Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/016a5fc6-f8fc-4320-9c8e-fec0cfd5a306.roa
File:                     016a5fc6-f8fc-4320-9c8e-fec0cfd5a306.roa (raw, json)
Hash identifier:          w7c1dybgnDYgRBw0bEe3vkGxR+QCnNAH8Lvx3IU+wtY=
Subject key identifier:   1A:F1:6A:EF:F4:FA:4F:5E:82:93:CA:4E:5A:AB:C8:C9:91:EA:28:34
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       58501E50B45903677E6D03CEF50C60353AB297FA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/016a5fc6-f8fc-4320-9c8e-fec0cfd5a306.roa
Signing time:             Sat 16 Aug 2025 00:21:30 +0000
ROA not before:           Sat 16 Aug 2025 00:21:30 +0000
ROA not after:            Sat 20 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f10::/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:50:1e:50:b4:59:03:67:7e:6d:03:ce:f5:0c:60:35:3a:b2:97:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 16 00:21:30 2025 GMT
            Not After : Sep 20 23:59:59 2025 GMT
        Subject: serialNumber=ee1c352ffc9e4502a5526ec529fdd984567d11b01642febc3d60d03ce5fb8144, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b2:63:7b:c8:1a:ce:d9:d7:ad:89:60:03:fd:
                    18:8d:78:f5:86:fb:2a:90:6f:93:a0:4f:c2:e5:17:
                    06:c0:7d:6f:36:65:81:e6:11:66:61:1e:12:e5:98:
                    39:98:21:78:33:21:ef:14:f0:85:40:b6:fc:7d:58:
                    04:16:66:e2:c2:15:23:e0:16:6c:f4:67:53:f4:15:
                    ec:43:e5:57:35:11:f0:e8:9d:7c:28:23:e1:79:6f:
                    20:78:5e:63:69:4c:12:6d:3a:47:f3:c0:5a:80:d5:
                    4a:50:12:31:f1:e6:62:59:fb:f9:b7:1d:d8:c9:fb:
                    86:b9:19:73:12:b3:68:b7:46:b5:0b:ce:80:04:c1:
                    57:4c:ba:34:90:d0:e3:1a:a1:b4:bc:c7:87:39:ef:
                    c0:fd:c3:ec:b1:65:2d:20:70:42:64:da:96:1d:af:
                    45:67:b3:e0:25:06:73:88:36:86:3c:5d:b9:50:f7:
                    42:8a:25:c9:80:d9:41:da:be:5f:06:c3:3f:af:b5:
                    91:93:8d:1c:05:5d:31:f6:f0:2a:d1:3a:b4:32:f2:
                    2f:3d:a5:d9:15:4a:8f:74:6c:83:d9:ae:b5:fc:92:
                    41:6a:9c:df:06:0d:87:e8:14:67:66:ec:a6:d2:fa:
                    c8:7a:f9:27:48:31:93:e5:8c:d8:27:2d:0d:4c:cf:
                    18:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:F1:6A:EF:F4:FA:4F:5E:82:93:CA:4E:5A:AB:C8:C9:91:EA:28:34
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/016a5fc6-f8fc-4320-9c8e-fec0cfd5a306.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f10::/28

    Signature Algorithm: sha256WithRSAEncryption
         71:c0:e4:46:a8:85:90:36:54:7d:6f:5b:4f:a4:c9:b4:98:71:
         2b:bf:91:92:1d:3e:cc:4e:60:80:71:41:e1:f4:d9:5d:59:08:
         14:2c:b5:62:ad:69:a6:84:c2:91:7d:95:b0:98:19:22:50:93:
         93:15:9c:e1:c3:93:5a:77:52:d2:2b:af:1f:1e:75:5e:bb:42:
         7a:c3:7e:a5:c3:75:a2:4f:8d:7e:24:28:26:ba:14:e6:a7:29:
         3d:95:f7:44:e5:9f:47:a5:29:b3:81:92:02:16:34:4d:10:b5:
         a8:ed:a8:62:e9:4e:19:e2:38:1d:2a:4a:b7:13:28:36:0d:9f:
         c6:2f:52:df:0e:20:a2:64:48:88:17:00:92:0e:b7:60:13:90:
         f0:50:4b:73:cd:2d:7e:f0:58:d5:e2:71:39:18:7b:82:0e:c5:
         81:fe:f9:62:ea:59:d3:ca:5e:8f:44:02:98:db:0c:73:36:87:
         79:8e:f0:68:07:39:6e:ae:98:82:3b:10:4c:08:ff:f3:c4:d3:
         d4:8e:27:05:ed:17:48:89:f1:69:a1:11:d9:4b:1e:3c:e0:ec:
         55:84:b5:cf:2d:2c:52:83:d8:03:2c:1b:df:ec:f9:39:30:b9:
         ac:85:a4:ab:46:1d:4b:ab:14:5d:08:99:e4:8a:9d:33:ef:ae:
         42:32:8c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:22:46 2025 by rpki-client