Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e36a6494-8d6f-444b-be50-cb1d5787daa7.roa
File:                     e36a6494-8d6f-444b-be50-cb1d5787daa7.roa (raw, json)
Hash identifier:          mcG/m4Z6AEQEtkkphQEuCW5L7misxDTIsSziJM/puhU=
Subject key identifier:   F1:EB:A6:FF:10:A0:DA:1E:52:E7:A7:FF:0F:E2:97:DF:BE:C3:26:F1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       03BF14590546472BDA21F971B90C48199510DD1C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e36a6494-8d6f-444b-be50-cb1d5787daa7.roa
Signing time:             Mon 21 Jul 2025 15:31:53 +0000
ROA not before:           Mon 21 Jul 2025 15:31:53 +0000
ROA not after:            Mon 25 Aug 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f38:8050::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:bf:14:59:05:46:47:2b:da:21:f9:71:b9:0c:48:19:95:10:dd:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 21 15:31:53 2025 GMT
            Not After : Aug 25 23:59:59 2025 GMT
        Subject: serialNumber=a9b6ac78ebde3a0195dff0427d75594b260a4ef5f74d1097c2edf50ab02d2dba, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8b:c2:32:69:e4:c0:55:e4:e2:11:52:ea:7d:
                    54:d0:ff:db:7f:81:ce:89:4e:b6:be:f2:f4:5e:39:
                    8b:57:68:95:ce:86:5e:32:37:26:95:e5:f1:7e:04:
                    b9:c0:70:80:a5:a4:d2:88:c4:cc:5d:0b:dd:83:0e:
                    f3:72:c2:f4:3b:56:1d:37:3c:5e:a9:8d:eb:e7:99:
                    af:37:8e:2e:87:68:10:1a:2a:96:ce:1e:2f:6e:56:
                    20:e8:93:80:65:58:25:a7:bb:f4:2f:67:3a:2b:e0:
                    21:8b:fa:e9:64:40:6c:41:c2:f0:09:85:b9:a3:7a:
                    96:21:fb:85:a2:28:84:93:e4:6d:da:bd:c0:c1:4d:
                    f6:a1:df:fc:33:7b:0f:b8:84:07:a0:b8:52:cf:66:
                    62:ed:bc:be:fc:9f:58:ff:71:a7:3f:14:34:2f:ba:
                    61:d0:a0:79:7a:a8:30:f5:21:19:05:2b:46:8f:e4:
                    df:f3:81:e1:f6:10:18:c2:34:17:36:a3:f8:a4:ee:
                    c2:be:1c:6e:66:91:ab:82:9a:ea:d5:0a:70:c4:c1:
                    73:34:f3:99:49:d7:ba:78:bc:30:5e:93:26:2e:b5:
                    06:4a:a2:68:fd:49:aa:51:f1:92:5c:de:54:98:a0:
                    d0:9c:a5:fa:72:2e:65:09:07:e1:35:ea:04:13:70:
                    84:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:EB:A6:FF:10:A0:DA:1E:52:E7:A7:FF:0F:E2:97:DF:BE:C3:26:F1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e36a6494-8d6f-444b-be50-cb1d5787daa7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f38:8050::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:8e:ee:cb:4b:d3:0c:53:84:9e:ee:b2:56:3c:34:ce:40:53:
         44:f8:a0:55:06:e2:9a:3d:e6:aa:93:cf:7b:97:cb:25:99:fd:
         6a:fc:cd:f6:55:c2:64:73:04:ca:3d:ea:4a:de:db:21:13:40:
         5e:18:93:4a:1c:0d:7e:05:ca:10:aa:92:a8:57:ee:fe:3f:e2:
         c6:ca:ba:40:29:ae:b0:7c:1b:6d:b7:8d:62:9f:70:ec:b2:ca:
         72:d2:b1:27:ed:81:38:43:e0:2c:5a:57:b6:4b:d6:5d:c8:5a:
         36:41:35:73:3f:a4:8a:9d:45:d0:0e:44:13:ff:9e:55:12:3c:
         3d:07:72:24:fb:05:2c:cd:48:2a:7e:09:d8:11:1b:b0:87:48:
         95:69:55:02:1a:2d:cc:08:74:c7:55:8d:7c:b1:80:d0:7d:1a:
         bc:76:50:87:3a:e5:8c:34:1d:78:ec:59:80:b1:49:6a:ec:a2:
         9f:50:cb:7a:50:ba:b0:37:80:70:84:04:8f:83:23:b2:08:09:
         fc:88:79:1c:f9:fd:c2:54:54:3c:a9:91:2b:19:45:85:53:98:
         b0:81:4a:0b:e3:5d:f4:5c:63:6f:e7:07:aa:eb:82:bf:c4:35:
         76:79:29:1a:14:de:57:65:ff:3f:65:88:b0:34:61:d9:8d:d9:
         8f:ea:ca:ff
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jul 21 18:11:23 2025 by rpki-client