:d9:25:98:b6:86:3e:b0:c6:3b:4d:f3:93:
                    f7:d4:f0:33:b2:51:0c:54:e4:3d:38:38:6d:82:d3:
                    e3:c0:07:b6:0e:c2:6c:5d:52:40:fe:1a:a4:04:19:
                    27:29:e3:68:35:93:e5:ff:70:50:ff:de:c4:89:77:
                    75:e6:9c:d7:8b:58:17:d7:59:f5:7c:43:78:06:2f:
                    6f:7d:eb:19:3a:a0:0b:9a:e1:a4:58:47:cb:4e:ea:
                    12:c2:d2:a6:ca:7f:2e:87:da:66:77:7c:4e:62:5e:
                    c4:f9:c9:e3:33:8e:63:29:08:f5:ff:8a:67:3e:5d:
                    3b:5f:49:fb:df:17:4d:f5:c9:36:43:89:48:14:0a:
                    0f:8f:08:ef:83:f0:82:80:9c:b2:d4:b9:38:14:68:
                    34:54:84:d8:53:c5:1b:62:b8:60:c7:92:29:78:68:
                    7a:da:d2:79:e6:28:21:67:a8:00:01:60:63:0b:cc:
                    d5:66:b3:c0:4f:83:0b:61:11:ff:48:79:9b:e3:81:
                    c7:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:5C:2A:6D:D3:4A:0E:13:C6:31:25:CB:B8:54:6E:0A:CC:FF:EC:75
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aab2944d-648d-4a63-8324-98420640d724.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff3:20c0::/46

    Signature Algorithm: sha256WithRSAEncryption
         74:4a:e4:05:a9:69:07:b0:5a:56:fc:51:c5:e8:5f:ea:7c:94:
         d8:d2:da:8c:3b:05:b6:59:3e:d4:57:fc:65:b8:25:be:ae:ca:
         47:39:fa:12:d0:ad:d5:23:67:78:22:fd:c3:aa:74:6c:0e:5e:
         70:53:1a:dd:bb:1b:21:1d:4f:3e:05:ec:6b:bb:ca:a4:71:a3:
         f8:7f:85:5a:43:54:ee:57:9d:e9:69:12:f8:53:d9:b7:73:26:
         b3:6a:73:24:a3:0f:ac:10:af:c4:9f:71:0d:c8:f2:c8:e5:a3:
         17:3f:32:1d:e1:df:c9:7d:be:a3:2e:da:65:69:56:f2:3c:71:
         68:e7:c4:76:a0:0c:f4:1a:5c:5b:99:c5:99:7c:b1:51:13:c4:
         f0:11:ee:18:33:69:84:90:f5:3a:a1:95:56:83:8f:ce:b2:8f:
         a1:28:ec:d2:cb:55:c1:92:43:5e:7a:60:6f:98:54:85:52:83:
         45:da:88:a9:b5:23:17:1f:d8:a7:d7:1a:9d:38:91:5b:51:42:
         40:40:26:70:10:d3:e2:04:67:c7:9d:2f:ac:8a:e9:6e:bc:3c:
         4c:cd:ad:97:34:6a:03:27:93:c9:9c:00:01:3f:9e:a2:2b:61:
         51:75:b8:d3:6d:37:5a:9a:78:38:0c:2c:ad:89:ca:7e:04:9d:
         89:1a:06:0f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jul 22 04:55:03 2025 by rpki-client