Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/e9eb1b5e-aefe-426d-914f-f7d5796460c4.roa
File: e9eb1b5e-aefe-426d-914f-f7d5796460c4.roa (raw, json)
Hash identifier: 9agM6N73beenOe0hJ+HOM1dkveUZc3knDq3JMeo1u54=
Subject key identifier: 66:CC:6D:83:6C:DD:C7:1C:4D:48:E0:E1:85:D2:F7:48:4F:7C:BF:AA
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 565D89E9E84F01139DE5E9AB87731199A4E21A3C
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/e9eb1b5e-aefe-426d-914f-f7d5796460c4.roa
Signing time: Mon 31 Mar 2025 18:30:07 +0000
ROA not before: Mon 31 Mar 2025 18:30:07 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2631::/24 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Apr 2025 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:5d:89:e9:e8:4f:01:13:9d:e5:e9:ab:87:73:11:99:a4:e2:1a:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Mar 31 18:30:07 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:46:df:e6:ed:74:0a:c7:42:64:2a:7a:05:f1:
a7:fc:c4:ec:2a:3c:97:b6:40:4b:66:8d:bf:de:3c:
8f:bc:91:30:34:ee:37:99:f1:99:eb:69:27:1c:87:
e3:02:90:58:39:44:de:5f:f1:ab:0a:b2:9f:79:19:
cd:54:e6:8f:ab:3b:79:49:50:8f:10:ed:41:f2:98:
06:58:41:10:d5:de:b4:80:6b:68:23:a0:09:30:b5:
c3:6d:eb:d4:42:0c:29:e1:ba:aa:f7:ff:0c:0d:a8:
8c:7d:b7:b7:8c:ed:20:b4:fd:9c:30:4e:bc:82:1e:
d3:2e:07:fd:ca:1f:ce:a3:a9:e5:7e:3c:3d:4e:5d:
bc:36:3c:12:50:3d:8e:8c:ce:8b:11:14:aa:a7:75:
6a:cf:2c:fc:7b:15:38:a9:fa:a2:82:03:8f:fc:21:
4e:fa:83:63:65:70:a6:9d:d6:f8:63:b0:5c:92:4d:
9d:c4:07:30:e7:08:96:b2:61:c2:29:89:cd:fd:26:
ac:50:f4:48:6a:c6:62:20:ac:22:ef:6d:42:b3:7e:
6b:86:0d:97:fc:df:78:a4:d4:64:4a:0c:1e:e9:8d:
5f:b6:dd:a2:41:e8:7e:61:f8:98:22:3a:e7:bd:da:
7f:5a:ce:82:7b:2f:20:c7:ef:24:17:a0:bf:e9:13:
1f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:CC:6D:83:6C:DD:C7:1C:4D:48:E0:E1:85:D2:F7:48:4F:7C:BF:AA
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/e9eb1b5e-aefe-426d-914f-f7d5796460c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2631::/24
Signature Algorithm: sha256WithRSAEncryption
79:c1:e9:cf:a7:d8:a0:2e:6d:19:f2:18:f9:36:8f:87:f8:5e:
4a:28:9b:29:e1:71:cf:08:7e:37:41:e3:fe:51:90:0f:44:a4:
93:be:9f:7c:b1:cb:0b:88:81:2b:f2:c0:ba:6f:13:48:92:a6:
82:dc:42:62:39:a6:b3:14:8b:a0:6a:38:c3:d5:60:cc:e9:5b:
f4:63:9b:7e:15:75:e1:99:88:43:ff:6d:13:f9:2a:b5:9a:34:
be:1e:8c:02:33:55:54:9d:bb:02:c9:af:be:28:57:f9:12:05:
ac:1e:89:49:dd:6a:80:1f:cf:e3:c1:77:5e:00:85:a7:e9:b7:
83:72:a9:02:31:7a:7d:a3:b0:5e:59:c6:92:13:67:2b:50:32:
43:68:1f:ec:14:91:6d:bd:fa:48:3b:a0:4c:2e:9b:61:97:06:
df:ea:b1:cd:9a:58:65:b3:03:16:77:6d:b8:ec:33:45:f9:7d:
db:3c:9e:d6:5e:83:8e:3d:6d:f5:24:5b:f5:68:d6:51:d5:03:
1a:2f:db:46:ab:26:5c:08:af:2c:57:01:00:ba:19:98:ef:88:
e4:c9:35:9f:8f:18:26:52:59:4b:7c:8e:41:87:15:36:66:a2:
0f:ab:d2:e9:e8:f1:53:d7:ec:82:0e:f4:af:b9:97:1e:c9:c3:
b1:96:ff:18
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUVl2J6ehPAROd5emrh3MRmaTiGjwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh
MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwMzMxMTgzMDA3WhcNMjUwNTA1MjM1OTU5
WjB6MUkwRwYDVQQFE0BiMTFhMDdkYzRkZDE1MjA1MzQ2NDI5YjY2MGI5ZDMxYzll
NmY5MGNkZDZlMTE0OTNjNDk1Y2RjNWE1NDAyNGFhMS0wKwYDVQQDEyQ4Y2Q4NDQy
Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC+Rt/m7XQKx0JkKnoF8af8xOwqPJe2QEtmjb/ePI+8kTA0
7jeZ8ZnraScch+MCkFg5RN5f8asKsp95Gc1U5o+rO3lJUI8Q7UHymAZYQRDV3rSA
a2gjoAkwtcNt69RCDCnhuqr3/wwNqIx9t7eM7SC0/ZwwTryCHtMuB/3KH86jqeV+
PD1OXbw2PBJQPY6MzosRFKqndWrPLPx7FTip+qKCA4/8IU76g2NlcKad1vhjsFyS
TZ3EBzDnCJayYcIpic39JqxQ9EhqxmIgrCLvbUKzfmuGDZf833ik1GRKDB7pjV+2
3aJB6H5h+JgiOue92n9azoJ7LyDH7yQXoL/pEx/7AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUZsxtg2zdxxxNSODhhdL3SE98v6owHwYDVR0jBBgwFoAUasw+faLnbZkR
D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00
NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1
Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx
MTI5ODY2MzYyL2U5ZWIxYjVlLWFlZmUtNDI2ZC05MTRmLWY3ZDU3OTY0NjBjNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4
LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAC
MAYDBAAmMQAwDQYJKoZIhvcNAQELBQADggEBAHnB6c+n2KAubRnyGPk2j4f4Xkoo
mynhcc8IfjdB4/5RkA9EpJO+n3yxywuIgSvywLpvE0iSpoLcQmI5prMUi6BqOMPV
YMzpW/Rjm34VdeGZiEP/bRP5KrWaNL4ejAIzVVSduwLJr74oV/kSBaweiUndaoAf
z+PBd14Ahafpt4NyqQIxen2jsF5ZxpITZytQMkNoH+wUkW29+kg7oEwum2GXBt/q
sc2aWGWzAxZ3bbjsM0X5fds8ntZeg449bfUkW/Vo1lHVAxov20arJlwIryxXAQC6
GZjviOTJNZ+PGCZSWUt8jkGHFTZmog+r0uno8VPX7IIO9K+5lx7Jw7GW/xg=
-----END CERTIFICATE-----
Generated at Thu Apr 10 01:55:48 2025 by rpki-client