Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/9318efc3-4d3a-413f-86c6-169a71d2eccb.roa
File: 9318efc3-4d3a-413f-86c6-169a71d2eccb.roa (raw, json)
Hash identifier: EdAJEwGHfOQTuIBIbNPmAVGsWznFbpGgWEgDuuz+iEo=
Subject key identifier: 06:0B:2B:F0:E1:7B:EB:D9:A6:8A:39:36:3E:B7:1F:F1:C3:FD:C7:38
Certificate issuer: /CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d
Certificate serial: 34CA6C68DCE3D9C7D08BF662AA6FD13748E01E67
Authority key identifier: 7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/9318efc3-4d3a-413f-86c6-169a71d2eccb.roa
Signing time: Sat 22 Mar 2025 00:10:32 +0000
ROA not before: Sat 22 Mar 2025 00:10:32 +0000
ROA not after: Sat 26 Apr 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2605:b140::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Apr 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:ca:6c:68:dc:e3:d9:c7:d0:8b:f6:62:aa:6f:d1:37:48:e0:1e:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d
Validity
Not Before: Mar 22 00:10:32 2025 GMT
Not After : Apr 26 23:59:59 2025 GMT
Subject: CN=b0dbbb6a-5472-4b68-ae4d-401518603039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9e:1d:91:c8:01:20:50:58:7b:21:08:64:51:
94:86:18:c9:f9:98:74:29:48:5b:4b:29:05:65:91:
e6:1b:01:c7:b4:04:f6:97:3e:db:e8:97:5d:7b:7e:
66:36:7a:f1:e9:36:04:2b:88:54:17:d6:f4:81:f6:
63:eb:3c:dd:9f:63:49:cc:77:48:0b:78:f2:38:03:
ed:d9:bb:fa:92:91:42:2a:49:42:52:e2:18:7e:a2:
e1:3c:9e:c0:13:ca:4f:cc:4b:34:9f:5c:f7:55:d7:
f9:16:fd:77:a7:29:ce:98:27:ce:29:3c:d3:b2:6e:
56:21:32:b7:0e:19:fc:b1:fa:89:c6:e6:18:1a:12:
a8:93:0b:3e:6b:df:2a:1c:18:87:ca:c9:0a:6f:c8:
33:8c:4a:d4:c2:e3:4d:da:01:a1:16:10:19:19:b3:
e8:64:24:a0:f8:ae:f7:a9:4d:b2:bd:19:39:61:72:
43:13:44:8f:a1:a5:51:00:e0:1c:81:6d:71:7e:e3:
4d:11:80:7d:8f:c3:04:4c:cb:40:91:ac:e3:0f:9d:
49:b0:c6:0c:05:31:af:36:f2:3e:9c:41:06:de:51:
02:d4:04:b2:2e:cb:1c:c7:19:68:c1:cd:36:57:5f:
0d:c4:80:e0:d5:1b:8c:88:40:8e:3c:6b:90:4f:66:
3b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:0B:2B:F0:E1:7B:EB:D9:A6:8A:39:36:3E:B7:1F:F1:C3:FD:C7:38
X509v3 Authority Key Identifier:
keyid:7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/9318efc3-4d3a-413f-86c6-169a71d2eccb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:b140::/32
Signature Algorithm: sha256WithRSAEncryption
6a:68:b3:d9:5e:e8:51:86:86:70:f3:45:38:31:e4:26:7e:8e:
dd:36:80:e2:b4:6d:ec:7e:b3:ad:d7:6f:1d:f6:30:f6:d2:f9:
8c:b7:41:01:ea:36:96:f0:da:f7:9d:40:38:5f:6d:ff:62:3d:
b5:b2:81:2c:1d:6b:e6:64:59:46:22:02:fc:b6:06:d3:b9:0d:
d7:0d:75:40:f7:1e:ee:49:82:8c:b9:67:e4:7f:52:58:43:6c:
cc:9a:50:a3:86:d5:08:6b:63:76:b5:a5:88:bb:d2:ac:a5:22:
5e:73:9f:c1:68:da:cd:74:a8:21:e8:9f:6a:36:1d:8e:cd:9e:
f4:de:f2:c6:ee:a8:e1:57:0a:c4:18:56:95:c0:98:1d:cc:db:
f7:1f:0e:9e:75:d7:3c:4d:2a:49:68:c8:bd:fe:0a:d7:fe:29:
f2:1d:d6:a5:89:56:95:86:51:ca:04:15:e8:e1:98:bd:46:12:
b0:a4:5c:ae:8d:19:80:f9:b0:6d:df:25:77:3f:36:d8:a7:44:
57:c4:67:e4:39:b2:85:a3:6c:74:c4:75:c6:63:60:39:f9:a7:
65:21:68:b1:e6:c0:44:98:88:50:bc:29:6a:09:46:12:dd:52:
0f:2a:2d:10:0f:28:42:b9:4d:88:c5:ae:2e:d2:9c:91:32:6b:
b3:90:a5:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 23:46:59 2025 by rpki-client