Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/80c7e613-f4bf-402b-8b71-f56d5c9d2ded.roa
File:                     80c7e613-f4bf-402b-8b71-f56d5c9d2ded.roa (raw, json)
Hash identifier:          /PhRJ8iYNlQHLpt8tp7bHC5vIaChyfIZaCzMY8La82o=
Subject key identifier:   78:52:67:E2:2E:C4:71:D2:E2:4B:F0:0F:9B:55:E8:5E:78:DB:B1:FF
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2E0FA5F51E3E8EE931393814C560277D499BCEC4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/80c7e613-f4bf-402b-8b71-f56d5c9d2ded.roa
Signing time:             Sat 03 May 2025 00:11:43 +0000
ROA not before:           Sat 03 May 2025 00:11:43 +0000
ROA not after:            Sat 07 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ffd:84bd::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:0f:a5:f5:1e:3e:8e:e9:31:39:38:14:c5:60:27:7d:49:9b:ce:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  3 00:11:43 2025 GMT
            Not After : Jun  7 23:59:59 2025 GMT
        Subject: serialNumber=3ef85384fa591d1a0ac76c2dc788a5d2587b6a9fc7f855c27f7828ee364bc5eb, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:33:ba:28:ed:f8:bc:5d:fb:78:39:04:27:8a:
                    6d:de:9c:c6:ce:1b:7f:17:4e:da:48:03:a9:21:99:
                    15:6c:bb:63:68:e7:3b:da:e0:7a:d0:59:1a:2b:9f:
                    72:d3:7c:8b:89:4c:0f:18:4f:35:65:08:53:d0:df:
                    6c:ec:db:c6:27:4e:f2:c8:7a:14:d0:f0:d7:7f:ce:
                    4e:28:fa:21:3a:fc:c2:41:df:70:fb:94:38:5a:e0:
                    1d:69:5a:8a:ca:0d:c4:37:fa:49:95:e0:80:8a:2d:
                    7d:2e:ab:4a:6c:0e:de:cb:bd:02:30:56:8c:98:71:
                    2d:da:d5:ff:b4:c9:87:1e:45:29:21:c8:c5:c0:f4:
                    8d:dd:40:a0:46:09:93:84:75:df:51:37:ee:8c:65:
                    5e:e3:67:35:ed:32:e6:f7:9e:c2:06:16:9c:1b:2c:
                    f7:ee:fe:81:17:72:1a:c6:c8:03:4f:55:da:6f:b1:
                    d4:3b:61:d1:8a:8f:eb:31:83:1c:a9:cf:7c:cf:eb:
                    24:08:be:30:56:bc:60:46:68:53:5d:57:b4:d8:a8:
                    73:b0:71:24:3b:6e:32:f0:b8:a6:e8:89:4e:55:67:
                    b9:d8:0e:92:41:7b:82:52:b8:d6:a1:38:01:9e:d0:
                    25:9c:76:86:8c:f9:06:38:63:e9:8f:5f:c3:25:09:
                    d9:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:52:67:E2:2E:C4:71:D2:E2:4B:F0:0F:9B:55:E8:5E:78:DB:B1:FF
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/80c7e613-f4bf-402b-8b71-f56d5c9d2ded.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ffd:84bd::/48

    Signature Algorithm: sha256WithRSAEncryption
         c4:9f:86:5e:96:bf:b0:09:20:8e:95:01:10:ad:ba:d8:97:38:
         e4:2e:be:79:2a:aa:9b:0f:41:be:14:c0:32:40:85:00:15:30:
         76:60:e1:1a:12:00:dc:18:e2:3f:7d:00:af:8b:23:8a:b1:b3:
         dd:c9:af:b7:d3:41:c1:dc:d0:34:ca:a4:af:18:88:0e:0a:21:
         1f:eb:bf:db:8c:2a:d6:fe:57:0d:d1:a8:a9:c1:30:e8:7d:7a:
         40:ca:e5:39:a4:c0:af:fb:d0:e8:5d:7d:28:f7:a7:74:05:aa:
         f7:ff:48:cf:f9:51:49:59:ee:4a:36:0e:82:d3:aa:d3:65:19:
         c2:26:51:25:8b:29:87:b4:ab:72:b7:d1:1d:82:9b:ba:a7:21:
         46:2c:41:af:de:c8:49:5a:ab:bb:5a:72:73:b4:ad:76:a4:ac:
         63:01:51:50:71:85:95:c6:20:cd:46:d9:7b:98:99:7e:86:8d:
         ba:c5:e6:a8:37:32:74:a6:dc:48:cc:e3:2b:8a:f4:bc:35:62:
         06:fd:fb:19:a7:3b:a1:e7:63:72:5b:1d:cd:c7:74:af:9f:f5:
         c6:33:0a:3d:d2:75:00:79:98:e7:cc:52:bc:19:f9:e0:fb:da:
         52:16:4e:5a:b2:90:5f:ad:cc:79:6f:81:9a:1b:5c:bd:4e:f5:
         1b:52:5d:6f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat May 10 20:50:55 2025 by rpki-client