Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94ea3336-2ba3-4ecb-94e5-756a8bbbcaec.roa
File:                     94ea3336-2ba3-4ecb-94e5-756a8bbbcaec.roa (raw, json)
Hash identifier:          u6qqhb2ojtxEOZS9ehfrNsYoH8uGb2qVxjEaxDLgu2s=
Subject key identifier:   4C:71:25:30:BA:C7:D0:D5:33:7D:65:A7:DD:D1:B3:5A:11:C4:D3:52
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2029A8A92A97366446AA3243A3C19C52EEFA36E0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94ea3336-2ba3-4ecb-94e5-756a8bbbcaec.roa
Signing time:             Fri 15 Aug 2025 00:41:33 +0000
ROA not before:           Fri 15 Aug 2025 00:41:33 +0000
ROA not after:            Fri 19 Sep 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        2600:1ff3:5000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:29:a8:a9:2a:97:36:64:46:aa:32:43:a3:c1:9c:52:ee:fa:36:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 15 00:41:33 2025 GMT
            Not After : Sep 19 23:59:59 2025 GMT
        Subject: serialNumber=164f3f92dae055eb97df63170cab2da8b349270066634b77c77b018e8ecf0685, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:56:eb:d4:3f:24:21:47:86:03:28:06:1e:e6:
                    69:f6:d0:88:ea:51:03:59:e5:ba:ac:03:53:ca:e4:
                    53:75:e3:7e:07:d6:36:f6:91:10:ec:6f:ad:8d:0c:
                    bc:1b:ea:cd:ed:53:52:7a:63:aa:2e:c8:d1:ca:b5:
                    d3:39:54:5e:f1:88:b0:fa:d6:6a:13:a6:af:3a:ce:
                    6c:ef:46:a1:72:14:ea:ed:68:c3:ba:f2:b8:2d:3d:
                    c7:60:3d:fe:d2:a6:b7:dd:f8:16:df:0c:79:5e:f9:
                    8e:17:4d:1d:a1:f8:e5:28:b9:0e:89:f7:50:2a:6e:
                    86:c7:5e:ad:24:9b:78:45:ea:8c:ca:f9:24:bc:10:
                    2d:e4:d5:47:6f:5a:90:ac:a2:13:ff:b6:c4:03:97:
                    1a:4f:3a:d7:bb:8f:e0:8a:79:be:d2:96:42:56:e1:
                    e2:65:42:ca:3a:db:10:c5:4e:c9:a6:f9:fd:18:39:
                    a1:51:02:15:f4:8c:9f:1b:70:5c:2a:5a:39:55:c7:
                    94:22:70:c3:87:b6:60:3a:92:b8:c5:0f:dc:4d:9f:
                    d9:8c:94:0c:f4:73:cd:a0:b5:32:2e:98:68:66:76:
                    82:7f:01:24:20:63:e6:d2:ca:73:fa:02:9a:4c:56:
                    ed:9b:31:38:38:34:1f:12:fa:9a:cc:e2:10:8b:05:
                    69:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:71:25:30:BA:C7:D0:D5:33:7D:65:A7:DD:D1:B3:5A:11:C4:D3:52
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94ea3336-2ba3-4ecb-94e5-756a8bbbcaec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff3:5000::/40

    Signature Algorithm: sha256WithRSAEncryption
         41:a7:1b:17:fb:cc:ca:78:63:6f:ce:49:88:7c:06:6a:2d:ee:
         ac:7b:84:4d:2c:c5:af:99:17:a1:6e:85:db:d2:b5:68:86:e4:
         51:15:17:03:9e:85:1b:7e:cc:18:3f:db:a3:10:2d:b4:bb:64:
         26:8c:ac:8b:af:d8:8d:21:67:fb:66:01:fd:b8:ed:15:00:37:
         15:90:4a:a2:8a:02:8a:bd:e6:a2:3e:ec:e3:da:53:df:94:90:
         01:bd:69:fb:13:1f:2b:6f:c7:4c:97:61:d1:8f:5b:5b:0a:08:
         9c:19:85:a6:c2:ff:dd:54:5f:6a:f0:82:4d:b6:f5:e3:41:5c:
         05:1f:24:f9:71:0b:ab:b8:78:85:de:13:c5:6f:ca:26:12:25:
         72:78:41:47:48:18:56:5d:b9:75:a3:94:d0:17:cb:1e:b5:5e:
         a4:a3:7b:6c:21:a3:6c:b2:2b:9b:3a:0c:04:44:ef:da:d8:d9:
         3b:8a:2e:f0:33:69:77:a9:63:d3:7a:29:5a:33:59:49:ea:86:
         a3:46:a7:ed:0b:d8:cf:23:c3:dd:b6:1a:39:dd:85:f4:9a:4e:
         28:a4:e2:bb:1a:91:90:59:60:82:41:5d:e4:14:7b:6d:25:09:
         93:ce:51:b6:cc:49:10:da:7b:9d:8f:17:c1:b3:af:c4:6b:a7:
         ea:29:b4:65
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:52:35 2025 by rpki-client