Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd7b206c-0527-49d0-914a-fe7ee32411b1.roa
File:                     bd7b206c-0527-49d0-914a-fe7ee32411b1.roa (raw, json)
Hash identifier:          mE1s5HrZe1PUHFs4W94jqqtkt9eDK6/1ZsklGCBBNXw=
Subject key identifier:   36:33:2F:B3:65:05:AC:E2:B1:AC:A1:DA:07:8A:EA:57:3A:77:52:B3
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5CD0DC90FE552BCB1106DAB4E5FFB4030764C3BE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd7b206c-0527-49d0-914a-fe7ee32411b1.roa
Signing time:             Mon 07 Jul 2025 17:31:04 +0000
ROA not before:           Mon 07 Jul 2025 17:31:04 +0000
ROA not after:            Mon 11 Aug 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1ffd:8066::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:d0:dc:90:fe:55:2b:cb:11:06:da:b4:e5:ff:b4:03:07:64:c3:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul  7 17:31:04 2025 GMT
            Not After : Aug 11 23:59:59 2025 GMT
        Subject: serialNumber=98c86a456627c39ff36a48f170aa57711b04a78add6c8bc4e6ca143e7e83eec1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:6b:71:49:f9:99:74:0c:0d:5d:65:51:c9:ff:
                    be:56:fe:3c:2d:ab:44:e3:40:8a:71:84:ce:fa:b8:
                    de:ff:4c:c4:9d:f0:af:61:6d:3e:f2:0a:97:8d:13:
                    13:54:e6:65:31:66:ee:27:a4:3f:aa:16:4a:3d:89:
                    54:76:80:17:f5:36:6c:34:63:5c:0c:26:3e:8f:bf:
                    77:be:3f:c4:ac:14:8e:7e:a3:0a:bb:8a:05:f3:f0:
                    20:b2:5f:b8:45:c8:3f:7a:a4:44:ce:89:fc:d4:f4:
                    9d:5e:31:64:8b:72:dd:9e:5d:00:9d:50:f4:02:60:
                    fe:27:d5:60:cc:96:02:35:c3:47:14:f5:5e:2b:9e:
                    29:98:09:66:e8:42:9a:9c:6a:71:22:a1:06:a3:44:
                    88:ea:1e:1c:ab:25:69:10:f3:12:79:d3:1a:82:6b:
                    1d:a7:ce:1f:40:cf:07:57:65:02:e2:fe:e9:65:c1:
                    1d:90:c8:70:40:9e:07:e9:87:86:16:e2:93:5b:79:
                    6f:3c:34:f5:b2:c1:9b:41:35:09:1a:67:0d:96:a6:
                    6b:1a:1f:4a:93:df:11:f8:eb:79:2e:f8:69:e9:40:
                    87:be:d4:2a:b5:e6:38:28:b3:97:f5:b1:5b:1a:91:
                    bf:4f:d3:23:93:f9:ee:83:36:5f:44:da:98:90:44:
                    e0:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:33:2F:B3:65:05:AC:E2:B1:AC:A1:DA:07:8A:EA:57:3A:77:52:B3
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd7b206c-0527-49d0-914a-fe7ee32411b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ffd:8066::/48

    Signature Algorithm: sha256WithRSAEncryption
         a7:13:1f:5b:31:df:12:83:e3:9e:2e:69:66:38:bd:1d:80:72:
         d7:77:15:3a:0e:32:5e:0f:d5:bf:18:0e:4f:6f:58:ac:a3:81:
         4f:69:76:f9:b1:3c:fa:78:ee:39:e1:13:a4:81:86:01:4c:99:
         cd:7d:dc:7c:50:2b:82:3d:eb:2e:07:aa:8a:cd:c9:b0:8e:56:
         b9:97:7d:ca:c3:98:a6:64:c2:bc:1e:84:40:88:50:1a:c6:76:
         35:91:d9:5d:b7:e5:23:94:9e:79:ab:70:df:e0:05:5b:c0:91:
         59:b9:ef:4b:f8:aa:c8:57:a3:f7:69:e2:8b:19:03:4d:57:aa:
         ae:9e:d0:ae:96:20:69:b6:43:f4:e3:70:ce:8e:54:3a:34:40:
         09:fb:52:2f:35:08:84:32:67:6a:5e:a3:7f:a3:10:c1:81:f0:
         d2:3f:37:a9:0f:23:18:8a:27:9c:0f:a9:38:49:de:0e:78:b9:
         8e:05:bb:04:c9:fb:1b:44:d6:ef:2a:55:a9:4d:55:27:82:68:
         a4:0c:08:37:e3:b9:4b:a3:36:cc:5e:16:ad:4d:c9:b5:31:c6:
         1d:5d:f8:54:9e:13:11:0d:b0:5b:b6:77:34:0d:dd:51:b6:75:
         a7:06:2c:a0:1d:f2:d5:36:8f:67:b2:8a:78:1b:29:07:f7:5d:
         b5:9e:3c:eb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jul 22 11:56:41 2025 by rpki-client