Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/075f3a49-ab54-4fb2-a9ce-1d066c7d8d47.roa
File:                     075f3a49-ab54-4fb2-a9ce-1d066c7d8d47.roa (raw, json)
Hash identifier:          Rqysmz7P5sOQ/EAaoK3bjC3zkE5XlHGNGGvIbMGStpY=
Subject key identifier:   AF:F4:8B:C1:39:9E:A7:D3:50:5A:70:82:76:AA:45:CD:2E:C7:D6:16
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7455D22DAB719005F4C4A77A4C0301BB8BAFFACB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/075f3a49-ab54-4fb2-a9ce-1d066c7d8d47.roa
Signing time:             Wed 28 May 2025 00:21:30 +0000
ROA not before:           Wed 28 May 2025 00:21:30 +0000
ROA not after:            Wed 02 Jul 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1ffe:8000::/39 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:55:d2:2d:ab:71:90:05:f4:c4:a7:7a:4c:03:01:bb:8b:af:fa:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 28 00:21:30 2025 GMT
            Not After : Jul  2 23:59:59 2025 GMT
        Subject: serialNumber=634471b81ed46838ab3321b789ed3883661d4d8b7d7d8577b0e208de9cf4e0c2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e6:73:cc:8b:72:7f:7d:78:ca:cd:4c:ba:53:
                    f4:cf:ce:cf:c5:0f:67:74:21:dd:05:9b:47:66:09:
                    7a:9d:3b:3c:6f:3e:58:c6:2d:d8:23:1b:ae:ce:34:
                    85:84:33:52:67:f8:ce:c1:a1:8a:6c:80:2a:69:6c:
                    49:16:41:6f:ac:19:7a:cc:70:ce:d9:4b:04:a3:a7:
                    a9:fb:bb:f7:a5:11:c6:34:f3:39:7d:70:82:5c:52:
                    f1:cf:d3:1e:94:6a:38:6c:6a:7b:64:b8:20:b8:e1:
                    ca:ab:17:5b:12:41:1c:30:0e:ab:4e:9d:b7:ad:25:
                    84:66:52:e0:1f:b5:92:a8:dd:f3:8a:69:a5:d7:c7:
                    95:da:ba:a0:6a:44:2f:70:ff:b7:9b:cc:f8:73:0b:
                    c2:d1:c9:82:13:7b:f6:49:e4:e3:dc:4f:d5:b1:03:
                    b8:aa:ec:df:28:c4:00:c1:14:37:84:93:a1:2a:0f:
                    81:03:f6:86:95:64:57:21:cd:02:fe:7e:f6:6a:ff:
                    9a:70:c8:52:f1:31:74:f4:8b:0d:54:25:17:d5:ca:
                    4b:9a:d3:89:93:81:e0:00:63:5a:2e:ce:19:78:6f:
                    96:ca:e7:2e:fb:f5:73:26:08:fa:5f:fa:58:b5:75:
                    df:de:8b:d0:19:43:ef:90:a3:8b:b2:86:3c:fa:54:
                    0a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:F4:8B:C1:39:9E:A7:D3:50:5A:70:82:76:AA:45:CD:2E:C7:D6:16
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/075f3a49-ab54-4fb2-a9ce-1d066c7d8d47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ffe:8000::/39

    Signature Algorithm: sha256WithRSAEncryption
         70:8b:90:43:0e:02:c2:8a:ab:67:0f:ef:99:22:0c:c9:05:ab:
         8d:a0:19:e7:25:10:f4:85:97:96:72:d6:fc:9f:21:bc:f2:82:
         c9:5f:b8:ad:6f:af:53:6e:8d:cc:8f:ef:e7:a8:bf:b2:c0:db:
         d6:02:b7:a1:e5:58:d4:de:9b:ab:6d:d8:52:21:4c:0e:94:10:
         02:11:5c:46:d7:19:e9:97:6a:98:d3:18:28:a3:f6:c5:c1:8e:
         23:40:2a:4d:68:54:eb:01:9c:a2:c1:bd:ef:80:6a:47:80:cb:
         39:2f:6a:d0:8b:75:73:f7:67:cc:38:57:1a:99:e0:f3:7e:ba:
         af:9d:57:aa:ad:a5:96:cb:f4:b3:12:da:6c:3d:22:de:54:45:
         4f:56:70:ff:83:a5:c4:f8:d2:c2:96:65:0b:4b:e2:f4:96:1c:
         26:db:bb:cd:a3:7e:ce:12:eb:ce:c7:2b:d1:4d:ec:f8:23:00:
         62:93:ed:ab:58:97:b1:e6:47:9c:a6:d7:b6:69:00:dd:4d:30:
         d0:16:7b:1d:c2:7e:e3:bb:83:0d:37:8c:dc:ca:a7:db:4b:9e:
         60:bd:40:e3:2f:26:3a:98:a8:1e:a1:2f:6f:8a:b1:0c:ed:9d:
         b4:e9:b6:84:b9:09:26:0a:0d:2d:c4:d5:e7:13:7e:42:03:b7:
         ea:66:40:e1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 1 05:02:16 2025 by rpki-client