Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3f073e6c-f4cd-45c6-8dc7-838b78d05ee0.roa
File:                     3f073e6c-f4cd-45c6-8dc7-838b78d05ee0.roa (raw, json)
Hash identifier:          PJysYeHrmmbYgAFaqcQ1m3Nm7tySSvmkxIwGco0KRq8=
Subject key identifier:   87:E0:C6:6A:33:E1:E2:56:E8:92:49:79:DF:D3:BF:5C:65:A9:9A:3D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7E63C64B85A580FA548232EAEDBB08A4837BB3E9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3f073e6c-f4cd-45c6-8dc7-838b78d05ee0.roa
Signing time:             Mon 19 May 2025 18:30:32 +0000
ROA not before:           Mon 19 May 2025 18:30:32 +0000
ROA not after:            Mon 23 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f1c:8000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:63:c6:4b:85:a5:80:fa:54:82:32:ea:ed:bb:08:a4:83:7b:b3:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 19 18:30:32 2025 GMT
            Not After : Jun 23 23:59:59 2025 GMT
        Subject: serialNumber=19685bf4055b7c4f5f5cbe16e201a50fdc3e857cdbcbc3941a71ab01cdc83866, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c2:39:d2:79:90:c8:4f:0c:bb:68:83:26:36:
                    a8:9c:7f:94:41:54:d3:0a:95:40:af:8f:e2:ae:00:
                    02:33:12:17:87:39:1b:fd:df:28:15:45:0f:f8:0c:
                    91:90:ca:37:f3:50:84:ab:8c:01:19:43:13:b1:d7:
                    d7:76:22:87:0a:54:ff:51:48:16:61:ce:1d:5a:ad:
                    1f:ae:ad:28:d4:3b:01:ce:fd:70:64:0f:ec:58:97:
                    bf:f7:18:fe:38:48:75:fd:fe:53:78:81:7c:58:45:
                    7c:fa:cf:20:01:24:94:4f:ef:75:27:01:68:57:21:
                    26:74:cd:ef:a8:68:bd:d8:52:bf:38:53:5a:32:b2:
                    6c:24:77:93:bd:7c:0d:3f:5d:1b:c9:19:5a:4d:8e:
                    cc:a4:c0:96:19:3c:66:8f:83:30:cf:c7:8d:1e:51:
                    a5:b1:ca:4d:f6:f6:ab:f4:25:e2:0a:cc:cd:47:c9:
                    89:82:6b:17:bf:da:34:e7:2d:29:a2:b6:4b:c6:a1:
                    13:bc:9f:c7:61:c6:e1:8a:a7:ec:be:2a:24:93:98:
                    24:c8:33:ae:1d:47:d0:2f:6f:88:cf:65:53:47:22:
                    93:d2:21:51:17:82:f3:48:53:5e:bf:3e:bd:3b:b3:
                    c0:8a:2d:ec:29:ba:4b:8c:54:a7:96:ab:47:47:77:
                    55:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:E0:C6:6A:33:E1:E2:56:E8:92:49:79:DF:D3:BF:5C:65:A9:9A:3D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3f073e6c-f4cd-45c6-8dc7-838b78d05ee0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f1c:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         7a:2a:90:29:0a:aa:ab:f2:6b:61:ff:8c:bf:33:78:b7:07:d1:
         e3:db:85:89:40:be:c0:10:ea:14:48:97:8b:6a:4c:8a:39:10:
         d0:34:5e:f8:91:b8:4a:cb:77:65:d3:23:d9:78:ec:f9:7a:24:
         3d:43:32:73:9c:e5:87:ef:66:a0:6b:1e:7b:fd:fe:8f:7d:ec:
         b9:b8:2c:18:71:31:c9:41:95:2d:15:d2:88:bf:ea:c6:bb:60:
         8b:05:e6:5b:b4:72:40:45:19:4b:ea:08:e1:bf:13:e8:cd:b4:
         08:98:e9:1f:4a:65:06:94:07:7c:3b:69:05:a2:94:f2:15:e2:
         80:5f:e6:76:d8:98:a1:4d:3e:8c:eb:34:31:ae:7f:86:60:d1:
         20:df:a8:83:ca:25:bc:cb:f0:81:d5:ed:46:2c:6f:47:de:b7:
         40:6b:91:14:f7:a1:86:62:4a:2b:46:e6:31:0f:9a:03:5a:22:
         57:e1:27:7d:25:78:2d:77:82:c8:41:de:17:b2:c7:52:d6:21:
         1c:c7:23:95:80:97:2d:e5:8b:49:7c:1b:aa:e0:91:c0:01:49:
         96:bc:f5:d2:11:e2:cf:64:5d:27:4e:ec:93:26:a0:da:89:14:
         f4:3a:ea:21:7b:78:c1:2e:36:bd:fe:ca:fd:c7:2a:98:a3:7f:
         97:66:b9:0a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 1 04:24:14 2025 by rpki-client