Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b6131711-2e50-49df-8722-877c18d3e6a9.roa
File: b6131711-2e50-49df-8722-877c18d3e6a9.roa (raw, json)
Hash identifier: BrF6bqDXxyOHTARc4TzNxdW63Fz0AaXx4sZ+AUOMs+k=
Subject key identifier: 42:AD:FD:06:AF:F8:4E:4A:9C:A2:DF:49:A2:D5:C6:76:38:11:AF:A3
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 367EBC6D9A06800BDBA07782E2ED53C5ED00CFE5
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b6131711-2e50-49df-8722-877c18d3e6a9.roa
Signing time: Mon 31 Mar 2025 18:30:47 +0000
ROA not before: Mon 31 Mar 2025 18:30:47 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 173.82.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Apr 2025 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:7e:bc:6d:9a:06:80:0b:db:a0:77:82:e2:ed:53:c5:ed:00:cf:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Mar 31 18:30:47 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5c:6f:3a:bd:fe:a7:6f:75:47:63:94:e7:c6:
6b:69:84:54:a4:e1:87:fa:fb:44:c1:d3:a3:a7:b1:
94:e9:dd:48:f5:51:6d:49:26:7a:03:7b:47:67:79:
bd:5a:7b:77:6a:62:b3:2c:4f:00:af:f4:fb:d7:67:
78:c7:6b:b9:71:21:47:35:65:37:5b:42:fe:6d:90:
ec:1d:3a:5f:fd:61:18:95:07:c4:b6:f2:81:c4:b5:
8e:13:04:3b:e7:d0:82:50:6b:5f:0b:ae:c0:9f:90:
8d:1c:b8:9a:a5:9f:9f:25:e6:4c:16:00:1a:6b:8b:
cf:ac:ef:3c:a2:8b:ff:93:3b:03:5e:42:2b:68:c1:
bf:bc:bf:16:e2:d7:40:93:fe:32:5e:d5:97:bf:4e:
ea:f3:68:25:6d:dc:51:54:04:a9:c4:7a:14:4c:de:
5d:f3:c0:20:38:71:ff:d1:9a:2c:12:b2:02:92:c7:
69:f4:f6:23:fe:5a:2b:47:7d:a6:e7:58:f0:76:14:
6a:c3:0c:e4:46:6a:6b:ec:de:37:ed:e1:5d:d4:e2:
5e:9c:bf:76:7f:77:b7:6f:ae:10:90:54:40:21:cf:
54:c7:ae:8b:92:5a:de:92:93:cb:df:76:30:f4:01:
31:70:f2:d3:50:ab:e5:08:2b:00:0f:6a:f5:32:de:
ae:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:AD:FD:06:AF:F8:4E:4A:9C:A2:DF:49:A2:D5:C6:76:38:11:AF:A3
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b6131711-2e50-49df-8722-877c18d3e6a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
173.82.9.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:89:25:d5:57:4f:be:c9:8e:e5:f8:28:a0:9c:0b:95:ba:8a:
1a:67:e3:8b:ae:b5:82:9c:16:00:38:80:9a:f3:d3:d3:f0:aa:
42:5c:e2:a6:3c:79:91:a5:24:f3:4f:5e:d6:33:79:86:74:59:
08:b6:19:6b:2e:2d:95:99:b9:ff:ed:d1:23:05:3e:79:db:e0:
03:9f:9b:9a:1e:58:c2:3e:b5:6b:d8:ee:fa:7b:9f:4d:b9:7b:
ba:e8:bf:5f:cc:99:fa:95:06:a6:ab:cb:55:89:20:a2:93:4a:
3c:5a:54:5c:d8:12:01:3a:24:15:fd:87:62:78:1b:e2:be:86:
90:36:38:aa:26:a8:de:dc:51:e6:f9:25:64:7b:30:9e:d5:e9:
9e:01:3a:9c:1f:1c:d3:b2:3b:59:a5:2d:e7:bd:c9:7f:53:00:
a6:d0:c7:88:99:37:79:b7:36:e5:85:59:19:21:5f:3b:31:cd:
ad:71:4d:d3:d8:aa:4c:de:e1:31:6e:9f:c4:92:ab:c1:56:1b:
5a:1e:14:ce:0a:f9:e3:d9:7c:35:00:09:fb:d2:b9:0e:80:81:
75:7d:f9:ae:e9:44:8a:b0:97:26:4b:26:bd:55:6f:ec:71:7a:
94:dc:c1:33:46:c4:a8:ca:d7:a9:bb:14:6c:aa:1f:73:5a:7b:
4b:70:05:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 21:11:57 2025 by rpki-client