Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/191e7ed1-19d9-4097-bbc5-875240f55a22.roa
File:                     191e7ed1-19d9-4097-bbc5-875240f55a22.roa (raw, json)
Hash identifier:          7spfY6vTrL+Z4brPbB0r+QKEdql/kDEiNJ+Ief1oMdQ=
Subject key identifier:   97:E6:08:C9:6B:12:D1:5F:92:18:EE:CB:99:D5:61:77:05:8C:3D:40
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6D1E291394C921B075FD0F90657F3FAF385C11C5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/191e7ed1-19d9-4097-bbc5-875240f55a22.roa
Signing time:             Thu 26 Jun 2025 19:09:15 +0000
ROA not before:           Thu 26 Jun 2025 19:09:15 +0000
ROA not after:            Thu 31 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff3:a440::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:1e:29:13:94:c9:21:b0:75:fd:0f:90:65:7f:3f:af:38:5c:11:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 26 19:09:15 2025 GMT
            Not After : Jul 31 23:59:59 2025 GMT
        Subject: serialNumber=c5969cef81a3d3fb3c6cb7f5a6ed86e43f8da0cfe2910377f1005d149275258f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a6:ad:db:9d:87:49:f1:50:52:1a:59:d0:73:
                    0e:e0:f4:55:b8:0f:1a:c5:21:1b:07:27:72:17:e5:
                    fd:e1:b3:e3:ce:61:2f:58:5b:fd:63:f2:0c:11:d3:
                    29:c6:90:1e:fe:5a:2b:d9:05:4d:da:cb:6b:e4:2b:
                    11:7c:e6:c1:f6:b3:c8:c9:05:e6:71:3f:c7:57:97:
                    48:4b:12:0b:0d:82:ea:8c:8a:80:eb:13:2a:09:6a:
                    89:e6:b7:f4:1a:37:80:79:a2:f2:90:02:c2:2c:f1:
                    da:ac:19:f2:71:03:8e:e9:33:c7:c4:64:79:1e:c0:
                    f6:4a:f6:63:7f:74:60:c5:40:03:22:bd:f4:b2:a7:
                    67:29:63:c6:0a:24:23:b4:fc:cd:95:a3:e4:3e:2e:
                    cd:25:4b:fd:03:1c:8c:14:f3:31:d2:06:a3:4f:18:
                    ac:1a:19:aa:38:de:06:e1:ca:dc:b2:1e:ef:99:42:
                    17:11:2f:57:22:20:a2:bf:55:c8:51:b8:33:6d:03:
                    5f:67:ed:18:86:b7:38:8c:fe:f2:06:48:21:9c:75:
                    b2:76:b1:f7:3d:d7:dd:e5:28:fc:10:89:5b:31:0b:
                    a0:8c:1e:4b:8a:41:76:bc:55:c0:be:bf:5a:11:cc:
                    e6:bb:34:97:fd:77:5c:8a:51:6f:45:b6:f7:19:72:
                    2c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:E6:08:C9:6B:12:D1:5F:92:18:EE:CB:99:D5:61:77:05:8C:3D:40
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/191e7ed1-19d9-4097-bbc5-875240f55a22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff3:a440::/46

    Signature Algorithm: sha256WithRSAEncryption
         0d:67:fe:3f:1d:87:ec:3a:34:41:18:75:9a:66:5c:ed:15:82:
         58:66:51:ea:40:dd:f7:a2:84:f2:dc:ee:d4:ae:a3:49:b4:6d:
         67:4f:28:49:9d:0f:d6:3d:03:c5:d7:7c:90:16:02:dd:b3:e3:
         dc:9d:68:e2:83:a3:8e:19:b1:5c:c1:64:75:a3:3c:b6:97:bb:
         f9:b3:bf:d0:ee:04:83:d2:3a:c3:a6:cb:ba:7c:d7:de:53:2b:
         b5:82:9a:b2:ce:ed:56:66:63:45:d5:93:a1:f4:33:ae:f9:c9:
         cd:6b:30:c1:dd:29:9b:87:0a:e9:50:21:c9:98:e5:ac:63:0b:
         50:84:86:4d:18:0b:8e:84:ae:b3:78:c1:29:63:23:a1:3f:2a:
         1f:c2:6b:a2:cd:d4:54:d6:2b:37:54:fe:19:54:d9:c2:b9:51:
         80:3f:d2:71:34:ed:a0:bd:04:83:41:45:c5:9e:f6:a5:8d:1b:
         79:07:68:c5:46:86:7e:4a:d3:88:93:12:7c:32:c7:2f:c2:88:
         84:bf:71:bb:18:5d:9a:c2:98:c9:cc:fc:73:de:92:24:7b:ca:
         54:62:17:f2:af:6b:69:6b:6e:29:66:1d:eb:5f:c7:ae:36:d0:
         77:80:c6:cd:b4:e9:06:d0:4a:ad:5a:ea:86:12:d0:c3:c9:d9:
         69:06:ee:7e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jul 1 01:22:51 2025 by rpki-client