Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9d0e00f9-4fe7-42f8-b3f5-8a7ff43c5e5d.roa
File:                     9d0e00f9-4fe7-42f8-b3f5-8a7ff43c5e5d.roa (raw, json)
Hash identifier:          y0kKP3YkuSe1cVpd3S9pn76/pbf6246rja6sK8RyEJ0=
Subject key identifier:   ED:B9:3C:84:12:27:55:CF:67:4F:C4:3A:0A:0D:76:01:E8:67:50:FA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       306942CC900CDC557FFF5D2E233CC79C3FBCD1A3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9d0e00f9-4fe7-42f8-b3f5-8a7ff43c5e5d.roa
Signing time:             Tue 26 Aug 2025 16:41:24 +0000
ROA not before:           Tue 26 Aug 2025 16:41:24 +0000
ROA not after:            Tue 30 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f00:1040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:69:42:cc:90:0c:dc:55:7f:ff:5d:2e:23:3c:c7:9c:3f:bc:d1:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 26 16:41:24 2025 GMT
            Not After : Sep 30 23:59:59 2025 GMT
        Subject: serialNumber=5aea35e247c55be755debb9201c09f2397e984531837b0c6bd6804f968994e1d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:08:f7:be:08:f4:95:04:d4:c1:82:1a:94:cd:
                    b9:c5:d7:16:91:15:f6:c7:b9:b7:cd:bb:5b:fb:5f:
                    f8:d2:62:4d:dd:65:07:83:7f:cd:95:fb:c2:26:1b:
                    0b:f2:02:2b:e6:b9:f4:19:1c:c2:84:c2:46:38:62:
                    2e:66:f2:c0:85:b1:c9:bc:af:c4:64:8c:a7:86:6d:
                    1a:20:48:3f:84:64:4b:ac:1c:bc:f9:88:76:67:8a:
                    20:25:ef:b3:c4:d8:67:f3:c3:c5:30:f7:0d:3d:c7:
                    d9:61:a8:67:c8:e7:a0:1a:49:24:39:23:57:7d:14:
                    71:d8:51:1a:a0:06:4c:98:5e:5f:b0:9c:a0:d3:92:
                    a6:05:12:01:c0:90:9e:43:b6:e4:23:6a:9d:c7:5a:
                    63:36:f5:38:82:68:c3:66:54:49:7f:1d:75:fe:2c:
                    04:cd:6a:ce:cd:cd:23:2f:99:99:e7:57:13:ef:b1:
                    bf:bf:26:f5:96:f4:0e:63:72:54:91:6b:e3:95:74:
                    36:e8:49:b1:4c:f5:08:1d:1c:f8:ce:c3:8d:6e:6f:
                    cb:9a:74:ce:71:20:17:ce:24:97:ff:0a:78:8e:75:
                    ff:13:1c:fc:cc:1f:7a:1d:b1:85:e1:2c:2f:a3:7a:
                    3e:1a:24:63:97:28:99:56:dc:5e:da:3a:34:f8:44:
                    21:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:B9:3C:84:12:27:55:CF:67:4F:C4:3A:0A:0D:76:01:E8:67:50:FA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9d0e00f9-4fe7-42f8-b3f5-8a7ff43c5e5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f00:1040::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:c9:fe:6b:43:2c:8a:69:77:c7:7b:cc:ff:74:71:c2:d5:67:
         64:02:0a:82:f8:26:f8:83:09:4d:28:ef:5d:de:d8:82:62:82:
         ec:99:ff:a8:75:a6:d5:ab:27:50:50:af:72:52:8f:36:b5:02:
         5f:f8:5a:77:11:62:a8:cb:90:3e:8c:c0:6e:a2:2b:12:df:c0:
         82:8f:9c:01:6a:01:31:ae:ce:19:68:c1:44:3d:40:61:57:8d:
         e8:1b:8b:7d:49:30:28:40:25:9d:e4:83:a7:98:df:84:24:d8:
         11:6d:ba:8e:2b:5e:7b:e2:66:4e:7d:41:ff:36:00:e4:ee:53:
         b8:b3:04:0f:62:34:e9:31:6c:a3:c2:85:4c:64:47:8f:fd:43:
         3a:4a:3d:dd:eb:71:37:71:2a:ba:71:f4:67:ce:c0:e7:9c:9b:
         c4:af:16:1b:b5:73:01:b3:6f:8d:b5:c0:70:ff:cd:3b:56:0f:
         1a:59:9a:87:14:cd:50:a5:2d:5b:ad:51:ce:5c:03:c4:d8:08:
         e1:1a:9e:58:fa:97:2d:cd:a8:cb:98:4b:4d:98:88:e2:f0:15:
         f9:c1:71:46:50:61:28:ce:48:04:23:0c:4b:53:26:a6:b9:84:
         0b:1d:49:10:d2:43:fc:34:9c:27:c2:28:fd:0e:28:af:27:89:
         36:7d:05:10
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Sep 6 14:08:30 2025 by rpki-client