Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1e93c151-9991-4540-b909-c916d5d97379.roa
File:                     1e93c151-9991-4540-b909-c916d5d97379.roa (raw, json)
Hash identifier:          C0q7nrpPI3MMOFNNzy79phqxlTviNVOdGa/BNiNy8kU=
Subject key identifier:   49:12:83:3D:44:C1:E3:83:43:D5:CF:F2:03:6B:28:E2:57:09:6E:ED
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4806B7C7B512A6EAC41A1327811D5FB4398E69CF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1e93c151-9991-4540-b909-c916d5d97379.roa
Signing time:             Mon 04 Aug 2025 17:11:51 +0000
ROA not before:           Mon 04 Aug 2025 17:11:51 +0000
ROA not after:            Mon 08 Sep 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f24:4000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:06:b7:c7:b5:12:a6:ea:c4:1a:13:27:81:1d:5f:b4:39:8e:69:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  4 17:11:51 2025 GMT
            Not After : Sep  8 23:59:59 2025 GMT
        Subject: serialNumber=998939676eedaabd94050efec34060fd288bea1948a06272466b92f7740a8490, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2d:6b:a9:2a:63:d8:50:97:1c:7e:67:56:2e:
                    62:07:7c:90:cc:5b:97:33:e8:f7:8e:7c:3f:5e:6b:
                    36:8c:9c:bf:75:f8:21:3a:b3:c4:52:cc:98:5c:3a:
                    39:8c:e4:25:8a:97:66:4f:75:04:f6:01:dd:dc:24:
                    12:c1:d4:5f:3b:6b:9d:1a:a4:6b:0b:2d:56:6f:2e:
                    96:69:73:05:50:1c:25:70:ca:62:7b:cc:89:e0:9b:
                    85:1d:4d:ec:f6:eb:4d:ea:68:c5:72:19:7a:b6:34:
                    41:6d:de:59:9b:a0:da:65:6c:37:fc:25:c8:42:26:
                    cb:71:4f:b0:34:e4:e9:51:04:83:3e:2d:74:6f:af:
                    da:1c:b8:fa:98:dd:9a:b8:dc:98:34:61:c0:56:c8:
                    83:de:6f:e9:84:44:45:4e:ae:be:0f:e8:d4:17:3b:
                    88:f2:2d:4f:03:ce:3d:6e:af:ae:e9:cf:cf:94:05:
                    66:e5:ea:ca:2e:a0:f7:d2:cd:11:fb:85:58:c8:44:
                    9d:d3:38:e8:f5:44:3f:f6:5f:a5:98:7f:9e:e7:5f:
                    9d:34:b7:f4:c1:0c:03:58:45:92:d8:33:b5:62:10:
                    a1:b4:69:49:46:bb:8a:60:15:06:f8:93:f3:1d:32:
                    35:38:c8:be:af:ed:dd:45:d0:1e:d9:17:1f:cc:72:
                    48:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:12:83:3D:44:C1:E3:83:43:D5:CF:F2:03:6B:28:E2:57:09:6E:ED
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1e93c151-9991-4540-b909-c916d5d97379.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f24:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         63:81:84:2a:15:1b:4a:c8:fa:1d:d7:b9:a8:af:7c:b4:4a:65:
         ac:b5:ba:f6:99:8f:c7:6d:36:c1:6d:d1:bd:20:fc:b8:0e:bc:
         8d:8a:d3:29:ad:3d:c4:41:17:1a:7c:0f:bf:60:43:fb:0b:f7:
         2a:4d:5d:64:0b:40:66:43:0b:e4:68:73:3b:3d:ec:28:c0:08:
         95:25:00:fe:38:8d:82:a9:77:b9:e9:e8:10:fb:29:eb:97:a4:
         a6:26:fb:67:ec:21:6e:d4:e7:9d:c9:8b:a7:b9:93:f9:bd:8e:
         f9:67:8f:7e:0c:99:73:d7:ab:67:71:6a:f2:64:4c:c8:cf:ca:
         97:c1:e8:49:30:c7:fb:0f:8d:db:42:b7:42:4f:9f:9c:a6:7a:
         bc:6e:79:d9:a6:81:42:86:f3:f6:b3:8d:03:0e:7c:41:a7:f8:
         b0:d0:19:bf:62:1b:7d:14:a4:9b:69:9a:24:e4:ea:d8:2a:20:
         4e:70:80:13:1c:86:98:1e:49:85:c4:2c:32:6d:d1:e8:6c:90:
         fe:89:df:3c:7f:f8:39:7e:84:cb:a0:68:9c:21:8b:a8:05:f5:
         8d:19:2f:c4:45:83:09:ab:70:8b:ca:c8:d8:18:1c:df:c6:83:
         91:83:1a:1a:db:46:ca:e9:c4:51:70:73:0d:c9:0a:a2:0f:2b:
         b4:ea:bc:10
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Aug 9 10:41:51 2025 by rpki-client