Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/27b37178-c8b2-446a-9459-9b54ee75e23e.roa
File:                     27b37178-c8b2-446a-9459-9b54ee75e23e.roa (raw, json)
Hash identifier:          GwoEDxVJDnr2Zd6XnRESY+2xeBTZUbZTk7RykCaBrqI=
Subject key identifier:   38:E9:C6:0C:37:32:99:C9:3D:B2:7A:2B:AF:E6:71:20:74:00:AB:08
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       774F32F86DEB54052A8DDD878E96C4681EC8217C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/27b37178-c8b2-446a-9459-9b54ee75e23e.roa
Signing time:             Fri 13 Jun 2025 00:51:28 +0000
ROA not before:           Fri 13 Jun 2025 00:51:28 +0000
ROA not after:            Fri 18 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fff:a440::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:4f:32:f8:6d:eb:54:05:2a:8d:dd:87:8e:96:c4:68:1e:c8:21:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 13 00:51:28 2025 GMT
            Not After : Jul 18 23:59:59 2025 GMT
        Subject: serialNumber=bf24b9ff13330d500b151548af241aa9155a144eeb82316513c9183ffc8963da, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:1c:46:2a:1a:74:7a:21:d3:31:07:f3:7d:b5:
                    a2:21:a1:55:5b:57:c4:54:f5:34:a9:19:ed:23:df:
                    c9:bc:f0:73:c2:23:15:ee:dc:ee:2e:52:6f:b2:78:
                    98:95:bb:4a:30:44:f1:2c:61:01:72:3d:e0:ee:8e:
                    cf:6a:b5:ee:a2:93:5c:b7:f8:c2:fb:10:1f:1f:64:
                    a7:e3:3e:54:96:19:c1:b3:67:dc:d0:23:e4:36:be:
                    fe:19:b3:c9:af:31:14:b2:78:67:72:4f:1f:e2:09:
                    ec:04:00:d4:e8:fa:6b:14:65:26:b0:ec:ae:ef:96:
                    1c:43:c7:b3:88:0d:65:74:ba:16:0f:f7:f0:aa:26:
                    65:18:65:a0:9d:f3:48:b5:5f:97:87:0e:59:07:5e:
                    c9:c7:fb:f6:94:69:79:2c:55:fb:a4:7a:cf:13:cc:
                    07:ce:6a:63:d5:8d:b8:53:0d:6d:be:6c:ed:61:a5:
                    f5:1a:46:06:19:c1:a5:63:bb:c9:d1:5e:93:8f:f6:
                    66:e2:b3:dc:1b:be:fa:ad:e4:88:60:f5:e7:2a:ee:
                    e8:ae:3b:18:21:76:62:b3:d6:57:e9:b1:97:9a:96:
                    21:59:a7:e1:13:72:46:87:f5:cc:ff:a2:84:2c:d0:
                    01:18:81:69:30:63:d7:1e:e7:2c:35:dc:69:3e:0c:
                    3a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:E9:C6:0C:37:32:99:C9:3D:B2:7A:2B:AF:E6:71:20:74:00:AB:08
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/27b37178-c8b2-446a-9459-9b54ee75e23e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fff:a440::/48

    Signature Algorithm: sha256WithRSAEncryption
         d6:00:55:a4:bd:3d:ca:bd:9d:7b:fe:1d:4f:4c:a9:0f:17:f0:
         fd:c4:34:7f:e0:43:f0:2b:b4:09:3e:c1:e1:34:51:69:d5:44:
         5e:94:de:d7:43:42:b4:59:83:11:f2:a4:64:89:02:09:10:cf:
         63:48:57:8b:87:d1:1d:99:10:68:f0:08:6c:06:ba:a3:6f:9a:
         85:a6:e8:00:c2:fd:6e:0a:84:73:2a:f9:c7:93:94:d2:2e:9e:
         b0:7f:0e:54:0e:7d:d6:29:a6:07:07:98:40:fa:9f:c9:d5:f8:
         86:44:b9:9c:54:25:13:6c:9f:16:b8:af:8c:83:92:e2:ec:02:
         c5:83:a3:52:cd:d5:b2:25:e4:52:9c:38:7c:52:bc:b0:7a:c2:
         cc:89:87:75:4e:9b:0a:0d:ad:4f:4a:46:19:c9:34:1c:30:75:
         84:a7:29:b2:55:e4:5f:84:c0:e9:33:e1:8b:29:c1:09:6a:b8:
         f5:50:08:c1:c4:48:21:7b:9c:a2:69:25:d5:c5:8d:e9:a2:85:
         74:f8:ef:4d:ba:1d:fd:c1:e8:c8:87:76:39:21:6c:c4:72:ed:
         38:1f:ae:f1:f1:e9:c8:b1:ea:bb:5d:cf:1e:e6:66:64:93:0c:
         e4:e1:39:49:fe:4a:ea:1f:57:05:c2:5e:10:c9:d6:ae:d2:73:
         3f:d6:d8:2a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 14 06:48:55 2025 by rpki-client