Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/fc93e1d0-44ff-4b2f-962d-d91a8964a4bf.roa
File: fc93e1d0-44ff-4b2f-962d-d91a8964a4bf.roa (raw, json)
Hash identifier: YS9oQlP2Qn+e7hcNEETfN5UNO+sX85qOkrTIr9qSm1g=
Subject key identifier: A1:2F:06:AC:62:3E:AF:C8:87:08:F8:05:46:5B:3E:D8:88:EF:E9:23
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 4CDCA6153F80CCDD961325CB3D72E196C0AF856E
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/fc93e1d0-44ff-4b2f-962d-d91a8964a4bf.roa
Signing time: Sat 29 Mar 2025 00:10:29 +0000
ROA not before: Sat 29 Mar 2025 00:10:29 +0000
ROA not after: Sat 03 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 69.169.230.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:dc:a6:15:3f:80:cc:dd:96:13:25:cb:3d:72:e1:96:c0:af:85:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Mar 29 00:10:29 2025 GMT
Not After : May 3 23:59:59 2025 GMT
Subject: CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:41:4f:4c:21:2d:12:81:59:78:0f:99:a6:ec:
c5:ec:e0:1b:f6:c0:03:5a:d6:a6:be:af:e7:18:e1:
35:a5:57:e6:a4:a0:e5:8b:41:85:d2:c8:73:c9:69:
46:1b:6f:27:76:2f:f6:9c:c1:3c:37:77:41:3a:66:
2f:a1:2d:d3:d9:07:32:40:da:6e:e2:54:ce:e4:67:
f2:f5:1f:e1:2a:68:61:08:7f:9d:28:a8:e4:d4:59:
6f:57:27:08:b3:cf:c7:02:4e:80:22:f8:1a:76:b9:
f5:5d:74:71:47:8f:7a:03:2c:0e:b6:8d:49:9e:63:
9d:16:ec:c2:9f:81:79:86:05:15:6f:7d:da:bf:41:
ce:6a:05:d3:a4:8b:ef:a3:76:c9:50:3d:cb:60:d2:
13:de:be:c3:f0:07:1a:50:64:31:e4:1f:b5:13:70:
7c:c8:9e:c2:38:08:86:4c:25:5d:29:41:df:7d:64:
9e:f2:b0:c0:16:36:c7:4f:27:04:6b:00:e8:c2:4a:
30:ac:12:6a:89:e5:1a:9e:90:99:92:f5:47:f9:41:
37:3b:24:07:10:d2:58:3d:45:20:48:8f:31:93:f3:
3b:1b:3c:e9:1c:65:c5:66:5b:e2:dc:65:4a:00:5f:
b1:d6:16:de:d0:f5:90:d6:77:8b:bf:98:cd:aa:c2:
2e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:2F:06:AC:62:3E:AF:C8:87:08:F8:05:46:5B:3E:D8:88:EF:E9:23
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/fc93e1d0-44ff-4b2f-962d-d91a8964a4bf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.169.230.0/23
Signature Algorithm: sha256WithRSAEncryption
91:84:4e:86:27:3d:ec:0e:eb:01:f8:76:9a:e4:4d:2b:0a:65:
7c:9b:69:94:85:1e:5e:e9:df:50:d1:22:ff:5b:5b:79:ab:f5:
7c:9c:52:33:32:28:9e:5a:6c:0a:e9:d5:49:d5:72:56:ca:bd:
09:58:32:7c:e0:02:1f:b5:88:ad:03:02:9a:5b:8f:b5:ed:56:
c9:d3:ef:78:62:ec:3a:9c:d0:94:25:b9:5b:04:58:04:24:eb:
e3:ca:05:d5:47:6b:06:1d:9e:5b:f8:e1:69:5d:27:dd:41:3f:
e0:fb:f2:c1:f7:fb:71:73:9f:82:c5:ce:69:47:97:cc:65:cf:
c4:1d:cc:c3:dc:0c:7c:c1:9e:a8:e7:7a:6a:98:96:c5:31:bb:
0d:ec:dd:1f:f1:db:0e:a8:21:84:30:79:87:b4:e8:64:7d:28:
fa:9a:da:c1:97:3d:b5:23:12:cb:4e:7a:01:ac:e9:53:38:e1:
a7:f1:de:7b:88:40:b2:4f:82:2b:5e:1c:c3:20:19:4c:2d:a8:
65:6a:a6:0e:ff:f4:16:63:68:04:58:15:2c:23:b9:70:07:71:
7d:d5:15:f0:36:78:a9:db:17:4f:27:5e:d7:44:cf:c1:89:7c:
96:b6:4e:9a:c8:e5:2a:cc:e6:b2:02:fa:ef:72:8e:f6:a4:2d:
2f:d9:12:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:48:38 2025 by rpki-client