Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1922148-0081-4f06-b9be-a02446d66975.roa
File:                     d1922148-0081-4f06-b9be-a02446d66975.roa (raw, json)
Hash identifier:          1iGM6Xo12DEIlj73xUDWBvNZTpSS2a1S7TCxXjbRMuk=
Subject key identifier:   50:7E:61:30:69:FB:07:CC:B6:7B:DA:D4:3B:3C:FC:09:FE:37:70:BB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       587B611DA326DD01F4B37BC393641C9EE5CD7AC8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1922148-0081-4f06-b9be-a02446d66975.roa
Signing time:             Mon 23 Jun 2025 15:20:22 +0000
ROA not before:           Mon 23 Jun 2025 15:20:22 +0000
ROA not after:            Mon 28 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f2c:4000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:7b:61:1d:a3:26:dd:01:f4:b3:7b:c3:93:64:1c:9e:e5:cd:7a:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 23 15:20:22 2025 GMT
            Not After : Jul 28 23:59:59 2025 GMT
        Subject: serialNumber=c259aff96e2e09f1c5d659fca83a54cab2bc262fce4497a422fd26c576b693dc, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d0:54:e8:99:39:f3:4e:6c:16:cd:5b:2e:2c:
                    1a:de:10:aa:ba:05:a1:d1:20:28:b7:c3:ba:62:2d:
                    d7:9a:7e:d1:19:f4:64:2d:5c:db:6e:9c:43:39:f1:
                    ef:f0:7f:b1:31:b4:51:17:af:f1:d0:1d:d3:1e:d7:
                    6c:d7:88:4d:1f:57:4c:bb:00:5a:f6:41:92:38:6a:
                    ba:64:3f:e7:2a:da:a6:aa:62:98:db:42:b9:b4:f3:
                    77:17:f3:c3:3a:45:2c:62:4c:7c:1c:fb:3d:20:00:
                    5d:46:6f:9a:e8:d2:dd:8d:1d:62:97:f0:d4:7b:ad:
                    44:98:bb:31:ce:a1:11:03:05:a6:0e:65:42:bb:b1:
                    9f:7e:61:7f:f2:11:0f:f6:a7:66:7a:68:11:84:92:
                    02:67:a7:d7:ed:16:e6:16:32:0a:8b:09:dc:a1:de:
                    b8:ac:f5:64:10:50:2d:58:4b:5c:fb:a1:a7:17:98:
                    1a:e1:9f:fc:86:00:c2:bd:16:a5:50:d8:ec:15:68:
                    bd:7a:48:ef:ff:45:02:86:88:9b:c3:ea:46:67:21:
                    06:27:fb:cc:a6:0e:1f:7b:c6:10:44:ad:7b:c9:b0:
                    42:0e:96:c2:d1:34:02:6a:9c:5b:d6:11:d6:88:f2:
                    e8:37:5f:f9:b8:a1:67:ce:b4:c8:8b:78:3d:01:14:
                    ae:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:7E:61:30:69:FB:07:CC:B6:7B:DA:D4:3B:3C:FC:09:FE:37:70:BB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1922148-0081-4f06-b9be-a02446d66975.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f2c:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         7b:d9:cc:36:4a:d6:e0:a8:9b:40:b4:4a:c9:8f:ba:e4:6b:ce:
         53:ff:59:ed:f2:ef:bd:ff:fb:f0:9f:81:e8:2e:d9:3a:7e:dc:
         36:b4:3b:6c:e6:a2:a3:50:9b:45:b0:2d:e6:ea:d7:82:95:34:
         00:ce:14:a5:e9:3e:7d:c4:84:ad:57:fd:e8:9b:04:ef:e1:01:
         07:c5:0d:55:0e:8f:a9:28:8f:b7:02:1e:f4:8d:4e:7b:a5:73:
         e3:a3:a1:62:c2:6c:ca:61:ad:4d:29:79:1d:5c:66:d3:ff:a1:
         2c:5c:e6:e7:52:94:0d:5a:98:73:0f:15:42:a8:71:f1:95:ae:
         0c:42:56:95:2a:97:73:98:2f:b1:63:9c:71:b9:9b:dd:e9:60:
         2a:02:52:99:89:d1:d3:f6:c1:10:7a:0b:78:54:39:d7:ed:22:
         45:8f:81:e0:f1:bf:be:b3:93:3f:2e:f1:ae:f1:a1:59:ae:1a:
         76:c1:af:75:71:ff:77:70:70:70:df:56:57:3e:6a:85:0f:92:
         96:8e:2b:e3:40:0c:86:c5:b1:82:23:45:32:03:40:eb:e5:de:
         0a:79:5f:ca:f1:34:c5:47:ae:e9:06:55:07:d8:90:a5:6c:2f:
         c7:11:98:26:fc:10:2e:63:c4:49:b0:c0:89:54:3b:1f:1b:59:
         45:b4:7a:d8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jul 2 05:01:13 2025 by rpki-client