Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ae26cc3b-4ee1-41a0-bd1f-4debb21c4972.roa
File:                     ae26cc3b-4ee1-41a0-bd1f-4debb21c4972.roa (raw, json)
Hash identifier:          p5flFjV+Y3FokW7X0oLmN90NB2Fi0RNrUOhMeW7pc1A=
Subject key identifier:   9B:15:22:0F:C7:6A:1A:7B:C8:7B:47:FA:E2:1F:86:15:5B:A4:A7:FA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       147EFA623F7570CC246DAA8E0D44166936D6E94E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ae26cc3b-4ee1-41a0-bd1f-4debb21c4972.roa
Signing time:             Tue 08 Jul 2025 16:32:11 +0000
ROA not before:           Tue 08 Jul 2025 16:32:11 +0000
ROA not after:            Tue 12 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f70:1000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:7e:fa:62:3f:75:70:cc:24:6d:aa:8e:0d:44:16:69:36:d6:e9:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul  8 16:32:11 2025 GMT
            Not After : Aug 12 23:59:59 2025 GMT
        Subject: serialNumber=b4db58bcef76e2977e96e07f95e02c79506cbdd940676d2636061a46c4e82639, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:00:fa:b7:e3:70:69:04:ff:10:d9:30:39:ac:
                    af:df:53:27:da:e6:7a:a4:69:d0:75:1a:6c:7f:02:
                    61:1c:7b:87:bc:49:3e:fa:cc:91:b6:2f:08:7b:a5:
                    93:ab:f6:f4:b7:ca:a4:b6:e1:21:ce:93:b4:5a:ed:
                    4b:8e:39:b5:38:68:53:d9:01:96:43:34:19:b5:0b:
                    95:19:01:67:7c:8b:33:33:e4:a8:92:a3:3d:58:4b:
                    1b:a2:69:24:a8:05:00:4f:35:b8:4a:52:81:29:6b:
                    68:56:38:2b:e1:af:28:c1:1e:cf:82:d4:50:d8:d6:
                    f6:54:a3:2f:d8:df:22:9c:03:f4:10:5a:db:78:99:
                    f4:05:9c:86:69:ad:62:b1:a8:e2:6f:f4:92:80:a4:
                    8b:f6:ce:f4:1e:f1:5a:9a:7b:4c:8c:ad:c8:af:fc:
                    b5:29:f5:d6:1b:83:20:5f:20:f4:4c:ee:a6:4f:91:
                    de:94:fe:a2:f1:53:67:66:78:fc:f4:0f:ab:8f:51:
                    c6:df:04:aa:b5:d4:c2:24:ea:61:d5:bf:5a:88:3f:
                    9b:82:9b:86:d7:01:df:5b:42:37:bc:f6:65:10:07:
                    bc:62:2a:55:50:12:0a:7d:24:6d:7c:4c:71:db:30:
                    3e:84:ac:9b:a5:43:fe:2f:8f:72:29:03:ac:4b:72:
                    64:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:15:22:0F:C7:6A:1A:7B:C8:7B:47:FA:E2:1F:86:15:5B:A4:A7:FA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ae26cc3b-4ee1-41a0-bd1f-4debb21c4972.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f70:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         d3:5f:0f:4f:5d:fd:d0:af:bd:a1:04:dd:e6:15:cc:8c:97:cb:
         12:2a:79:ca:e9:c6:ee:9a:4a:37:b2:95:1e:82:51:ee:a6:05:
         c7:a6:4b:fa:a1:67:8d:9b:d8:96:07:ad:9f:0e:b1:a6:92:df:
         6c:0c:bf:7f:f9:69:67:8a:34:48:2e:f3:64:fe:8f:13:5c:e4:
         24:7f:7d:1b:20:d5:c1:9a:e8:e5:91:88:da:1a:9b:6f:49:ed:
         b3:5a:3a:02:03:2b:cb:39:93:58:2b:70:ea:84:99:71:6f:39:
         0b:39:01:af:9e:26:a1:1f:10:02:33:0e:4f:bc:3a:32:6b:34:
         7e:08:df:df:33:8c:c1:6c:05:96:da:ea:b5:13:87:a9:d3:55:
         51:32:40:81:9c:e6:07:dc:86:d8:fb:3e:b3:2b:e8:ef:52:95:
         f5:4e:bb:31:0d:97:11:a1:32:4c:0d:3a:9a:89:44:02:dc:8c:
         27:85:d5:95:ec:88:69:2e:f0:5f:35:23:30:bd:40:cb:5b:5d:
         57:9e:d1:c2:a6:35:64:0c:6d:62:2c:64:35:be:e9:44:91:43:
         5e:cb:a8:84:79:52:f8:96:9d:62:45:e8:46:0c:f6:39:0b:05:
         89:3e:78:98:3f:1c:37:21:ce:d3:37:42:cd:0b:36:44:ea:df:
         be:14:03:4a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jul 21 18:06:58 2025 by rpki-client