Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe36f809-544c-406a-9026-627fbf7d8377.roa
File:                     fe36f809-544c-406a-9026-627fbf7d8377.roa (raw, json)
Hash identifier:          Am6iy0ifCWaImxzkLB/qAFEumh0gsIrrW8S4QwGdScI=
Subject key identifier:   4F:90:E3:D4:85:E4:70:A0:CF:09:0E:9A:8C:0D:08:6D:19:38:FC:25
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       473D48EF9C5D02D8C41BE4FF48F6C8B5E92E2EBF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe36f809-544c-406a-9026-627fbf7d8377.roa
Signing time:             Sat 10 May 2025 00:11:39 +0000
ROA not before:           Sat 10 May 2025 00:11:39 +0000
ROA not after:            Sat 14 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff6:e000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 May 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:3d:48:ef:9c:5d:02:d8:c4:1b:e4:ff:48:f6:c8:b5:e9:2e:2e:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 10 00:11:39 2025 GMT
            Not After : Jun 14 23:59:59 2025 GMT
        Subject: serialNumber=850f0f8216d16a8ef0d45801689e9cd7cb25199e5428d86b57c9ad446ff35fd3, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:c8:55:61:8f:e1:d5:ba:2b:9e:34:a3:75:9c:
                    f9:29:8a:1c:45:09:47:0d:c8:44:48:fa:c0:24:a1:
                    8b:c1:e4:19:cc:0d:72:eb:90:41:41:4a:20:6e:d7:
                    23:3f:2d:6e:bb:c1:96:75:2f:7c:e4:39:8c:bd:f2:
                    6f:ef:43:2c:8e:7e:2a:7a:7c:5b:41:40:61:98:1a:
                    31:2f:86:99:1b:45:f5:0e:4f:c2:10:57:4d:f6:91:
                    cb:8b:a3:be:d1:f8:ef:8e:f1:9b:e5:0a:bf:b0:57:
                    c7:d6:5f:76:72:27:6b:8b:05:ca:d8:04:7e:c4:86:
                    3e:a5:1b:9b:1c:61:41:fc:fa:64:9c:06:2c:06:63:
                    13:fd:3a:25:6c:e5:14:2e:84:31:e9:68:d9:c0:4a:
                    d8:b0:82:53:d0:af:63:96:98:bf:9b:f6:b8:b9:3a:
                    4f:2e:1b:d9:1c:a3:8f:f0:3a:ff:1a:bb:fb:55:da:
                    55:11:6b:f1:73:82:43:97:c2:cd:ad:e2:cd:ab:9f:
                    81:94:17:25:b0:78:4d:37:8b:48:50:80:20:9f:0e:
                    0d:f4:f1:8d:30:52:5a:4b:e6:6e:fa:82:a6:77:5f:
                    a3:4c:0a:0e:4f:b3:44:b5:af:0c:2f:27:5f:32:1a:
                    3c:e4:0b:8e:42:1b:5d:51:69:e9:f6:d4:1b:d2:c9:
                    b8:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:90:E3:D4:85:E4:70:A0:CF:09:0E:9A:8C:0D:08:6D:19:38:FC:25
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe36f809-544c-406a-9026-627fbf7d8377.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff6:e000::/48

    Signature Algorithm: sha256WithRSAEncryption
         17:36:64:0d:64:7e:3d:d0:6f:cf:4f:81:e2:3e:a3:0e:8b:cd:
         1c:8c:7e:f1:ab:d7:70:e5:c8:df:d2:a7:06:0c:d2:9b:15:c2:
         c3:ae:bb:3d:5f:93:02:63:9a:e4:c8:63:a2:c1:e9:49:13:b0:
         30:b1:27:79:5b:02:34:4a:32:1d:a4:6d:40:bb:67:74:84:01:
         a8:6b:a4:56:4e:40:d8:8c:21:68:51:74:e5:51:2e:97:c2:74:
         d4:11:17:4c:da:81:70:f9:d7:56:10:af:73:6d:c8:d5:8d:34:
         99:4c:8f:c6:5a:44:39:22:5d:3c:87:b2:af:02:e5:6c:82:e3:
         84:14:51:7d:79:b7:9f:97:7f:84:c9:92:1b:1e:db:ba:a8:56:
         20:f8:bd:0b:29:f1:73:2f:e8:97:15:bc:5f:82:c7:30:8d:f8:
         6a:9e:c9:34:0b:42:e6:31:a1:34:4e:41:75:79:cd:78:85:8f:
         97:db:62:6a:a3:18:31:6a:72:8b:02:e5:ce:b4:ed:b5:9c:6f:
         cc:4b:26:a5:f1:cd:03:f3:25:ad:93:7b:d7:03:f7:63:16:de:
         ea:49:c4:a4:4d:e6:02:5e:c3:16:3f:0b:cd:2b:db:c8:02:ce:
         48:52:ea:a8:9c:8a:78:4d:c0:15:c9:e9:29:0d:0b:98:ac:96:
         0a:96:b8:c0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 14 15:15:04 2025 by rpki-client