Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67f40a44-f534-4bd5-82d5-3d7ba1d41e1d.roa
File:                     67f40a44-f534-4bd5-82d5-3d7ba1d41e1d.roa (raw, json)
Hash identifier:          Fx1bydG2Tab7Vy0982udX5CH6CGJNNplNpPgDjCqVD8=
Subject key identifier:   7F:23:FF:99:2D:CC:8D:8B:81:C3:D1:07:8E:D3:FF:79:DA:FF:12:2B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6A263736B42659FFFB783DA7BDE6929E22E9771E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67f40a44-f534-4bd5-82d5-3d7ba1d41e1d.roa
Signing time:             Mon 23 Jun 2025 15:20:30 +0000
ROA not before:           Mon 23 Jun 2025 15:20:30 +0000
ROA not after:            Mon 28 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f26:8000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:26:37:36:b4:26:59:ff:fb:78:3d:a7:bd:e6:92:9e:22:e9:77:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 23 15:20:30 2025 GMT
            Not After : Jul 28 23:59:59 2025 GMT
        Subject: serialNumber=3ef317846530c88728b238c484054f919e7a4b54ed45c865f936a7a034843590, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:04:14:6d:7a:c2:b8:4b:7a:36:ac:a0:a6:72:
                    fa:4e:77:e7:67:17:84:d8:d8:f4:82:66:ec:8e:e5:
                    21:84:3d:ef:bf:50:86:56:91:e9:c4:cb:c1:46:45:
                    67:f5:d2:34:b0:11:19:98:86:59:bf:e6:21:95:30:
                    ef:f2:45:e6:cd:8e:a5:22:7f:21:7c:88:ab:21:b3:
                    a3:c3:f3:19:bd:1f:34:d0:ff:a2:68:79:7d:23:3c:
                    f5:7f:85:23:5c:fb:c6:3d:2a:0b:33:9e:c6:88:73:
                    d6:7f:67:e0:8d:9a:28:50:2a:4f:c8:fd:66:0f:39:
                    eb:d3:c5:32:e4:aa:89:3b:71:1c:0c:c4:70:f0:82:
                    cd:49:7a:3e:93:bf:bf:ea:b3:0b:43:b8:e5:c3:5f:
                    ab:41:54:f8:30:73:c8:04:54:08:bf:db:59:0b:3e:
                    e3:6d:bf:d5:1e:58:a9:be:3b:3b:c3:85:4c:a3:5b:
                    8b:fd:0d:6c:0c:a1:34:fb:4f:b4:9a:c4:25:b6:00:
                    b4:35:8b:31:6e:c6:4b:88:5e:d4:fa:2d:34:ae:11:
                    6f:eb:f7:78:5c:26:ce:79:9f:44:78:8a:77:78:1e:
                    ae:04:3b:db:f7:71:26:58:22:9f:5f:c7:68:93:8a:
                    20:b1:91:58:98:c3:8c:e6:1b:9a:61:ea:e9:2b:8c:
                    58:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:23:FF:99:2D:CC:8D:8B:81:C3:D1:07:8E:D3:FF:79:DA:FF:12:2B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67f40a44-f534-4bd5-82d5-3d7ba1d41e1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f26:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         03:66:28:5c:2e:56:de:06:27:01:3e:ab:4f:5d:dc:29:62:62:
         b9:02:e7:61:7a:49:35:62:e2:f8:25:66:44:12:5d:e5:10:df:
         b6:8e:74:a0:b7:6e:d1:6b:d0:82:8f:a3:66:a2:eb:0f:26:1c:
         3d:0a:a2:2e:ed:af:94:06:a0:0f:02:fd:c6:80:86:fc:c1:2f:
         e9:41:95:7c:66:96:75:f4:54:f7:b9:78:47:10:35:19:92:b1:
         cf:d4:1e:da:52:61:e8:cc:dd:db:6a:86:5f:62:90:ae:35:18:
         99:9f:e5:b9:7d:91:2a:d1:d3:22:96:46:b7:d7:da:d2:25:c2:
         ef:f0:32:75:27:6a:bc:73:d8:be:99:a3:8b:fa:f7:6a:ab:a7:
         7f:67:73:0f:a3:f8:2a:e6:70:84:64:b4:61:f8:1a:30:5f:ae:
         33:1a:7a:c6:6c:b8:46:57:a7:b0:90:73:8e:59:84:f2:00:51:
         c8:8f:cc:8d:37:31:05:94:dd:2e:cf:bc:61:32:6f:53:79:47:
         16:e9:b0:8c:3c:5e:23:7b:2e:43:44:3f:54:72:db:3d:e3:1e:
         61:1c:12:ce:c6:ff:9d:c5:6a:94:55:c6:40:94:28:96:31:61:
         5d:7f:cf:34:40:42:c4:16:b5:26:23:dc:37:06:63:26:5d:af:
         1c:64:38:81
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 29 14:34:14 2025 by rpki-client