Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b093ff05-9300-4de7-908e-a369edef8963.roa
File:                     b093ff05-9300-4de7-908e-a369edef8963.roa (raw, json)
Hash identifier:          CG4pUGM4dU8Nno2i0X0enZO8IBtXlhXWyWgI2jBgw5c=
Subject key identifier:   6E:3C:D6:B8:59:3E:74:F9:9A:27:E0:6A:A9:F0:F5:3F:0D:02:F8:CF
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       594913BF873F2D69741558ECD0A765C6A0FD7C70
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b093ff05-9300-4de7-908e-a369edef8963.roa
Signing time:             Mon 07 Jul 2025 18:11:36 +0000
ROA not before:           Mon 07 Jul 2025 18:11:36 +0000
ROA not after:            Mon 11 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f61:2000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:49:13:bf:87:3f:2d:69:74:15:58:ec:d0:a7:65:c6:a0:fd:7c:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul  7 18:11:36 2025 GMT
            Not After : Aug 11 23:59:59 2025 GMT
        Subject: serialNumber=18a91b4cfe82c59841b19add1d45888c62b5b4d0760f0b86d7190e8289b4db8e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:86:49:19:23:ee:46:48:44:34:d7:cf:ee:ff:
                    80:24:b3:70:60:d7:6f:77:c2:8e:ee:3b:52:5d:c9:
                    6f:bb:e2:a4:f1:41:0a:3e:03:8e:01:93:ce:32:ca:
                    00:f0:7d:96:f1:b8:e9:94:3b:f3:fb:8d:0e:5a:c6:
                    91:90:34:40:87:1b:38:bd:0f:e2:cf:7a:03:dd:17:
                    9d:64:c8:7f:96:6a:f9:02:7d:25:14:21:26:9a:99:
                    50:58:66:3e:2c:fc:af:94:52:c5:c9:3b:0d:ed:87:
                    af:ae:4c:16:1a:b8:b8:89:08:12:fa:60:e0:f1:24:
                    21:3b:bf:ef:87:6c:8f:1d:fb:14:d6:37:f3:0c:f5:
                    66:ed:78:9b:2c:c7:83:a1:65:cf:4b:ce:0b:f5:38:
                    ad:de:66:2a:6b:e7:2c:cc:4f:46:06:68:d7:d5:db:
                    16:ef:bd:7b:14:34:d2:8a:ea:77:bd:34:8e:4f:70:
                    88:cc:c9:85:ca:72:70:e0:86:09:af:33:af:03:41:
                    ed:23:41:62:99:94:e9:df:14:3c:40:db:b3:69:2c:
                    81:a7:69:6a:ce:16:33:86:4a:4e:70:dc:ca:e2:a5:
                    6a:17:d8:86:3c:ba:f3:4d:e7:cc:98:61:48:95:b8:
                    da:db:39:21:f3:16:07:f4:a6:1f:3b:e0:9c:60:dd:
                    c4:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:3C:D6:B8:59:3E:74:F9:9A:27:E0:6A:A9:F0:F5:3F:0D:02:F8:CF
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b093ff05-9300-4de7-908e-a369edef8963.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f61:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         b9:00:dd:59:ad:e4:d1:c1:53:02:37:44:60:74:97:b9:59:87:
         e9:75:85:11:2d:d6:ae:02:25:19:11:86:84:e0:87:19:61:63:
         a2:76:61:20:6b:cf:3e:86:f6:0b:8c:a3:f7:05:7a:ad:00:46:
         98:6c:bb:1a:48:08:8a:66:d1:59:98:aa:54:04:ef:d1:8a:60:
         34:da:6f:d9:ba:02:6b:79:f8:f1:5a:54:f2:68:e7:90:09:fc:
         6f:63:b4:ef:e9:73:40:da:5f:2e:fd:00:1a:de:73:c3:1b:98:
         53:91:8b:73:7c:94:a1:e3:e5:60:29:86:ab:b2:61:dc:c4:be:
         ae:0d:93:78:9d:f0:38:3d:94:7e:c4:81:be:1e:d7:21:28:a0:
         bc:15:8c:43:08:40:4b:a6:af:22:04:3f:48:81:45:bc:15:7d:
         b0:97:4a:cd:5c:30:e1:ec:19:56:20:46:ad:fb:0a:c5:89:51:
         be:45:5e:31:df:6d:d9:91:b4:1a:b4:07:ce:f5:ea:16:20:49:
         01:84:98:a5:57:62:2e:6b:8f:9c:41:d7:2a:8b:98:27:61:97:
         4c:37:11:33:92:a7:ba:0a:dd:0f:59:cb:9c:fc:9a:74:42:66:
         97:5a:0b:db:bc:95:48:12:1a:c0:4a:c9:9b:6f:4f:bf:f8:01:
         a5:9d:f8:89
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jul 22 04:30:23 2025 by rpki-client