Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bb494ebc-9d71-4c78-8f22-eebb8ff672e7.roa
File: bb494ebc-9d71-4c78-8f22-eebb8ff672e7.roa (raw, json)
Hash identifier: rCyc7/d5vEurK3+HKhego//RYGGcts30AvpLa6MI0mk=
Subject key identifier: FF:53:E9:82:25:1C:30:68:72:13:DB:BF:0A:89:8C:60:95:A4:5A:44
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2361022DC69776CE894A4B046F491C442E9A16DC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bb494ebc-9d71-4c78-8f22-eebb8ff672e7.roa
Signing time: Fri 28 Mar 2025 16:30:31 +0000
ROA not before: Fri 28 Mar 2025 16:30:31 +0000
ROA not after: Fri 02 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fee:7400::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:61:02:2d:c6:97:76:ce:89:4a:4b:04:6f:49:1c:44:2e:9a:16:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 28 16:30:31 2025 GMT
Not After : May 2 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:0c:13:f8:81:40:d9:3a:60:07:31:a1:bf:18:
6e:83:c9:dd:f3:84:db:2a:fa:55:e2:2b:4c:3e:ef:
53:60:7d:ca:22:e8:22:2d:14:a0:67:87:6b:47:3f:
a8:8b:3e:76:48:c3:14:f1:f2:a8:e3:c7:e5:67:bd:
94:46:07:f2:53:3e:1f:a7:81:70:6f:37:37:a2:5a:
7b:b0:9a:ab:f7:cb:35:90:f2:3f:a3:05:08:08:66:
0c:e7:67:9a:80:44:b0:b9:bb:67:f4:b7:e1:c4:8f:
4b:9b:3e:c2:70:ac:d7:41:c4:80:70:f9:dc:7f:43:
c6:40:44:7c:70:33:50:91:ec:c3:21:7a:87:f8:b5:
69:68:96:dd:3d:6c:c3:2c:26:1a:c4:53:2c:b8:ce:
e8:e6:8c:ca:44:bf:df:0f:26:b9:e0:dc:c8:20:83:
09:0c:12:3b:4a:00:ea:6d:82:25:3a:93:a0:af:dd:
e7:b2:88:b8:1e:5b:ca:db:18:3d:8e:17:30:42:62:
45:52:37:f7:e8:4f:5d:c5:25:44:a0:d4:99:53:a5:
61:45:c2:e2:ef:68:ff:8a:93:c5:11:5b:02:4c:66:
4c:fd:09:ea:e9:fe:2e:55:44:95:87:64:71:c7:e1:
60:51:ee:99:19:13:ef:cf:d2:f1:16:93:5e:d5:80:
35:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:53:E9:82:25:1C:30:68:72:13:DB:BF:0A:89:8C:60:95:A4:5A:44
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bb494ebc-9d71-4c78-8f22-eebb8ff672e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fee:7400::/40
Signature Algorithm: sha256WithRSAEncryption
a3:bc:77:c4:3b:cf:33:f0:02:16:a8:14:a6:67:80:01:df:ed:
d0:a6:e4:f3:de:e0:9b:a1:3c:db:b8:dc:bd:5f:a1:ac:97:2a:
fb:77:11:c1:59:3e:34:12:31:29:bf:8f:b5:3c:95:a0:07:6f:
38:99:3f:6e:eb:ef:d9:55:ed:25:3f:0f:b4:a9:1f:1c:3b:f4:
22:83:b8:9a:71:c5:c0:4d:c8:eb:4f:2f:58:32:5e:ec:30:5f:
ad:d2:40:d1:e8:a1:af:23:52:50:4d:33:23:06:e6:8f:61:1e:
2c:eb:91:47:b8:0d:fc:02:bc:75:99:c6:13:14:1d:ed:0c:7b:
29:83:7d:c9:6b:36:c2:a4:7e:a2:5a:e0:74:a0:33:2f:60:e1:
f0:c5:83:c2:69:de:53:8c:5f:65:6c:57:6d:a9:c1:d5:ab:c1:
45:f8:88:80:9c:f0:8a:7f:af:a9:e5:a8:9d:28:91:35:8d:af:
30:23:ef:63:ba:b1:84:5d:ad:a7:f8:ed:ea:05:ea:32:dc:d0:
9c:ce:cb:9e:5f:fa:e6:73:72:8d:b1:0a:56:00:d2:7e:54:4a:
c1:0d:50:ff:09:55:2d:3a:a9:2e:d9:da:a6:b1:ef:ba:98:28:
72:86:c5:fd:e6:ef:0e:02:af:98:fd:15:a4:43:10:09:23:3d:
27:42:cc:ac
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Apr 9 14:14:16 2025 by rpki-client