Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb4aa1aa-c039-44f4-89db-c4d640a760fb.roa
File:                     eb4aa1aa-c039-44f4-89db-c4d640a760fb.roa (raw, json)
Hash identifier:          T4ikKBFYrKKFVsBgWsO14bEMsmAIY/JHhCKJuZwRBDY=
Subject key identifier:   24:B7:64:52:CA:E8:D1:BF:53:1C:E7:29:0D:A6:3E:FC:4A:DB:0B:3B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       21E4B2B8983510F08A27B8A32F47B78E25362C64
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb4aa1aa-c039-44f4-89db-c4d640a760fb.roa
Signing time:             Tue 08 Jul 2025 16:51:55 +0000
ROA not before:           Tue 08 Jul 2025 16:51:55 +0000
ROA not after:            Tue 12 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f12:400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:e4:b2:b8:98:35:10:f0:8a:27:b8:a3:2f:47:b7:8e:25:36:2c:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul  8 16:51:55 2025 GMT
            Not After : Aug 12 23:59:59 2025 GMT
        Subject: serialNumber=3dd6d5e0a5066c9245b200488d3a38e4ea73b8854a9025d2a0cc555985c8810a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c9:bf:41:1c:9c:b3:7a:8a:63:2e:47:5c:94:
                    09:62:19:cd:5a:11:f6:21:21:4d:a3:45:48:04:5b:
                    b8:02:07:39:6f:e8:45:ff:c5:34:97:dd:7e:ed:ba:
                    b8:e4:68:03:26:1a:0d:88:bf:0f:df:60:0a:53:26:
                    80:56:40:30:f6:fe:89:b0:b7:28:da:2d:b9:d9:ec:
                    01:b1:24:a9:b6:df:72:f8:18:8e:2d:d7:46:01:3d:
                    c4:72:a6:f4:7e:a4:2b:06:5a:47:c4:2f:68:f1:a7:
                    41:4c:15:67:0b:4c:18:74:58:bf:40:9b:ab:76:b8:
                    ba:3b:67:c2:38:63:9f:7e:d2:c5:04:6e:bd:25:81:
                    a2:9a:6d:5e:f9:71:12:c9:c1:92:92:3d:a1:8a:cc:
                    a8:42:21:0a:5f:75:52:d6:57:8c:fe:0b:e2:de:b0:
                    3c:a7:52:ae:26:49:dc:26:21:4f:a8:dc:a7:8d:82:
                    07:38:89:61:d0:00:13:72:95:f4:b2:db:53:fe:86:
                    06:a3:d9:4c:cb:9b:4e:93:ef:21:83:9c:d7:40:86:
                    3a:16:7c:9e:29:b0:28:a9:80:42:f8:06:92:dc:16:
                    31:6b:88:b7:d1:5d:98:d3:0f:46:56:e8:06:89:a4:
                    6a:3e:65:2b:e9:f4:16:e4:97:c1:42:a9:05:90:56:
                    61:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:B7:64:52:CA:E8:D1:BF:53:1C:E7:29:0D:A6:3E:FC:4A:DB:0B:3B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb4aa1aa-c039-44f4-89db-c4d640a760fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f12:400::/38

    Signature Algorithm: sha256WithRSAEncryption
         a6:43:55:5e:56:4b:8f:ca:4d:59:68:3f:38:bd:dd:e8:a3:47:
         3b:e2:4d:08:de:91:7c:8f:4f:bb:c9:a8:0a:d4:66:5b:32:fe:
         18:ff:70:d1:76:ac:05:18:2f:21:89:75:0c:b4:ef:80:03:94:
         f0:56:77:55:29:74:97:82:c6:f0:64:0b:de:6d:99:ba:45:20:
         45:b7:5c:b8:f0:2f:cb:f0:5a:1d:e2:b5:5d:02:0d:69:1a:8c:
         13:93:3e:2e:ac:3c:b6:e7:c6:bd:74:c4:4a:9e:2d:bd:cc:f9:
         a1:9a:43:65:74:2c:a9:23:aa:1d:67:2c:f1:f5:7b:68:13:71:
         e4:52:9b:0a:3a:71:1d:b1:79:09:c6:00:bf:cb:a5:59:f0:43:
         6f:a0:20:45:b0:02:d2:98:4a:53:24:ac:7c:fa:11:39:a2:a7:
         55:94:05:d1:bc:f8:e7:b6:42:e4:28:f7:a9:ac:09:4b:da:0c:
         38:de:f3:b3:80:c9:23:6f:d2:c4:4f:d4:82:d8:e7:fe:a2:05:
         14:21:30:90:88:77:75:0e:08:ca:7e:bd:cc:e4:1a:fd:85:80:
         47:66:b5:55:87:20:8b:80:47:36:02:a4:40:ff:15:0d:cf:a4:
         81:18:d3:2f:dc:d6:cb:21:a8:f6:f2:7e:e2:49:1f:6a:c3:c1:
         53:0e:a1:06
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jul 21 18:06:00 2025 by rpki-client