Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb654978-2e8a-4702-9a67-129733976175.roa
File: cb654978-2e8a-4702-9a67-129733976175.roa (raw, json)
Hash identifier: d7K76XOT3S6zzPN0h7mHq6hlP+HJOiA1a9FnC6uCxEA=
Subject key identifier: 74:AD:39:49:A9:EF:42:4B:2C:4A:ED:1E:26:AA:03:3A:32:C0:C6:4A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3C7B29DD3EEA2A66DD331393C36CE47B6E5748BA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb654978-2e8a-4702-9a67-129733976175.roa
Signing time: Tue 18 Mar 2025 00:22:11 +0000
ROA not before: Tue 18 Mar 2025 00:22:11 +0000
ROA not after: Tue 22 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 50.18.40.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Apr 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:7b:29:dd:3e:ea:2a:66:dd:33:13:93:c3:6c:e4:7b:6e:57:48:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 18 00:22:11 2025 GMT
Not After : Apr 22 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3b:6c:ee:ed:75:2b:1f:72:fa:bd:4c:db:0d:
70:84:5e:18:23:69:10:8b:c2:49:e1:09:d4:bd:55:
b2:73:c8:c3:0d:c0:af:e9:5b:0d:53:da:b8:90:e1:
89:7c:7c:c7:7a:ad:a8:bf:3a:14:87:a5:3c:26:c9:
96:89:e5:d1:b4:14:be:f9:ef:64:b8:bb:7b:11:c4:
10:0a:68:3b:9c:d9:f0:0f:67:e2:c3:de:65:e8:6b:
5b:fd:4c:df:7b:49:7b:04:12:b9:a0:0a:2e:38:af:
13:9c:cb:85:82:1d:98:50:74:0c:d3:9e:55:dd:77:
66:b4:0f:81:d0:9b:9c:ad:68:31:93:d1:62:43:ef:
b2:da:f6:af:af:ec:67:a4:19:60:58:65:8e:50:66:
96:df:14:94:45:e0:43:af:da:37:db:05:44:6c:70:
8b:31:c0:5a:9e:a9:0d:bd:b7:9c:a8:a9:9c:77:58:
23:72:0a:3d:c2:c3:99:42:97:eb:61:8e:f0:a7:46:
0a:09:c9:06:3a:0c:bb:21:a2:72:9d:21:08:29:ae:
00:90:dd:5f:b5:f2:2f:d8:ef:a0:33:5c:4b:38:76:
3e:70:b1:41:ab:45:f3:7b:87:97:4b:f4:1e:9c:0e:
00:1f:2a:39:05:9b:28:6b:a2:da:9d:fc:9f:a5:d8:
f5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:AD:39:49:A9:EF:42:4B:2C:4A:ED:1E:26:AA:03:3A:32:C0:C6:4A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb654978-2e8a-4702-9a67-129733976175.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
50.18.40.0/22
Signature Algorithm: sha256WithRSAEncryption
54:ec:98:9f:b4:a6:51:fb:af:9f:e4:73:0d:38:99:8b:eb:3d:
04:3f:df:b0:24:0c:3f:e3:e9:62:b0:7e:2b:2b:1c:5e:c0:2e:
c1:0a:92:93:84:4b:76:78:31:f4:4b:37:82:c0:ee:e4:2b:c3:
f8:3f:4c:1e:3b:99:44:22:f4:a1:41:5f:19:ce:c6:96:e5:1f:
3e:19:06:d0:e5:9d:e8:04:a9:70:85:57:76:bc:10:de:f6:56:
72:f3:44:e4:64:ad:68:1d:f8:ac:84:61:68:a9:6f:f0:e5:05:
4b:fa:85:eb:ac:ad:fb:42:fd:75:0c:fd:bf:88:d5:c4:81:01:
f5:4e:56:a0:c2:d7:30:fa:5b:89:8b:52:da:a8:c2:25:c0:e3:
cd:6e:68:a5:65:fc:63:b6:aa:34:63:dd:36:71:d5:12:c0:44:
30:09:76:7f:08:40:2b:47:a6:c1:a3:3e:af:91:52:ec:fa:27:
a6:e3:f4:04:71:87:e0:fb:1c:a3:06:94:4c:03:4e:6e:ea:b2:
33:08:c1:5a:81:b8:ab:29:6d:01:f8:2b:fe:7c:35:df:7a:de:
69:1b:b5:8f:42:5f:24:5e:1f:5c:0c:12:7d:4d:9e:29:75:e5:
8e:10:d3:ca:ec:14:fd:13:6e:f5:b4:16:0d:e2:f5:48:26:7c:
8b:0e:12:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 20:06:05 2025 by rpki-client