Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c92a8c24-62b8-4009-a51c-8908d7373850.roa
File:                     c92a8c24-62b8-4009-a51c-8908d7373850.roa (raw, json)
Hash identifier:          6z9BasNx4x7EAaSu5+LApAtbJjPu+r2tQeb20bZ4LdM=
Subject key identifier:   1F:38:EB:5E:88:AA:30:FC:D2:B1:81:AC:15:6C:B6:70:1D:64:C0:55
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       7998767FBADF1D52F2F5D9AFAFF843D293D72C34
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c92a8c24-62b8-4009-a51c-8908d7373850.roa
Signing time:             Mon 16 Jun 2025 19:30:17 +0000
ROA not before:           Mon 16 Jun 2025 19:30:17 +0000
ROA not after:            Mon 21 Jul 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0fb:e100::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:98:76:7f:ba:df:1d:52:f2:f5:d9:af:af:f8:43:d2:93:d7:2c:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Jun 16 19:30:17 2025 GMT
            Not After : Jul 21 23:59:59 2025 GMT
        Subject: serialNumber=1d27e0ad883f8bf34fb62f77337f71f586fcfe2823dadc900526df689b2fd7b3, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:07:e6:39:c4:cd:a4:b2:68:85:99:73:a0:41:
                    8f:b5:37:0c:95:ff:7c:1a:f0:f2:9e:38:f6:f2:5f:
                    b3:c9:86:ce:44:a3:dd:62:d0:93:43:71:f4:f7:4c:
                    f3:a8:97:05:ab:ba:94:66:c0:98:66:7d:6f:e2:26:
                    72:62:1d:58:01:ea:fc:7a:62:08:17:6c:32:e1:f2:
                    35:ba:d3:1d:e4:87:0e:23:61:16:a1:5b:e4:fa:60:
                    65:d4:d1:a9:cc:1b:3a:b5:7a:ae:ec:39:b1:e8:cf:
                    40:a5:38:d4:da:11:4b:f5:a8:fa:90:11:96:11:98:
                    7d:16:e4:a7:a3:91:54:44:4d:20:d4:5a:e4:b2:02:
                    e9:79:85:9f:b5:57:6b:0e:a6:e7:75:a9:86:89:33:
                    c0:74:b7:0d:b8:5f:b5:12:6f:9f:39:97:64:ee:9c:
                    06:60:ee:68:36:ef:74:f8:90:28:81:ba:a5:23:56:
                    d3:6a:50:5b:cc:6d:62:26:5f:f8:b1:22:df:99:9f:
                    64:50:08:6e:3f:66:63:90:bc:5c:56:fa:b3:41:82:
                    65:be:33:c3:cf:5d:7c:17:0c:22:40:30:b5:4a:8e:
                    ff:2a:2c:3b:4b:12:65:fb:4c:58:30:76:db:62:49:
                    fc:41:78:71:98:cb:39:73:9b:d0:df:70:d9:ae:2d:
                    78:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:38:EB:5E:88:AA:30:FC:D2:B1:81:AC:15:6C:B6:70:1D:64:C0:55
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c92a8c24-62b8-4009-a51c-8908d7373850.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:e100::/42

    Signature Algorithm: sha256WithRSAEncryption
         0f:dc:fd:b3:27:81:eb:3c:ac:08:b0:0c:8a:34:17:3d:3c:5a:
         09:eb:19:df:72:9f:04:25:23:5e:a0:52:28:8c:f2:ec:95:ff:
         7d:8c:9f:c9:69:85:bf:f1:d7:35:db:16:61:3c:45:25:f5:a4:
         5a:44:a3:0b:8f:df:3a:db:39:2c:b4:fe:a5:5a:f3:6d:2f:ff:
         a6:fb:52:d0:78:d8:5f:cb:42:ae:c6:ac:38:d2:ae:5d:c5:24:
         a8:8f:b5:e6:08:a9:19:1a:86:e0:3a:0f:eb:3a:b2:86:2b:69:
         5e:7e:59:83:b8:56:80:30:99:59:c8:eb:f7:ee:9d:03:0a:29:
         26:7d:3c:d6:32:cc:fd:25:fd:3d:11:9d:86:9b:14:2a:b0:ad:
         18:e9:a2:56:2d:de:10:aa:42:c7:2d:8e:ec:96:e5:48:67:65:
         28:34:cc:49:9a:35:03:45:b5:0d:e9:a3:5d:3a:61:28:23:d2:
         75:38:4a:e9:f0:83:58:80:67:13:0d:a8:49:aa:e9:51:50:5b:
         50:0e:0e:ea:4d:ba:24:14:d4:56:46:34:70:97:ee:3c:96:bd:
         ef:4f:4f:2d:aa:d4:19:53:4d:39:bd:76:7f:53:ec:e8:53:75:
         3b:1c:83:69:44:01:95:6f:4f:dc:34:91:3d:b9:f5:88:fb:04:
         bb:d4:dd:84
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jul 1 00:33:44 2025 by rpki-client