Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e8982554-3ba7-40dc-8512-4f2f354e3029.roa
File: e8982554-3ba7-40dc-8512-4f2f354e3029.roa (raw, json)
Hash identifier: Yzy1yXxnKSxs9DVM+36jFYqy/HQXZQTiz7nS3l1gj60=
Subject key identifier: C4:43:BE:AF:BD:2A:A7:11:90:8E:05:3A:D8:CC:B2:73:4B:3B:8F:5F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5B368BB8A6890843188C2C3DCC5E278B00F8297D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e8982554-3ba7-40dc-8512-4f2f354e3029.roa
Signing time: Tue 18 Mar 2025 00:41:13 +0000
ROA not before: Tue 18 Mar 2025 00:41:13 +0000
ROA not after: Tue 22 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 50.19.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Apr 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:36:8b:b8:a6:89:08:43:18:8c:2c:3d:cc:5e:27:8b:00:f8:29:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 18 00:41:13 2025 GMT
Not After : Apr 22 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:05:f2:f7:29:f7:a9:06:94:86:11:da:2f:5e:
a7:a5:b0:b9:29:da:f9:e0:5b:76:be:5f:77:3b:f3:
10:2e:74:7b:1a:b9:63:fd:3c:39:59:79:c0:7c:45:
bd:67:61:11:e5:43:fa:3c:a4:cc:04:0f:55:6d:dd:
3d:1f:15:88:21:d6:18:c6:d7:db:6d:7d:59:6b:63:
9b:c7:96:13:33:9c:06:25:15:0c:92:3d:27:c6:01:
bd:b6:1f:e4:61:80:da:78:e1:34:a1:0f:03:71:da:
73:f5:e4:48:24:33:84:7b:b4:3f:de:fe:7b:56:11:
c2:04:c6:e9:e2:80:cd:29:7c:7a:33:77:e8:9c:61:
cf:94:eb:0e:85:b9:5d:73:a1:26:bf:42:0b:d7:ae:
01:38:eb:3f:6e:0f:1f:87:3f:c2:80:14:a7:4c:cc:
c0:79:95:18:df:e0:0b:b7:2c:b9:7e:eb:f2:53:35:
fe:54:4b:ab:35:84:15:11:94:ea:48:64:60:23:5e:
f3:8e:95:d2:96:6a:73:47:dd:2d:6c:17:db:ba:10:
cb:8f:f4:35:91:72:1a:c0:d9:bb:fb:3f:38:b8:4d:
52:4b:63:8c:a7:ff:57:a4:17:e3:77:1e:82:b2:3c:
b3:04:59:78:95:ae:f3:78:d8:23:59:b5:3f:e2:18:
52:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:43:BE:AF:BD:2A:A7:11:90:8E:05:3A:D8:CC:B2:73:4B:3B:8F:5F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e8982554-3ba7-40dc-8512-4f2f354e3029.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
50.19.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7b:60:d1:13:10:f2:d2:bd:be:f7:0d:62:f5:ef:1a:b5:70:a4:
bf:62:02:e7:e7:58:ca:21:91:0c:46:0e:13:2f:c8:e7:05:4c:
a9:80:f9:20:a7:92:32:7a:31:a1:6a:b2:7f:bf:2f:91:de:98:
4d:4f:39:9c:93:3d:cc:c2:be:48:f9:d9:81:b7:d4:56:86:a7:
5c:46:eb:03:2d:c8:63:8d:95:44:12:69:eb:35:36:82:40:d1:
30:6d:a2:4a:36:ad:fb:29:ba:c9:0b:cd:c9:fb:04:fa:c6:71:
70:e6:e6:dc:38:bc:3a:df:5f:c0:e1:73:b2:de:31:3c:2f:0c:
a7:aa:70:d2:c5:f9:72:20:4c:c1:2b:36:55:ef:5e:e3:10:28:
aa:b3:80:21:d6:b6:04:e9:0a:47:b1:da:55:dc:04:02:c9:7c:
74:49:98:d3:c8:d8:b4:4d:64:03:07:f1:10:c2:7b:e3:99:f6:
ea:3c:62:f7:da:bc:77:3a:15:0b:d4:a9:3a:5e:5d:40:0e:67:
4b:b4:74:cf:a9:b2:ef:cc:6f:ee:f3:05:b4:7f:40:12:9c:95:
44:2c:c9:03:7d:6e:99:13:c2:f6:56:b9:70:79:79:5f:19:8d:
1e:4c:ba:de:a1:93:33:9d:7a:fc:4b:33:b7:44:64:d1:9f:c2:
7c:84:d2:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 20:23:21 2025 by rpki-client