Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7d6c05e-b445-4685-9bdb-bb448d74ef34.roa
File:                     c7d6c05e-b445-4685-9bdb-bb448d74ef34.roa (raw, json)
Hash identifier:          ZUB7bhumWb2ZDP37ACvleiXidnGmNsJoj2J7DyucAqk=
Subject key identifier:   A3:89:2A:F1:8C:EE:1A:39:E1:AD:45:2A:32:AB:EE:1A:7D:18:CE:36
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       751DC1C997C00D4806E31035937ECAC404720DE5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7d6c05e-b445-4685-9bdb-bb448d74ef34.roa
Signing time:             Fri 15 Aug 2025 00:30:30 +0000
ROA not before:           Fri 15 Aug 2025 00:30:30 +0000
ROA not after:            Fri 19 Sep 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f61:80e0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:1d:c1:c9:97:c0:0d:48:06:e3:10:35:93:7e:ca:c4:04:72:0d:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 15 00:30:30 2025 GMT
            Not After : Sep 19 23:59:59 2025 GMT
        Subject: serialNumber=543a0f461e0e75dc0583a0e37ce34bd70fefefb14dad8dc83887d813930ab15e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:09:a6:74:42:48:c6:0e:af:1e:6c:43:e7:04:
                    70:02:c1:c1:a3:ca:0a:be:de:84:19:eb:a3:d4:e8:
                    9c:5b:4c:17:fe:db:01:fe:84:40:5d:16:79:0e:b9:
                    e3:6b:e5:88:84:4a:1c:cb:ca:ed:c7:88:ab:b8:9d:
                    fc:61:4a:f1:d2:29:02:fb:96:9f:5a:14:0e:86:24:
                    85:15:b3:b1:47:8e:e7:66:c9:7c:ee:98:a0:57:e3:
                    ae:a3:75:bc:03:39:f9:16:1a:db:0d:d3:84:fa:b3:
                    a3:9d:a9:45:4a:31:f2:df:59:e0:a1:82:20:36:b0:
                    89:10:e0:14:91:6b:78:93:ee:1d:f7:51:bb:f7:71:
                    7d:66:69:a6:2b:e4:d8:21:ff:7f:d3:a7:71:5f:61:
                    ab:7c:66:08:b0:8a:f1:e6:d4:ca:11:bc:d4:8b:6d:
                    29:80:5d:5c:73:6c:f1:42:16:67:51:6c:2c:84:d4:
                    87:3d:c2:44:38:ac:07:11:1f:bf:a7:74:65:b1:54:
                    43:c9:71:61:a6:d9:dd:dc:27:d7:d9:ea:9d:d3:4c:
                    a9:2e:9e:10:73:1d:8c:35:38:73:ae:b3:fe:4c:b5:
                    4f:4f:51:3c:f2:0a:4b:ca:6d:1d:7c:48:8d:37:cd:
                    10:33:f5:13:f8:08:fc:47:ad:b0:24:bc:4d:67:fd:
                    17:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:89:2A:F1:8C:EE:1A:39:E1:AD:45:2A:32:AB:EE:1A:7D:18:CE:36
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7d6c05e-b445-4685-9bdb-bb448d74ef34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f61:80e0::/48

    Signature Algorithm: sha256WithRSAEncryption
         02:b0:b0:32:3c:1a:95:e1:28:9a:29:07:00:23:ce:30:7d:9f:
         b5:76:4d:d5:8d:34:52:07:92:87:99:d6:41:74:42:91:54:84:
         d4:ba:d3:77:e8:d6:7d:5e:1b:e6:5c:da:f7:b5:9b:b0:47:f4:
         04:5e:71:d8:9f:68:4e:8d:43:0e:5a:cf:c4:db:20:c3:bd:5a:
         1b:c5:71:d8:a4:97:65:2c:9a:db:52:fd:d8:a6:0e:86:96:96:
         62:92:0f:59:f2:3f:39:d1:0f:a6:68:3a:6c:d6:93:2c:04:5a:
         08:2e:d0:60:eb:54:b1:56:5f:71:b1:97:62:0c:8d:4c:aa:36:
         00:96:79:06:2a:16:43:0c:33:e9:25:b2:13:33:2c:d2:eb:fb:
         de:7a:cf:f9:1d:28:cd:ce:59:d1:e0:93:0a:52:6d:44:9d:2f:
         3e:53:18:f1:c7:43:8a:c4:01:73:e3:dd:7e:69:d1:42:f3:d0:
         61:6d:19:cd:64:b9:64:c4:f7:d4:d7:20:d2:db:fe:68:a7:c9:
         49:08:31:c6:93:7a:2d:14:37:5f:b1:a1:3b:74:17:c0:06:7b:
         74:75:60:11:1e:04:73:60:7c:8f:dc:aa:aa:06:35:09:e7:af:
         fb:1f:ae:5f:22:ef:84:83:00:9a:d6:3e:f7:d9:bb:ea:d8:09:
         92:f5:f7:6f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Aug 23 08:11:31 2025 by rpki-client