Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3ab011af-fada-4c8e-b056-1a9dfdb769da.roa
File: 3ab011af-fada-4c8e-b056-1a9dfdb769da.roa (raw, json)
Hash identifier: vuC9vWBJoplmS30/wTVMNFQeO6byLJYbbOsiX+vLWkY=
Subject key identifier: 57:3F:FC:F6:7E:69:E6:BC:20:79:C3:42:9C:F3:E1:58:13:CB:CD:30
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 09456CBC19A85C33E904EC00096102DA8F2AC0BD
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3ab011af-fada-4c8e-b056-1a9dfdb769da.roa
Signing time: Tue 01 Apr 2025 00:31:44 +0000
ROA not before: Tue 01 Apr 2025 00:31:44 +0000
ROA not after: Tue 06 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 52.119.224.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Apr 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:45:6c:bc:19:a8:5c:33:e9:04:ec:00:09:61:02:da:8f:2a:c0:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Apr 1 00:31:44 2025 GMT
Not After : May 6 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:58:92:ca:f2:2a:17:46:8b:1b:e6:8c:c8:49:
2d:df:53:ed:c1:5a:7b:bb:a6:d0:8c:48:ca:d1:54:
33:22:a2:fc:b6:83:26:81:74:65:55:6f:ea:6c:36:
07:c1:93:62:6d:48:9b:e5:fa:45:ec:73:ab:f6:b5:
f5:cf:2d:be:02:70:4c:67:f4:2f:fa:75:82:d7:f2:
d3:d0:bd:cc:fd:3e:19:0c:fc:c5:35:6f:7c:d4:0e:
df:ba:60:c5:7b:1c:ae:bd:5f:9e:bd:c2:84:21:9a:
25:8d:92:89:63:e9:26:eb:7d:75:a6:40:ba:a4:94:
14:7c:c6:24:41:6d:70:3f:54:53:ca:c2:bf:05:40:
89:bf:63:52:26:a2:00:b1:b8:2c:88:a9:ab:70:f0:
1a:01:81:44:df:a6:78:06:21:52:97:5a:e6:b2:ee:
12:b7:f7:78:18:01:4c:2d:9f:af:ba:e4:31:f7:ec:
96:44:c9:62:e5:b4:4b:5f:e6:0a:28:29:0e:f8:9d:
cd:53:f1:98:c8:fa:43:a4:65:61:ec:04:bf:3b:2d:
96:77:b1:29:44:14:a3:94:37:41:ff:ca:e1:cb:4e:
34:60:34:f5:58:74:0f:1b:0b:aa:6b:98:3a:bc:bc:
49:ad:d4:23:76:24:71:46:bf:09:cd:10:29:93:1b:
65:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:3F:FC:F6:7E:69:E6:BC:20:79:C3:42:9C:F3:E1:58:13:CB:CD:30
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3ab011af-fada-4c8e-b056-1a9dfdb769da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.119.224.0/21
Signature Algorithm: sha256WithRSAEncryption
b1:ba:00:9a:e2:e8:e4:da:cd:ae:7f:e0:c5:ad:1b:67:06:66:
52:e5:13:10:bb:80:8e:de:62:74:4c:11:0c:5b:ea:21:d5:7c:
f0:9a:91:61:35:09:bf:8c:2d:e2:2d:47:f9:e7:af:b6:bd:a6:
8e:c8:f3:07:d2:97:6d:92:6c:de:9d:c7:81:dc:b8:e7:de:a2:
4a:f4:4b:a5:ab:bc:53:40:f8:7c:7f:21:09:29:54:93:66:a0:
5d:e9:67:92:b7:e9:59:d5:82:82:5d:28:05:38:93:95:b4:8b:
5b:75:86:31:95:16:28:5a:44:0f:5b:d5:fb:97:fb:d9:10:24:
6e:f5:bb:56:61:71:bc:2c:0e:f6:c2:fb:2c:12:ce:70:6d:36:
47:00:20:55:8e:ec:31:90:d5:95:57:ae:4a:02:1a:55:09:75:
51:6c:c7:ff:18:4b:f2:c1:85:99:a1:47:a2:fe:4f:44:e0:fe:
99:af:df:5f:0d:da:1a:12:19:19:c1:2e:c9:12:bf:8e:9a:71:
1f:b0:89:74:ec:92:65:3a:73:28:55:37:37:b7:a4:10:41:61:
4d:8c:0d:51:24:da:97:e0:32:25:6e:d7:4e:d3:7f:58:d9:3a:
48:96:23:41:db:a7:4c:cf:43:96:f9:8c:2c:b9:33:0f:9e:f2:
22:2e:4e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:16:05 2025 by rpki-client