Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/186224eb-58a9-4d11-bc6b-39128a803177.roa
File:                     186224eb-58a9-4d11-bc6b-39128a803177.roa (raw, json)
Hash identifier:          G+mHcXwr0wRNWh+7OAjp8pG+skGJUeg2qS+AGG9EYTA=
Subject key identifier:   DB:66:7A:2A:1A:86:E2:18:DA:34:62:15:BB:7F:DE:EE:48:6F:A0:17
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6BA3541F73B00353744F6604AF0A563F30CA5C28
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/186224eb-58a9-4d11-bc6b-39128a803177.roa
Signing time:             Tue 22 Apr 2025 16:11:42 +0000
ROA not before:           Tue 22 Apr 2025 16:11:42 +0000
ROA not after:            Tue 27 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f69:6000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:a3:54:1f:73:b0:03:53:74:4f:66:04:af:0a:56:3f:30:ca:5c:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 22 16:11:42 2025 GMT
            Not After : May 27 23:59:59 2025 GMT
        Subject: serialNumber=26a54f62bdae665e2b44a88700c38e51b37fee49c7906a1036f5544c4a6c99c3, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0a:98:3f:eb:34:05:8e:c1:2e:4e:cc:98:f1:
                    5b:97:19:bf:c7:ec:78:82:c8:e6:7e:1e:ce:8c:a3:
                    45:fd:c3:69:20:58:fe:0d:ef:37:4b:44:64:31:03:
                    32:f2:5b:75:4c:ca:4e:00:8e:64:77:e1:ab:f6:8e:
                    65:1a:50:1f:5f:45:09:b2:7e:68:b8:d4:a8:75:2c:
                    0a:3e:b6:d0:ff:98:e5:62:3c:c0:00:f8:fc:c1:6a:
                    95:5a:dc:0a:28:5f:5c:6b:30:31:80:53:f5:92:e2:
                    68:73:04:c6:a3:8e:b6:99:e5:ef:6c:d1:0c:6c:45:
                    29:12:9c:cb:56:a9:7a:9e:5a:f7:03:08:0b:0d:ff:
                    77:fc:07:c9:9d:49:45:ef:cb:2a:b8:93:28:e5:95:
                    0a:f1:e0:3f:9f:9b:33:2b:dc:e3:04:8e:73:c6:f3:
                    50:dd:f1:ac:80:01:57:36:2f:2f:c1:5a:f0:16:a5:
                    ad:c7:df:60:72:cf:9f:2e:e9:02:8d:55:81:72:5b:
                    ba:0c:88:1c:30:73:2c:64:73:c8:40:bf:22:5c:e4:
                    f8:47:f6:00:40:73:5c:53:fc:99:cf:06:72:35:9a:
                    14:26:d7:1d:c5:ee:15:73:30:9c:ef:f0:3a:61:7e:
                    c8:4b:8a:7e:e5:ba:b6:a6:e9:87:37:3a:dd:e8:5e:
                    d3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:66:7A:2A:1A:86:E2:18:DA:34:62:15:BB:7F:DE:EE:48:6F:A0:17
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/186224eb-58a9-4d11-bc6b-39128a803177.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f69:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         50:c8:84:a5:ef:17:ee:c1:2d:f3:ee:16:5a:03:39:10:dc:1c:
         0a:bb:51:4c:41:2f:01:3e:e5:26:17:34:5b:52:43:e1:04:a2:
         f8:cb:c8:7c:bb:72:05:e9:21:e9:e8:cd:aa:ce:47:10:1f:bd:
         23:aa:ae:2b:85:27:0c:36:73:64:44:8c:f9:eb:5e:7f:7e:42:
         98:97:4e:66:46:d0:9f:52:32:93:4d:b9:87:88:49:eb:06:8b:
         d8:92:4f:53:ac:1d:61:f9:65:28:13:3b:22:da:bf:e2:93:ee:
         ab:26:02:42:69:ce:ff:be:03:ad:d8:7a:ad:32:ec:61:6d:ae:
         4e:f9:9b:39:7f:4c:a4:ed:74:8f:75:45:14:88:2d:aa:b1:a6:
         2b:85:89:95:ac:52:d0:f2:82:ff:d8:51:0a:e4:d5:4b:c2:db:
         03:ab:c7:e0:b2:15:41:5f:31:7e:14:9d:39:0d:ef:ab:4d:69:
         cd:d6:b8:f3:7c:31:7b:f5:a6:6e:c0:49:ef:b7:77:39:14:bc:
         7f:3c:a2:03:87:22:fd:e0:0e:35:84:0d:41:2b:07:1d:7d:eb:
         db:8b:d7:d3:a5:6f:6c:9a:40:94:4b:c3:f7:a6:f3:00:5c:2f:
         ce:00:be:5b:d9:1a:a2:dc:91:e3:32:fe:3f:ea:c2:f0:e8:36:
         71:51:a4:5e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:52:23 2025 by rpki-client