Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1186eb64-ee57-4357-90a4-25d99e03e859.roa
File:                     1186eb64-ee57-4357-90a4-25d99e03e859.roa (raw, json)
Hash identifier:          T3IMezUz8Bx89vQwb1s2AjCNdIgRkkqKyAxXWTYaWys=
Subject key identifier:   D2:FA:3C:EA:5E:F9:28:6F:2A:E2:93:26:DA:6B:4A:F3:D4:37:02:9A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       294013940E07423A7D9DF204EEE06951878C7360
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1186eb64-ee57-4357-90a4-25d99e03e859.roa
Signing time:             Fri 13 Jun 2025 17:00:23 +0000
ROA not before:           Fri 13 Jun 2025 17:00:23 +0000
ROA not after:            Fri 18 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f11:4800::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:40:13:94:0e:07:42:3a:7d:9d:f2:04:ee:e0:69:51:87:8c:73:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 13 17:00:23 2025 GMT
            Not After : Jul 18 23:59:59 2025 GMT
        Subject: serialNumber=0f4a67c8a463119333b32ee78a1579243a60ff2b5d714ae5e6e7095b02bc08a2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:db:59:fb:10:34:88:ef:41:6f:f7:fa:a4:f2:
                    5b:e7:fe:0d:65:f7:16:e6:26:41:44:6b:93:0b:26:
                    90:4b:3d:a7:d5:2a:a3:0d:bd:62:f0:e0:fd:94:36:
                    83:23:d7:1b:36:f9:ef:f9:2f:30:6c:97:ae:cc:8c:
                    2a:fc:49:cb:ea:8f:af:a2:f7:e5:9e:57:ce:08:8c:
                    23:25:e8:03:62:c4:9d:8d:1c:84:f1:80:04:2a:3f:
                    a8:4a:7c:d2:e0:3d:fa:99:64:9a:c8:31:68:8e:f0:
                    66:c6:ef:53:41:e3:fa:8d:dc:32:f1:c0:24:74:16:
                    2a:71:28:3e:37:6c:35:98:b7:0e:c4:7b:d4:53:ec:
                    58:58:e2:27:04:7c:a4:53:42:a1:d5:28:88:40:5a:
                    ef:3e:ed:ca:ab:c9:c2:31:ad:b2:29:50:ea:d5:00:
                    d7:56:93:c6:75:da:d6:af:ae:01:ca:14:00:ec:15:
                    c7:8a:92:e4:d5:04:cd:68:88:25:9f:11:09:c7:5c:
                    63:14:d9:33:80:16:43:6f:d2:15:61:c5:08:de:53:
                    40:2a:18:df:ac:32:95:31:0d:61:d6:e6:2b:7d:0e:
                    32:7f:22:38:73:d8:f0:cc:d9:0c:c5:90:63:a3:4d:
                    9c:4c:ea:22:e3:f8:5e:28:74:f4:dd:e0:c3:a1:b9:
                    42:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:FA:3C:EA:5E:F9:28:6F:2A:E2:93:26:DA:6B:4A:F3:D4:37:02:9A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1186eb64-ee57-4357-90a4-25d99e03e859.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f11:4800::/37

    Signature Algorithm: sha256WithRSAEncryption
         36:21:97:6d:04:88:0b:3d:01:ae:51:6e:55:18:8b:36:01:cd:
         79:9d:ca:0f:9b:ff:d1:78:4e:2b:a4:f5:97:00:8d:f8:48:2c:
         0c:96:0f:19:59:2f:63:78:b7:4e:93:7d:1b:3a:e4:27:de:bb:
         68:07:e6:84:69:ab:17:35:e9:e5:f0:78:84:b1:c4:33:44:9c:
         29:c5:f8:3c:23:ef:ae:6c:76:48:9e:17:1f:84:c7:4f:85:67:
         c7:be:2a:5c:87:86:0c:6f:4a:d9:ce:22:f9:dc:dc:a9:12:ec:
         79:17:43:cb:01:92:c0:f7:90:0f:9b:db:c5:e9:90:67:e7:40:
         01:37:72:07:cb:b8:9b:13:f2:01:9a:28:d6:b5:a0:55:cb:dc:
         d3:4c:04:df:72:75:06:94:03:48:48:19:94:26:bc:96:cd:2b:
         1f:3d:11:ac:c3:1d:1c:75:b3:46:07:ae:1a:99:aa:62:e1:7c:
         d6:a8:09:d7:d0:84:bb:33:d5:91:fe:4d:3c:27:38:1f:b7:02:
         9c:5a:6f:f5:96:49:4a:a8:b9:9b:f1:8d:2a:48:c1:cb:0d:dc:
         53:3a:ba:27:8a:f3:a6:ce:eb:d6:f2:79:83:3e:d8:68:37:74:
         87:94:1d:24:69:c8:c3:15:6c:9e:10:81:15:cb:e4:d3:4a:ae:
         21:d5:df:79
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 14 06:49:01 2025 by rpki-client