Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d3c7c37e-fdc7-46c9-b004-05f7efea867a.roa
File: d3c7c37e-fdc7-46c9-b004-05f7efea867a.roa (raw, json)
Hash identifier: 5mu6bH2jzDVujrrwmk4pY86+v3vTUs07LcoKlMP0emI=
Subject key identifier: 6E:4B:66:9D:68:AF:DF:2F:A5:15:32:DF:FE:F4:65:CF:D8:CA:23:65
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0D2723394A3DA8EB97BA68B7F4F5EDB1D7545A88
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d3c7c37e-fdc7-46c9-b004-05f7efea867a.roa
Signing time: Tue 08 Apr 2025 00:40:23 +0000
ROA not before: Tue 08 Apr 2025 00:40:23 +0000
ROA not after: Tue 13 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 64.252.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:27:23:39:4a:3d:a8:eb:97:ba:68:b7:f4:f5:ed:b1:d7:54:5a:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 8 00:40:23 2025 GMT
Not After : May 13 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:aa:1e:54:47:74:fa:39:2a:af:56:51:f7:ae:
a7:73:a0:15:27:6b:20:6a:65:8d:64:0e:06:90:e3:
cb:ae:1f:a7:e0:27:0c:bb:3f:60:58:05:ec:87:e4:
c8:bc:01:08:a2:f5:97:25:76:c7:40:0c:12:00:9d:
16:98:d5:65:10:76:26:16:4c:83:2a:03:96:e0:99:
38:36:ea:09:a9:84:3a:41:97:ca:cc:d7:90:b2:fd:
48:e0:25:39:db:96:6f:57:20:39:7a:02:a1:3d:78:
d1:51:79:f1:20:b1:1a:42:42:81:a2:03:2f:28:7a:
f3:3c:99:ce:e2:11:90:b4:3b:e8:e1:c6:b9:87:83:
45:19:11:6a:19:bd:43:a0:90:52:cc:69:09:56:bf:
c4:c5:52:b5:69:ae:3d:5d:69:ee:24:4b:55:47:1b:
08:a4:70:6f:02:63:90:08:a5:ce:f1:f6:27:d7:02:
3b:0f:e7:61:5d:1e:6d:ae:36:27:38:b0:27:26:76:
ee:e7:9d:d8:4e:bb:d2:dd:f8:a7:8a:ca:56:5a:24:
70:f0:3d:d8:ba:3a:1a:c2:79:fa:42:d0:d2:ba:37:
9a:ec:5d:31:56:71:87:71:1f:91:cf:c9:4e:43:0e:
bf:b7:b5:c1:70:45:31:91:d6:00:fc:de:b4:b6:5a:
4c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:4B:66:9D:68:AF:DF:2F:A5:15:32:DF:FE:F4:65:CF:D8:CA:23:65
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d3c7c37e-fdc7-46c9-b004-05f7efea867a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.252.120.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:2f:c4:05:d0:1a:dc:89:48:a5:6b:38:df:9f:db:4d:6c:3b:
99:db:75:77:d7:3b:89:99:35:8c:c2:d4:7a:8c:5b:11:59:32:
2a:31:cf:5a:c7:31:86:c3:ef:b0:36:0f:75:fd:a9:e7:b2:54:
97:a1:68:9e:6a:02:6f:0e:d2:3d:69:5f:11:39:72:6d:20:0c:
e2:97:0d:30:2e:84:8b:b7:b1:60:9b:8e:e4:60:d9:4e:59:e5:
11:2b:44:48:7b:3d:8c:ef:70:08:ae:40:3a:56:ea:e9:77:cf:
e4:17:6a:2b:76:50:d4:a8:de:df:02:5e:8b:27:68:01:8a:74:
69:bb:55:11:b1:ee:fc:07:12:13:30:c1:cf:12:54:d8:b6:71:
d0:b2:4d:c9:04:91:d8:6b:72:58:62:11:22:d4:04:99:ac:8c:
92:b1:77:ac:a5:c3:a4:9e:82:95:be:09:d3:b2:f5:7b:6c:24:
bd:db:dd:bb:8b:98:28:e7:18:e7:ec:3e:6d:e2:62:e1:7b:f3:
a6:29:40:9e:14:8d:3f:fc:51:ec:b1:65:b3:ad:81:d1:a1:8d:
70:6a:23:b5:30:62:e7:90:55:ff:38:1b:a4:54:01:b2:4d:2e:
6b:8a:83:2e:93:85:ad:58:48:da:8f:4f:72:d4:a9:b0:53:1e:
db:43:fb:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 15:18:58 2025 by rpki-client