Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cbaa1461-b7bb-4b89-b0ee-19f4d4353102.roa
File: cbaa1461-b7bb-4b89-b0ee-19f4d4353102.roa (raw, json)
Hash identifier: HVMfeFrRLEQvWCzdD8sXwKWabcG0hEtWZRJ4MxrF8Cg=
Subject key identifier: 64:27:CF:CC:BE:FF:17:9E:F7:19:F8:3B:5E:D3:A3:6C:2F:65:B2:70
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2F2CE5241B16C0DF5633006DD23687B00C695868
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cbaa1461-b7bb-4b89-b0ee-19f4d4353102.roa
Signing time: Mon 24 Mar 2025 15:20:20 +0000
ROA not before: Mon 24 Mar 2025 15:20:20 +0000
ROA not after: Mon 28 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 121.94.0.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:2c:e5:24:1b:16:c0:df:56:33:00:6d:d2:36:87:b0:0c:69:58:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 24 15:20:20 2025 GMT
Not After : Apr 28 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:eb:ba:bf:7e:30:02:c2:72:7f:cf:34:d1:f1:
f9:40:9c:d4:4d:a0:bd:44:ca:bb:35:87:80:14:b3:
e6:81:04:47:3b:0a:aa:79:25:15:dc:90:76:a8:2d:
9c:86:c7:75:3b:fe:f5:18:2b:11:98:6f:f1:79:7b:
75:c9:df:8c:e3:62:4b:f6:1a:76:ab:12:5a:dc:97:
ab:3e:33:a6:27:39:45:ba:e3:b5:0c:fa:e7:95:69:
b0:25:7f:4c:25:16:31:f8:b7:65:c7:6d:ee:b0:bc:
0b:51:8f:de:01:b3:c3:bd:e0:9f:d9:a0:4b:56:07:
fe:f1:ee:20:62:a1:cb:19:e3:6f:6d:c4:e2:f7:5e:
ff:f6:ee:30:88:85:04:a4:04:cd:2b:e2:fd:46:36:
2d:f8:50:3b:9c:00:4e:dd:ce:9a:a2:db:c7:ec:7f:
3f:06:15:4b:6e:ab:8a:0f:5e:91:02:06:de:3b:d9:
34:37:a1:b9:22:d6:05:b7:48:19:fd:1c:db:2b:70:
91:b9:4c:8d:cf:59:d4:69:89:74:86:c6:36:c6:0b:
43:08:80:3f:28:8d:6e:0c:06:8b:7c:fd:41:1b:3c:
f0:6f:a3:27:1b:68:e7:b3:1e:28:bc:ca:b2:d8:51:
24:ba:40:b9:5b:86:e6:ad:48:66:9b:7d:13:6d:59:
f7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:27:CF:CC:BE:FF:17:9E:F7:19:F8:3B:5E:D3:A3:6C:2F:65:B2:70
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cbaa1461-b7bb-4b89-b0ee-19f4d4353102.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.94.0.0/18
Signature Algorithm: sha256WithRSAEncryption
68:02:a8:67:22:79:5e:5b:59:a5:44:f8:e8:88:b9:3a:50:9a:
e1:33:cc:cd:14:86:68:b0:be:01:5f:8f:7d:57:95:63:77:36:
af:d3:22:66:ee:79:08:ea:ff:3c:04:3b:a3:53:58:53:3d:a4:
5c:ba:fe:f1:b6:ad:02:b5:85:66:3d:43:4f:11:17:ed:92:2b:
0d:66:c8:36:54:a0:29:77:81:c7:ca:39:5c:0b:a0:6d:a2:ac:
58:39:84:21:55:9d:39:1e:92:5a:e5:be:22:a6:76:28:cc:9f:
f9:8d:ff:43:b6:15:e1:b5:f2:c9:22:e7:b8:aa:ec:90:d5:4b:
78:52:de:00:c9:ad:87:29:72:b2:f4:21:04:cc:55:d9:95:0b:
a3:6f:9c:ed:be:31:43:e4:b2:cd:f3:d8:44:48:4c:a7:29:7d:
95:98:99:59:1b:2d:2f:da:ba:bc:bd:7a:51:65:9d:0c:d9:92:
c1:6c:bd:29:19:d9:1c:04:fc:f8:15:a2:e3:82:ec:7d:49:49:
6f:8f:17:a8:8c:2f:5d:89:39:68:45:69:db:80:cb:9b:39:0a:
3c:5d:c6:c6:e1:03:05:f7:01:4f:56:30:c7:1c:3d:54:91:cc:
85:44:1c:8f:93:4a:92:96:f5:59:58:32:2e:3e:23:06:b8:db:
76:01:ea:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 10:27:24 2025 by rpki-client