Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dbb6c5b9-2a52-43c9-bd53-21f2e6de0266.roa
File:                     dbb6c5b9-2a52-43c9-bd53-21f2e6de0266.roa (raw, json)
Hash identifier:          iglpF1FhUiYSlHdfrgVgGATtHt81WIDYQ/g360xmLPQ=
Subject key identifier:   63:0C:D6:07:8A:D0:74:3C:36:3F:2E:E5:D3:10:08:E4:4C:D3:BB:EB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6F3F6CB89668793CEE0103FFEC38A1A4606F7667
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dbb6c5b9-2a52-43c9-bd53-21f2e6de0266.roa
Signing time:             Tue 12 Aug 2025 00:11:11 +0000
ROA not before:           Tue 12 Aug 2025 00:11:11 +0000
ROA not after:            Tue 16 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff8:e000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:3f:6c:b8:96:68:79:3c:ee:01:03:ff:ec:38:a1:a4:60:6f:76:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 12 00:11:11 2025 GMT
            Not After : Sep 16 23:59:59 2025 GMT
        Subject: serialNumber=fa2f7993dbdb697ec385a045ebb266fa22faa9aecf9b27f13e5ae3007b9030a8, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1c:0e:09:04:b2:e2:bf:04:e7:98:f0:9b:cc:
                    8e:53:68:8d:02:62:52:46:00:dc:c5:ec:5c:df:92:
                    7d:20:99:00:66:90:fe:d8:73:94:e0:34:34:f1:c5:
                    2a:cb:d7:3d:56:bd:cd:97:c0:a3:99:8e:21:36:1f:
                    3c:9b:54:a6:71:08:f8:aa:75:ab:fd:f7:a2:b9:e5:
                    72:9d:2d:54:c0:09:48:53:40:ed:11:e9:84:0f:dc:
                    fd:01:c8:60:09:ec:56:b1:d0:bc:db:3b:ca:ca:76:
                    32:ad:da:fd:19:a5:47:0b:bd:0f:0c:cf:09:5c:03:
                    84:86:eb:3f:6d:30:2b:fd:f1:44:a3:dd:fa:57:3b:
                    d3:de:8c:c6:ee:d9:61:10:99:a5:9d:d2:d7:55:4b:
                    82:35:c1:a0:f2:fd:1a:71:e4:bf:b4:aa:61:81:c8:
                    7f:b2:f7:a9:b3:ca:95:a9:54:cb:46:c1:f2:b4:c9:
                    fe:76:a9:6d:f7:fc:a4:07:ff:05:77:82:51:2b:b8:
                    05:e7:b8:91:97:77:9b:4f:bc:c4:56:2c:cc:5f:7e:
                    d4:b5:66:95:6a:2a:20:f2:8a:94:55:fd:30:e3:a5:
                    b0:2c:b8:20:01:5b:9c:45:f1:2f:21:a8:ef:0a:48:
                    3a:97:b2:d8:74:58:e2:15:55:83:08:ea:74:66:0f:
                    a9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:0C:D6:07:8A:D0:74:3C:36:3F:2E:E5:D3:10:08:E4:4C:D3:BB:EB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dbb6c5b9-2a52-43c9-bd53-21f2e6de0266.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff8:e000::/40

    Signature Algorithm: sha256WithRSAEncryption
         c9:7d:60:5a:3f:5e:cd:7e:36:78:ef:fa:58:f6:14:af:e5:0f:
         14:3c:2d:64:67:e3:78:26:dc:83:e7:08:8c:21:91:47:2d:94:
         67:1c:41:2f:44:ea:0f:12:95:fc:9a:ce:38:f7:21:ff:30:b9:
         25:36:0b:fd:49:ea:71:59:2b:b8:19:18:0b:1c:bf:99:0a:30:
         b5:36:2e:81:7d:20:4e:03:84:52:1f:c1:7c:2e:1b:60:d3:f4:
         c6:86:9f:c5:af:b4:b3:d3:f1:19:d9:a0:4d:70:4c:3c:14:28:
         10:0b:6d:13:14:a9:d3:ae:ba:dd:51:b7:63:b5:a3:37:0b:93:
         6e:87:94:c0:85:c8:b3:4b:36:69:0f:e1:1e:bd:b4:42:52:52:
         ec:03:9f:56:8d:6f:7e:0f:9a:87:68:ab:32:45:43:d8:61:61:
         34:79:54:aa:70:6c:b3:c6:02:b4:5e:70:17:3f:4c:f4:39:c5:
         35:d3:67:13:18:66:1a:2c:c5:1b:bb:73:3a:fc:63:d2:fe:1c:
         95:8c:b0:cc:d8:dd:52:cb:28:f5:a8:a6:32:5e:70:ba:46:ee:
         36:95:d0:93:92:8b:a1:e4:48:d8:5f:e6:ec:05:fa:34:4d:e4:
         34:56:9e:a2:bd:eb:a4:d5:1d:6e:b4:09:11:49:15:f5:fb:36:
         e0:42:3c:59
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Aug 23 08:12:22 2025 by rpki-client