Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46edd7ff-96c0-4dcb-a72e-2dd489d695eb.roa
File:                     46edd7ff-96c0-4dcb-a72e-2dd489d695eb.roa (raw, json)
Hash identifier:          V2Lgln18m3YaCFE+VSMQmtKzer3K+RHaqlDP7g4NRaw=
Subject key identifier:   E3:33:11:CD:9F:D2:1E:CF:B3:3C:90:F3:A5:70:D8:9F:B8:BF:38:32
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       77F8E7F04E1FE2781B0A5870452C86A961E4437C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46edd7ff-96c0-4dcb-a72e-2dd489d695eb.roa
Signing time:             Mon 23 Jun 2025 15:12:27 +0000
ROA not before:           Mon 23 Jun 2025 15:12:27 +0000
ROA not after:            Mon 28 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff1:a400::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:f8:e7:f0:4e:1f:e2:78:1b:0a:58:70:45:2c:86:a9:61:e4:43:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 23 15:12:27 2025 GMT
            Not After : Jul 28 23:59:59 2025 GMT
        Subject: serialNumber=79a040c77238e70e6f17fb8397249c2c8877c0aa43da88dfc8193fc99983244f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f6:17:d5:1a:56:3a:80:cc:51:dd:6e:79:4e:
                    48:7f:ac:68:ab:9a:5c:db:0d:79:3b:30:75:60:a7:
                    8f:16:45:ad:8f:62:88:0f:c6:61:f3:db:63:23:e3:
                    51:0a:24:e0:97:a3:3c:bb:a3:de:e0:e9:03:95:d6:
                    40:da:17:87:c4:23:92:43:b6:36:6f:c7:4b:42:a2:
                    14:b5:34:09:b2:60:35:b5:63:23:67:a2:73:0a:95:
                    e8:36:d4:9e:45:03:4c:24:dc:49:96:a3:af:cf:f4:
                    d3:96:ff:75:43:2b:4b:7a:cd:8d:b5:b6:01:d6:b4:
                    e0:8a:16:be:65:f1:f0:0c:54:46:ea:7c:a5:0f:0c:
                    c6:40:49:83:60:98:78:81:6e:69:f8:da:35:83:41:
                    fa:f8:98:c1:ea:d5:ab:82:08:c2:9e:28:56:4b:a5:
                    0c:0f:ed:e7:be:de:68:4d:7b:ec:76:1d:0e:2c:36:
                    fd:e3:7c:74:58:30:ae:85:d0:db:7a:44:04:fa:1c:
                    5c:17:76:e8:56:4a:6a:2b:5a:fd:85:3d:a1:c1:85:
                    f7:58:df:3a:72:19:82:a4:79:9f:7d:49:9b:70:ae:
                    9a:81:85:e7:43:b4:f3:84:5a:9f:86:ef:68:dd:00:
                    f5:43:f5:d2:f7:1c:b8:58:99:26:b9:9c:47:a7:e2:
                    73:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:33:11:CD:9F:D2:1E:CF:B3:3C:90:F3:A5:70:D8:9F:B8:BF:38:32
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46edd7ff-96c0-4dcb-a72e-2dd489d695eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff1:a400::/40

    Signature Algorithm: sha256WithRSAEncryption
         b9:1c:50:67:05:dc:51:6c:80:51:c9:2a:78:da:5d:0c:ad:ab:
         61:5d:92:a7:0f:c2:86:d8:e3:af:bf:da:ed:bb:6c:1e:14:2a:
         95:c9:0b:d9:87:79:7a:79:a0:cf:c9:9e:a9:6e:30:e8:eb:18:
         50:f9:65:c2:73:11:68:81:3b:d1:8b:a6:ed:ba:53:28:cb:4c:
         aa:71:c7:83:9e:6d:ea:97:a0:19:4b:c3:d0:d9:72:88:99:9f:
         26:b5:c0:9a:bf:3e:01:7b:c3:59:dd:c2:ae:7f:d2:d9:b3:82:
         1f:90:5b:3e:e8:5d:ff:86:6f:d4:da:d5:c4:b7:90:9b:14:6e:
         61:7e:5b:16:a6:f2:1a:ae:f1:c8:17:23:36:47:93:1f:00:62:
         d0:ff:9b:84:30:05:28:2e:22:15:33:88:23:26:23:9f:78:d3:
         98:d8:9e:ef:e3:a4:81:41:8d:38:ee:ea:98:9a:ac:b3:0a:d1:
         11:d1:33:ab:00:00:9b:08:87:3e:00:d6:0e:da:61:1f:b0:95:
         99:1c:76:db:21:57:49:84:2e:1b:aa:1e:b3:82:3a:56:be:1a:
         ca:5f:c7:d9:9d:ac:3d:3b:4e:ae:7a:8b:10:b9:85:22:27:1a:
         65:ac:3b:13:bf:df:13:77:a0:34:df:4f:10:b7:80:80:c5:8d:
         bc:49:61:74
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 30 20:29:52 2025 by rpki-client