Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/051afdae-4a6b-45bf-9b22-789962ff51da.roa
File:                     051afdae-4a6b-45bf-9b22-789962ff51da.roa (raw, json)
Hash identifier:          aA5uggwdmlrgG5f1bNTiITXX0XLKybkneVYFL6WmuS8=
Subject key identifier:   06:52:B6:8C:13:E9:EC:2F:B0:40:7E:3E:1E:A2:35:15:65:78:81:D7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0141771EE1A3F62E88CD1C75CA6661DD8453A554
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/051afdae-4a6b-45bf-9b22-789962ff51da.roa
Signing time:             Fri 13 Jun 2025 17:30:20 +0000
ROA not before:           Fri 13 Jun 2025 17:30:20 +0000
ROA not after:            Fri 18 Jul 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f12:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:41:77:1e:e1:a3:f6:2e:88:cd:1c:75:ca:66:61:dd:84:53:a5:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 13 17:30:20 2025 GMT
            Not After : Jul 18 23:59:59 2025 GMT
        Subject: serialNumber=563f45152614174d216fbe6c5e997f48a028481e5f2cb042b0aec077d062d653, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:13:97:5d:2a:23:4a:6c:25:a2:8b:eb:f4:0b:
                    d8:5a:1e:c8:57:67:ef:b1:d6:22:f4:d9:1c:2a:a5:
                    84:c4:fc:6d:28:68:60:09:a0:8d:7e:75:2b:fe:cc:
                    b0:04:18:07:bd:76:24:68:66:8c:0c:60:a8:8a:65:
                    0e:cc:e4:79:7a:2f:3b:b9:fa:f4:6c:57:e4:36:e8:
                    1f:8e:f2:45:bd:63:f6:c7:5d:c0:85:fe:f8:a3:de:
                    5b:24:52:33:4f:53:d6:d6:4a:ad:b2:87:31:ac:e6:
                    d6:cd:a0:54:d8:1e:e6:34:52:a8:84:f2:a3:7b:cf:
                    ce:a8:bb:a5:b4:cf:31:9e:84:31:f8:ba:51:53:eb:
                    21:c5:38:66:8b:b4:30:12:6c:9d:2c:50:c6:ab:e6:
                    81:0c:6d:a1:6a:09:0a:c2:8e:c7:4a:80:33:14:05:
                    03:bc:8c:3a:9b:d8:cf:5a:b1:7d:7a:99:95:51:97:
                    70:f6:8d:10:c9:09:ce:5d:7e:e8:48:ac:6b:91:bb:
                    22:b2:eb:dd:cd:9b:63:83:3b:d5:ba:31:be:7a:f4:
                    31:ed:d1:05:0b:04:3d:6f:1c:68:86:5c:9f:29:bc:
                    15:81:33:ce:9c:51:5b:d6:61:61:af:28:82:10:2a:
                    81:43:f4:db:9e:29:b6:a8:40:a5:ac:bb:cb:e3:f5:
                    d6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:52:B6:8C:13:E9:EC:2F:B0:40:7E:3E:1E:A2:35:15:65:78:81:D7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/051afdae-4a6b-45bf-9b22-789962ff51da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f12:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         7a:cc:56:91:3a:2e:e2:53:e7:c7:ac:06:1d:b9:1f:59:5a:a7:
         1f:cd:de:77:8b:86:35:fc:3b:cc:62:8e:90:95:69:be:6e:4a:
         57:5a:d0:7a:cd:2b:1d:2d:7f:64:9c:b0:af:79:45:30:04:84:
         f5:a2:ed:d9:87:bb:09:c3:36:d6:b4:13:be:c1:20:68:e6:d0:
         a9:09:06:4f:88:7b:29:59:69:88:b5:ea:33:a5:c0:e1:3d:2d:
         11:a2:96:79:58:86:1b:80:0b:88:bb:ce:0d:9a:b6:a9:62:5d:
         7e:28:85:70:49:ef:83:d8:2a:9c:02:bb:db:a2:64:cd:71:c2:
         11:f4:66:a6:2e:e9:5e:46:53:c2:de:3c:f2:79:60:59:ea:82:
         65:17:0f:38:76:68:c9:47:69:a7:ca:78:97:50:d3:de:39:82:
         a9:15:f2:eb:58:f4:79:8f:ea:06:ff:8d:58:8c:88:95:a0:1d:
         ab:83:ea:29:d3:e0:f1:7d:55:59:54:a7:d3:29:0d:ae:5f:de:
         db:71:ac:09:af:51:b4:38:d5:0b:a5:9f:6e:57:76:ce:c0:bb:
         09:99:9f:ea:6b:5f:15:7f:34:e6:6c:2c:3b:a2:39:ea:3b:48:
         54:84:99:75:00:af:8f:0e:de:2f:64:84:f5:2c:ff:80:93:4f:
         2e:2f:ab:3d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 15 01:06:29 2025 by rpki-client