Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/78a425bb-39fe-49d4-86c1-2d84726e43c8.roa
File:                     78a425bb-39fe-49d4-86c1-2d84726e43c8.roa (raw, json)
Hash identifier:          TBuaFG2G0ZZqLd+2e2RelTgwZlraGLoZQhsg08eO7Bk=
Subject key identifier:   17:55:1F:7F:5D:6E:56:D8:C0:B3:5D:CA:CA:A2:B7:AD:C2:AF:AE:8D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5FA4903DFBCAB3099EFDD4F4EC81B1E7E8050395
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/78a425bb-39fe-49d4-86c1-2d84726e43c8.roa
Signing time:             Fri 29 Aug 2025 15:40:57 +0000
ROA not before:           Fri 29 Aug 2025 15:40:57 +0000
ROA not after:            Fri 03 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f16::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:a4:90:3d:fb:ca:b3:09:9e:fd:d4:f4:ec:81:b1:e7:e8:05:03:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 29 15:40:57 2025 GMT
            Not After : Oct  3 23:59:59 2025 GMT
        Subject: serialNumber=48ff91afccce7c2e7c918b10d5eb665969a765b0ab1af7f5720f99ca712f7de6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e3:69:4d:a0:c0:00:79:68:79:23:dc:6a:fb:
                    78:6a:55:0e:c9:16:8f:eb:70:a4:da:ca:02:f1:67:
                    6a:d6:e7:44:b6:27:18:65:bd:06:92:98:30:bd:06:
                    db:af:79:10:2c:87:b5:50:43:74:2b:a0:07:af:1c:
                    25:b3:8c:d9:8f:23:d2:e9:c4:b7:7a:80:dc:6e:46:
                    36:39:22:7e:02:c5:2a:dd:9c:b9:55:56:a3:4f:a0:
                    0d:8f:7f:d9:a8:06:c0:6f:07:15:ff:82:a7:c5:2f:
                    a9:93:27:f1:cc:eb:b3:f2:3d:b9:c4:6d:09:8d:11:
                    30:06:ee:15:21:0d:2b:ca:3f:c0:84:74:fd:42:9a:
                    85:58:4d:b9:41:5f:4a:17:65:5c:d6:dd:7b:17:54:
                    e5:6c:60:bd:1e:0a:c6:ba:d1:8d:c5:43:83:6d:68:
                    63:78:98:ca:13:4c:4d:73:24:67:77:bf:f5:2c:3e:
                    9b:c5:6a:6d:ec:f8:fc:27:4a:27:18:76:fe:4d:26:
                    1b:8c:d8:09:b4:36:8f:0c:58:26:bc:d9:e0:83:f3:
                    20:04:93:74:ce:ba:d0:3f:0b:5b:07:b3:04:39:23:
                    c9:1d:d1:51:0c:99:0f:90:38:4c:e6:75:ea:1a:0d:
                    c6:8d:49:7c:38:32:f6:19:16:ed:d6:43:e5:d0:14:
                    12:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:55:1F:7F:5D:6E:56:D8:C0:B3:5D:CA:CA:A2:B7:AD:C2:AF:AE:8D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/78a425bb-39fe-49d4-86c1-2d84726e43c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f16::/35

    Signature Algorithm: sha256WithRSAEncryption
         32:67:e5:94:92:23:83:59:e1:4a:2c:09:1f:1f:e5:c5:7d:41:
         b3:36:66:03:a8:f8:53:fc:89:2a:61:04:6d:dc:60:64:29:cf:
         36:74:68:90:15:7f:55:9e:d0:24:ac:be:22:bc:2e:61:69:92:
         17:7d:95:18:d1:86:fa:4a:35:48:c5:c5:6d:75:73:8b:f6:e5:
         e2:28:90:99:60:13:4c:dc:3d:ea:d8:a7:59:e0:82:39:81:c7:
         51:6b:55:8d:bf:86:2d:9c:8c:8d:aa:3f:02:b8:2d:f6:79:8a:
         ed:fc:76:79:84:05:5c:8c:f6:4d:21:ab:94:95:6a:c4:08:23:
         b9:7b:35:26:df:9e:10:1a:b0:88:79:22:85:03:2e:89:10:da:
         14:65:70:03:44:3b:9a:b4:f4:49:2e:e9:7f:44:66:91:7c:79:
         58:cd:60:7c:9b:16:b2:2d:b7:29:c0:c3:70:30:67:56:02:41:
         95:3e:9d:78:24:94:fb:b5:dc:61:fa:9a:f5:29:45:83:a0:91:
         ec:00:86:8a:30:f2:1e:fd:34:85:8b:88:3f:ae:08:49:07:20:
         59:5d:ef:fb:61:07:23:f3:1a:02:48:09:c1:d8:9e:53:82:b0:
         5b:ff:16:e0:eb:5e:03:b2:2a:b7:62:a7:7f:e1:ef:2e:87:87:
         1e:e9:88:58
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Sep 6 14:11:59 2025 by rpki-client