Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0f89be87-45c1-410c-99ee-05d9e524cb54.roa
File:                     0f89be87-45c1-410c-99ee-05d9e524cb54.roa (raw, json)
Hash identifier:          IKyUWYdBb0wD3KVi0I3S+LyPwj4Cs3Z6Iku0oMz0UxQ=
Subject key identifier:   7D:94:01:27:5C:26:8F:AB:03:94:7A:F5:E4:83:87:6F:D7:4E:5A:11
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       66323F98A83DCF8ED478E834A88EB6E4C9C3839D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0f89be87-45c1-410c-99ee-05d9e524cb54.roa
Signing time:             Fri 06 Jun 2025 00:11:28 +0000
ROA not before:           Fri 06 Jun 2025 00:11:28 +0000
ROA not after:            Fri 11 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff6:a400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:32:3f:98:a8:3d:cf:8e:d4:78:e8:34:a8:8e:b6:e4:c9:c3:83:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun  6 00:11:28 2025 GMT
            Not After : Jul 11 23:59:59 2025 GMT
        Subject: serialNumber=e92654958f2b58ecb66f4b044b1e7c2c42898d21169583e10e3cd18366a584f6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:31:35:d4:4f:4d:de:6e:bd:8a:56:0f:3d:d4:
                    63:64:63:84:82:9b:55:9a:e4:84:c0:e3:7d:c0:c4:
                    09:c9:71:3a:ae:85:b4:92:00:70:4a:fb:38:ec:0e:
                    98:56:bd:fd:3b:25:d5:fa:c2:f3:59:d9:3e:7c:49:
                    5f:2d:d9:3e:9b:2a:48:c8:73:23:35:6f:88:da:13:
                    1b:53:7d:ee:3d:5d:00:c5:ab:39:9e:38:78:97:91:
                    3c:b9:e8:a7:3f:89:80:a8:5e:82:6b:3d:e6:cc:10:
                    87:b5:d4:c8:be:df:d5:19:a0:ae:da:a0:16:b7:f3:
                    3d:da:31:0c:b1:3e:e9:3a:1e:94:0c:67:1a:7f:1e:
                    62:92:ea:d4:02:a2:9e:d7:01:82:91:22:90:2b:00:
                    7a:7b:dd:bb:52:f1:c1:39:2e:1e:d2:1b:8e:dc:65:
                    94:05:e7:b4:21:37:9f:2b:55:66:02:cd:27:22:87:
                    2b:24:41:ef:56:34:e9:64:4e:51:33:db:47:f7:d5:
                    5d:3b:6a:d8:c2:09:50:04:8f:3d:48:63:ba:6f:db:
                    73:24:63:7c:e0:fd:07:0e:02:95:6c:0c:4f:bb:ae:
                    eb:4c:69:6b:73:c2:e6:58:47:10:83:da:58:3c:36:
                    e6:a9:24:6f:90:4b:d6:82:c9:fc:13:9c:98:a9:43:
                    69:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:94:01:27:5C:26:8F:AB:03:94:7A:F5:E4:83:87:6F:D7:4E:5A:11
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0f89be87-45c1-410c-99ee-05d9e524cb54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff6:a400::/40

    Signature Algorithm: sha256WithRSAEncryption
         14:e5:a8:d1:7a:f0:9a:53:db:63:ec:ee:5c:01:ad:0d:e8:5b:
         6d:65:23:eb:39:5c:40:0f:70:1a:ef:b6:69:c3:7b:da:15:cf:
         a6:1b:77:33:32:48:bf:71:63:a5:86:75:76:4d:9a:f0:03:1e:
         5f:d6:8d:42:9e:5b:2f:b8:4f:eb:67:ec:e7:8e:26:70:91:f5:
         8a:a7:41:db:f6:8d:f4:e1:da:8b:d7:e8:fd:7f:55:ba:73:f1:
         f6:79:7d:e5:16:84:38:95:40:04:94:9a:63:f4:6c:ed:05:17:
         c4:36:f8:36:60:18:32:11:f8:25:3b:1f:ba:e4:33:1e:6d:9b:
         70:a6:31:e6:0c:dc:9d:3d:7d:cb:3e:52:5b:87:cc:8b:45:ce:
         0f:67:05:3c:da:0a:07:1e:cc:4b:92:d3:86:4e:94:19:63:f5:
         b0:04:19:43:86:77:9a:24:6b:e9:64:57:29:f8:17:4f:4e:2f:
         80:5b:a6:d4:ce:f1:c4:a3:5c:7b:89:43:2d:7c:28:1e:cc:e2:
         a7:cf:c5:4f:62:38:60:84:f3:8c:7e:0a:d4:e1:87:25:ce:20:
         2c:bd:5a:a6:7f:6b:ed:66:25:98:ce:b5:87:ce:24:47:b7:ff:
         e5:f1:be:3b:79:81:fd:1f:a6:28:3b:8d:a5:3c:17:5b:d0:b4:
         58:82:a9:eb
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jun 18 15:13:52 2025 by rpki-client