Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/766f6db4-0434-4c37-af14-495675b35002.roa
File: 766f6db4-0434-4c37-af14-495675b35002.roa (raw, json)
Hash identifier: 6zPWD0omEym1GlxB5MmFv9OJBsIHhNml1BPWYiIF5NI=
Subject key identifier: C3:B6:9C:45:1D:8B:3F:94:33:E1:16:5D:D8:F7:23:D3:44:C1:9B:77
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 26D01A91D4C816798A4A0BCD680FDEA4945E7E8D
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/766f6db4-0434-4c37-af14-495675b35002.roa
Signing time: Sat 22 Mar 2025 00:30:17 +0000
ROA not before: Sat 22 Mar 2025 00:30:17 +0000
ROA not after: Sat 26 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 15.230.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:d0:1a:91:d4:c8:16:79:8a:4a:0b:cd:68:0f:de:a4:94:5e:7e:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Mar 22 00:30:17 2025 GMT
Not After : Apr 26 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d4:4c:19:3f:32:e5:b7:79:cb:11:67:a8:80:
ec:66:1d:25:53:ef:7f:28:ee:b1:03:7c:4a:20:59:
c4:ca:3c:f8:49:3a:39:dd:60:b8:ba:0b:5d:5f:17:
2e:19:69:33:15:f5:85:b7:f2:d0:8a:4b:89:48:ea:
1d:75:5b:b8:fb:45:c3:c8:2d:35:18:0d:85:2d:5e:
4a:22:50:2d:3a:66:14:d5:ee:3e:03:68:29:4c:16:
55:2a:94:5f:f6:e2:92:da:65:c0:a3:1f:e3:0b:70:
17:68:17:94:17:2f:0f:1d:d8:8e:5b:58:66:bd:7f:
64:11:4a:87:33:c6:2b:9b:c3:42:60:d4:82:05:3c:
b0:03:c7:d8:09:a4:1a:ab:d6:e0:13:2a:a4:be:21:
b3:ca:a7:13:b4:83:64:aa:80:5a:c1:ba:2d:c8:8a:
70:4a:d0:8b:54:fe:41:aa:7e:8c:2a:1a:8c:03:f2:
84:f6:c2:5f:c6:2b:09:05:33:a1:6f:e6:c5:50:85:
48:c0:a6:04:fc:f1:45:7b:c0:75:18:c6:0e:1f:aa:
ab:c8:0f:ff:89:8a:e2:51:65:e9:c7:7b:95:ae:d2:
05:52:fc:33:6d:be:36:1f:14:a6:ff:3e:32:6b:96:
ff:90:fe:f4:8d:d0:8c:de:3d:61:d4:be:a2:6a:a1:
c5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:B6:9C:45:1D:8B:3F:94:33:E1:16:5D:D8:F7:23:D3:44:C1:9B:77
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/766f6db4-0434-4c37-af14-495675b35002.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.230.145.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:a7:fb:12:87:85:bc:05:25:da:b1:2e:12:41:76:1e:83:a8:
96:b0:4c:7c:d0:a6:6d:60:60:2a:45:08:10:14:5a:ab:4b:35:
54:ab:80:57:58:dc:eb:20:36:2b:bd:a8:a4:bd:aa:49:18:a9:
d7:74:90:39:3b:41:82:59:80:32:c4:bc:9a:ab:3d:74:8a:5b:
24:58:a4:c5:43:db:67:2a:a5:3f:23:6a:94:6a:32:d8:09:78:
84:2e:f1:ff:d4:91:ed:e0:3e:80:77:ac:8a:3b:57:88:c2:d2:
75:97:ba:13:b5:3f:97:7e:f7:92:8c:1e:a2:b7:a4:98:f0:3e:
10:ad:80:17:70:7e:09:2d:36:f7:07:89:34:cf:4c:0b:b4:e6:
50:ef:41:a3:c4:19:37:5c:20:b1:6f:3e:02:a5:fb:6c:e5:d3:
de:ea:cd:cf:9e:5b:c9:89:72:7b:96:aa:c5:15:2f:2a:f5:fd:
b5:67:2c:d8:f7:18:54:b5:0c:23:b2:68:0b:85:e5:9a:54:21:
76:dc:93:c1:ec:45:12:8a:1f:b8:96:84:ef:3c:fa:a4:80:19:
1e:b8:c2:92:f5:6d:d8:fa:b9:27:04:bd:1b:97:72:a2:f6:cb:
02:1a:ce:d4:d0:3d:ec:7b:e8:eb:b7:ef:ff:b8:2c:1e:73:54:
b4:63:b1:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:48:50 2025 by rpki-client