Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/06926b70-e7d0-408c-9813-e059e6fb6f1a.roa
File:                     06926b70-e7d0-408c-9813-e059e6fb6f1a.roa (raw, json)
Hash identifier:          JX9lEjtj9VUiYEnTtKr230zXIeC7zOs6KDXyIEx4wEk=
Subject key identifier:   12:70:12:91:94:54:1A:AE:26:36:4D:4F:70:65:61:AF:1A:5A:DC:34
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       566BA5581A5A4FC61052A2EE1126A0C17BADED3D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/06926b70-e7d0-408c-9813-e059e6fb6f1a.roa
Signing time:             Tue 22 Apr 2025 17:11:55 +0000
ROA not before:           Tue 22 Apr 2025 17:11:55 +0000
ROA not after:            Tue 27 May 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f19:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:6b:a5:58:1a:5a:4f:c6:10:52:a2:ee:11:26:a0:c1:7b:ad:ed:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 22 17:11:55 2025 GMT
            Not After : May 27 23:59:59 2025 GMT
        Subject: serialNumber=df93a34b30b40c26ffe41274e1df5d90716afa8d10a2c086bf926e450193d214, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:46:4f:d0:98:cd:0d:08:bb:73:d7:90:1b:c3:
                    2f:11:ce:b5:3f:56:23:db:26:45:3d:f5:41:c1:78:
                    fc:1a:17:0f:f3:0b:95:bc:a8:01:e8:c3:2e:50:1c:
                    b2:26:6c:ac:5b:f9:69:c9:3e:06:ec:74:c2:51:e3:
                    3b:fc:89:38:1d:f7:9f:6b:c3:d9:f8:9a:c4:71:ac:
                    72:96:9e:81:d3:dd:a9:c9:46:ad:d9:d2:47:eb:fe:
                    1e:a7:50:7e:64:b9:82:bc:e1:56:33:2d:c4:6f:a8:
                    fe:dd:a7:b2:20:de:b2:aa:69:5b:69:e6:f6:91:1d:
                    e5:21:95:13:ca:f1:99:51:54:47:3c:c8:ad:2d:d4:
                    c5:d0:4a:82:83:74:af:46:aa:43:dc:44:be:85:44:
                    73:43:07:55:19:68:2b:7f:9f:7d:32:3d:aa:95:25:
                    1f:ea:87:be:60:1f:3b:cc:f9:88:b5:0f:9c:3b:8b:
                    60:b4:a8:c1:02:42:15:21:d5:60:c3:7b:7a:ce:4f:
                    63:6c:b8:2d:b1:f6:f1:cb:e1:5e:20:a4:74:5c:3d:
                    41:1a:c3:b0:75:42:6c:06:ec:52:b2:68:38:85:92:
                    31:6c:60:ba:89:15:57:15:c8:6f:04:0f:bc:dd:60:
                    48:7d:49:24:56:cb:35:e7:37:ee:ec:31:74:3e:0b:
                    5d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:70:12:91:94:54:1A:AE:26:36:4D:4F:70:65:61:AF:1A:5A:DC:34
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/06926b70-e7d0-408c-9813-e059e6fb6f1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f19:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         1a:78:36:7b:cb:48:87:05:82:56:8b:91:22:78:6a:15:00:d8:
         7b:29:fd:06:34:43:fb:31:a6:1b:15:3b:f6:dc:45:a3:41:a1:
         50:7e:c3:24:9c:d9:36:9f:a7:ed:ff:0c:d8:23:ac:12:3e:eb:
         58:14:32:9b:dc:12:78:6d:86:21:d8:8d:82:4f:5b:31:72:fb:
         fa:50:17:14:f4:97:3e:26:2e:27:6e:42:16:9a:b1:81:fa:bc:
         8d:a5:cb:63:7c:8d:b2:f7:4d:24:48:56:42:ba:79:f1:77:6b:
         72:db:16:69:15:4c:a3:89:d3:15:28:ce:8d:48:1a:1c:21:f7:
         4d:16:2f:6d:81:2b:91:05:93:0f:25:41:81:99:e3:b4:2a:34:
         dd:ce:ef:74:d8:a8:bf:cb:f5:54:85:0d:b2:e4:28:02:09:b8:
         8c:5f:1f:86:13:8a:f5:9a:53:47:7b:3f:16:c7:58:5d:09:e4:
         a7:80:81:a7:57:0f:6d:c8:29:ee:48:8a:b5:9c:b7:ad:12:a0:
         b3:78:f2:1a:92:a6:47:e9:79:70:e9:7c:f2:67:40:a6:c5:f8:
         d2:19:a8:f9:04:de:11:63:e8:44:2e:e3:be:33:6f:68:f5:ac:
         13:a3:de:43:ae:97:19:6e:8e:f2:1d:45:77:fc:bf:2e:f2:b1:
         94:e0:13:5d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:15:35 2025 by rpki-client