Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/12d46d44-c4e3-4542-a08b-4f833b5a0c91.roa
File:                     12d46d44-c4e3-4542-a08b-4f833b5a0c91.roa (raw, json)
Hash identifier:          gwvzQ0vzwpcYY9uRalkvGavu+/UpToDAIPhS/ayhNfM=
Subject key identifier:   5B:18:70:06:48:EA:3C:36:FB:FE:8A:D9:91:6C:3F:0D:C2:08:07:2B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5E5865FF5CED7413D650B112157DDB553850A744
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/12d46d44-c4e3-4542-a08b-4f833b5a0c91.roa
Signing time:             Fri 06 Jun 2025 00:10:28 +0000
ROA not before:           Fri 06 Jun 2025 00:10:28 +0000
ROA not after:            Fri 11 Jul 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1ff4:c000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:58:65:ff:5c:ed:74:13:d6:50:b1:12:15:7d:db:55:38:50:a7:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun  6 00:10:28 2025 GMT
            Not After : Jul 11 23:59:59 2025 GMT
        Subject: serialNumber=422b6f3748cf18aa34591a9e0236a10145b215a12c8ee6b23df199ac559c012e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:90:0a:1c:5a:be:cd:1c:fb:db:a8:e3:24:d4:
                    14:c6:05:e6:f8:43:ac:64:4d:65:a4:f8:98:9d:55:
                    a0:4d:10:d9:4e:ab:eb:93:7e:8f:50:2a:d3:13:4a:
                    1e:5c:c9:3f:3b:db:d3:eb:bd:17:51:f7:29:6a:02:
                    05:aa:be:c5:21:df:c9:b3:b4:8b:f5:f9:22:99:71:
                    6b:d2:be:5d:11:e0:a1:11:0d:e3:35:13:27:5e:24:
                    d9:cd:6f:6f:6b:10:37:16:d1:9b:bb:13:e5:c2:a3:
                    5e:5f:b6:1b:fc:19:d7:f9:42:6b:78:1d:68:04:37:
                    12:19:1f:16:58:18:c5:d6:b3:8e:66:cb:35:9d:4b:
                    58:7d:72:f0:cf:6e:d7:05:1e:c1:27:f9:42:f9:f8:
                    46:ec:c4:c1:d6:4d:75:70:c0:a7:44:96:97:2e:33:
                    de:8d:90:d2:ab:70:99:2f:d1:db:b6:69:b2:17:e6:
                    3c:37:6d:fb:1a:70:b5:38:0e:74:8a:f5:75:88:6e:
                    fa:f1:44:ac:f4:24:34:7e:5f:25:74:b3:c0:80:40:
                    26:f7:1a:80:74:ba:c8:2c:e3:2f:8c:dd:aa:9b:c8:
                    aa:f8:cd:46:3b:8d:87:de:38:2e:fa:3e:34:eb:5a:
                    1a:42:15:39:e4:89:7f:77:97:a2:51:da:fc:3d:dd:
                    84:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:18:70:06:48:EA:3C:36:FB:FE:8A:D9:91:6C:3F:0D:C2:08:07:2B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/12d46d44-c4e3-4542-a08b-4f833b5a0c91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff4:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         0d:8c:8c:18:d1:c8:de:45:f8:0e:5e:9d:67:d3:6c:1c:0d:4d:
         57:01:d2:44:de:a5:93:ca:c9:c4:de:19:02:10:23:71:c6:71:
         9b:00:7e:e7:c1:b7:91:c3:d2:bd:6e:ec:08:3b:0a:85:aa:3a:
         e6:12:69:81:f4:f7:f4:3a:d9:ad:fe:17:fc:73:9c:76:39:4d:
         ae:07:ec:93:de:67:0d:9e:3c:4b:3d:26:50:a7:cf:00:33:ae:
         eb:a5:55:1f:32:f9:9d:b2:6d:c1:1c:12:1c:19:e9:4a:8f:c8:
         26:f2:ba:5c:ac:e1:e2:54:ac:a9:d4:74:91:f7:9e:98:b4:7c:
         43:07:c5:e3:6b:ce:ac:06:43:c2:c8:1c:82:cd:fc:d5:c5:5b:
         9f:04:2a:d7:15:05:01:64:5b:fd:51:95:d0:c7:c8:d8:2a:bb:
         01:d8:85:f9:01:97:7a:9b:aa:3c:59:a5:f5:b4:36:e7:a1:4e:
         de:ea:46:29:95:aa:d8:36:19:51:dd:a3:a5:d4:0a:2f:f3:bc:
         ea:61:31:2c:19:f4:86:10:2e:f8:03:31:d5:4d:89:17:a7:b5:
         22:47:ad:6a:a4:91:33:d9:31:60:43:0e:a8:3a:6f:1b:b9:f4:
         60:e5:75:11:01:5c:3b:90:d2:f0:85:0b:9c:16:7c:99:9a:32:
         8b:bd:1d:fb
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 15 20:46:35 2025 by rpki-client