Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/887f4922-2c97-4526-af9a-b67399553315.roa
File:                     887f4922-2c97-4526-af9a-b67399553315.roa (raw, json)
Hash identifier:          I2uEt6tPLSBBUyNfv16oDG40crBMg1W78irEir0H/Tc=
Subject key identifier:   58:21:05:C6:C3:48:89:59:5C:30:A5:56:EF:CF:0F:16:40:BA:20:D8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7EBC0D225B56D8046FDF256AC450424ACC9F943D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/887f4922-2c97-4526-af9a-b67399553315.roa
Signing time:             Fri 30 May 2025 00:10:35 +0000
ROA not before:           Fri 30 May 2025 00:10:35 +0000
ROA not after:            Fri 04 Jul 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1ffa:8000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:bc:0d:22:5b:56:d8:04:6f:df:25:6a:c4:50:42:4a:cc:9f:94:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 30 00:10:35 2025 GMT
            Not After : Jul  4 23:59:59 2025 GMT
        Subject: serialNumber=9eb9518be2d7f3f84f1ab3cd745f013803c35cbe7a336d81e576ebc8bda60336, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7f:26:ab:57:6e:eb:c7:0a:ea:e1:db:69:07:
                    ac:5b:e8:a1:c5:b6:0e:19:f9:17:5c:b6:b8:6a:41:
                    d8:15:93:02:5e:19:51:36:72:45:90:c3:16:b6:c7:
                    9d:42:ab:9b:14:8c:54:bd:55:ea:e0:89:b4:ee:77:
                    79:70:94:5f:9b:34:4b:4e:38:83:cd:d4:a8:54:b5:
                    88:a0:88:80:31:55:48:13:27:b5:65:70:e9:8c:fb:
                    2f:ec:80:53:7d:2f:5c:ce:4e:78:41:d5:03:e6:22:
                    09:2e:97:9f:4e:c3:e0:9e:d7:52:49:48:da:65:5f:
                    f1:8e:38:4f:ed:54:4f:64:61:5c:c0:8c:cb:52:bf:
                    18:d6:cf:bd:be:27:74:83:00:70:b5:a0:2f:ec:a3:
                    37:a1:66:29:95:4a:8f:04:c6:5e:7d:54:9e:88:22:
                    d8:8a:0c:0d:74:86:18:42:f0:df:93:e6:18:3e:a1:
                    02:09:77:86:14:fa:29:3a:c0:55:5a:f1:b8:55:68:
                    bf:07:d9:62:0f:9f:e9:80:d6:9d:42:47:36:44:c1:
                    a1:7c:24:d4:c2:9f:4b:28:59:3f:b5:47:48:2c:ab:
                    b3:e8:cd:39:00:d4:cb:97:ce:3a:9a:8b:f9:2d:78:
                    85:60:f3:1f:d2:97:82:1a:c2:bd:e1:6b:10:1e:43:
                    30:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:21:05:C6:C3:48:89:59:5C:30:A5:56:EF:CF:0F:16:40:BA:20:D8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/887f4922-2c97-4526-af9a-b67399553315.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ffa:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         93:ea:98:50:fd:5c:4f:14:05:4b:81:05:59:87:f8:82:b1:59:
         d3:83:82:78:ae:ec:57:44:67:5d:72:d0:dd:a3:1a:78:bf:49:
         0b:90:c4:0f:66:47:5c:3c:94:cf:32:65:ef:6e:bb:cd:bb:e4:
         09:cc:f2:64:6c:31:cb:00:b0:b0:f6:bf:72:61:30:84:af:cb:
         08:13:78:da:d6:57:77:ba:9b:9f:a7:2a:aa:07:b9:4f:b4:92:
         40:f2:30:2b:5d:ed:60:bf:b1:a2:d7:14:57:81:35:8b:3d:f7:
         8b:8c:17:03:f7:35:12:23:fe:03:9c:eb:af:b8:e5:d9:c2:0d:
         34:4f:cb:f0:12:42:90:5e:9d:f6:e3:a3:26:5d:9d:84:20:c4:
         fd:1c:8e:86:b8:94:0e:cb:b6:b6:41:14:e9:33:e4:aa:54:01:
         f1:08:ec:15:49:4c:c6:3f:6a:67:c3:b5:48:99:d8:43:78:27:
         ab:ad:3a:4e:d6:3a:8b:3c:e7:a0:40:c6:f5:f8:4d:48:31:79:
         82:a0:25:cf:9a:73:65:de:21:49:ec:65:44:7c:30:b8:9b:69:
         86:97:c3:e4:df:06:fa:a1:64:63:a5:4c:dd:b1:66:04:fc:de:
         89:e9:40:75:b8:2d:c5:11:13:bb:27:34:4a:52:7e:e7:56:e3:
         29:47:ab:e8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 1 05:25:24 2025 by rpki-client