Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6160b1d4-acc7-4e02-bb6e-382d0ec230f5.roa
File:                     6160b1d4-acc7-4e02-bb6e-382d0ec230f5.roa (raw, json)
Hash identifier:          rgx+8iKnxS8yi0PLl3ODAz5rGr1tJWyyN+4HBR/eS/A=
Subject key identifier:   81:10:A7:3C:E7:61:58:92:EA:23:42:6B:5A:F7:C5:62:45:2F:CF:61
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0A4A24E1AF322ABA5A8719486F9567A12BA7C2AA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6160b1d4-acc7-4e02-bb6e-382d0ec230f5.roa
Signing time:             Fri 28 Mar 2025 15:50:25 +0000
ROA not before:           Fri 28 Mar 2025 15:50:25 +0000
ROA not after:            Fri 02 May 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        2600:1ffb:5000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 17 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:4a:24:e1:af:32:2a:ba:5a:87:19:48:6f:95:67:a1:2b:a7:c2:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Mar 28 15:50:25 2025 GMT
            Not After : May  2 23:59:59 2025 GMT
        Subject: serialNumber=10c89a7242620a4ad4d7228f8bcf217d535a80727948ec64aada522d0c3ad515, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b0:0e:44:33:1e:ed:1e:ac:76:d8:9f:b9:41:
                    6c:e4:c8:29:6b:40:27:bd:84:d0:cc:be:2c:b8:f8:
                    37:7b:c2:e0:fd:0a:90:40:9c:f1:25:9f:5c:da:82:
                    96:ef:a7:ca:59:1e:f6:ba:d0:77:91:26:4e:86:54:
                    8b:06:9f:c9:c9:70:65:38:41:fe:6b:77:95:71:ee:
                    67:ec:89:98:7f:ae:ff:8f:84:0c:38:9a:e7:8a:9e:
                    ba:d8:d9:0c:f6:b3:47:d6:b3:3a:74:12:69:90:33:
                    a0:f0:d9:e8:db:c1:b5:96:cd:0e:0d:9b:aa:fb:2b:
                    2d:f6:20:d1:c5:e2:c8:a3:c9:32:d0:51:1f:1c:1c:
                    b7:8d:79:05:99:47:dd:cf:6c:36:f6:2d:a0:98:ac:
                    b6:72:03:b3:b2:e8:7d:78:66:d3:07:e9:57:85:6c:
                    7e:0c:81:04:8f:40:fd:36:43:44:fe:5b:da:f9:89:
                    fb:f3:30:e9:89:d4:12:be:ae:8a:90:51:a1:f0:83:
                    0d:ea:c6:86:0a:58:31:ef:1e:03:f3:a6:9d:d7:c9:
                    c1:52:c6:63:44:eb:e6:7d:58:1b:41:53:f4:2f:26:
                    58:13:26:8c:3a:1d:45:93:bb:b0:ef:81:d4:a3:74:
                    31:f3:23:f2:ac:e9:d0:06:e0:d5:80:a1:62:e7:e3:
                    e9:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:10:A7:3C:E7:61:58:92:EA:23:42:6B:5A:F7:C5:62:45:2F:CF:61
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6160b1d4-acc7-4e02-bb6e-382d0ec230f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ffb:5000::/40

    Signature Algorithm: sha256WithRSAEncryption
         af:49:76:53:36:26:2b:09:e0:bc:53:98:82:9c:56:83:90:18:
         be:83:14:86:ea:fc:f7:b7:ef:f3:1d:be:3d:49:90:ed:53:b3:
         c8:c8:3c:9a:d9:c8:02:68:3a:29:65:34:15:e3:5c:aa:49:06:
         48:7d:63:c8:01:dc:1b:b4:fd:db:86:74:7c:4c:33:2c:c9:04:
         53:e2:a7:28:91:7c:8c:b9:22:67:a6:56:2b:fe:2d:1d:1e:f9:
         1a:cb:11:1f:a3:8f:12:7a:e7:72:05:a9:7a:1f:83:b7:94:59:
         7d:0d:bf:8d:cd:15:84:aa:cf:b8:06:43:bf:7c:2d:50:e4:cc:
         cd:34:61:e9:70:c5:66:ef:5a:65:92:6c:cd:6a:96:01:74:5d:
         a7:9f:9b:aa:a5:54:57:e5:24:53:a0:3a:d7:ef:98:62:27:75:
         95:0e:71:cd:4a:0b:04:7e:89:9a:78:f8:86:42:3b:13:e0:b3:
         16:24:84:7e:1f:ec:bd:c4:ac:80:1e:7c:44:d5:cd:66:4c:e7:
         cf:57:d3:35:2e:9a:57:99:32:be:c1:4b:4b:a5:05:df:85:bc:
         85:4e:16:3c:85:a4:fe:a8:96:d3:a0:3a:26:61:7a:19:a8:7b:
         87:d0:22:00:1f:cb:6a:7d:f0:13:a0:fc:c6:cc:97:2d:ef:01:
         2d:40:02:56
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Apr 16 16:46:50 2025 by rpki-client