Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/31263499-132a-4222-9382-b584a30ccae1.roa
File:                     31263499-132a-4222-9382-b584a30ccae1.roa (raw, json)
Hash identifier:          Zx7muaJ7SwyljO0u0P6O38RMQufWBC/J7zuFuTYFiIs=
Subject key identifier:   C1:3B:4D:BB:7F:F0:68:5B:59:31:81:6E:0E:F0:62:67:98:D7:7C:E4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0CEFFD3E96112EF6AFC7C98C9C0054990F10ED1D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/31263499-132a-4222-9382-b584a30ccae1.roa
Signing time:             Tue 22 Apr 2025 17:21:24 +0000
ROA not before:           Tue 22 Apr 2025 17:21:24 +0000
ROA not after:            Tue 27 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f28::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:ef:fd:3e:96:11:2e:f6:af:c7:c9:8c:9c:00:54:99:0f:10:ed:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 22 17:21:24 2025 GMT
            Not After : May 27 23:59:59 2025 GMT
        Subject: serialNumber=565224f45f7a4db3369115fafdfd37094dea7838c2a4f8953441c26cd2fcf8bd, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0d:fa:79:4f:37:ea:cc:8c:02:1a:dd:07:a3:
                    50:38:47:f5:37:5d:aa:d3:d7:06:8e:8b:10:24:82:
                    98:dd:bf:03:dd:c8:91:38:a6:49:b2:4b:83:f9:09:
                    30:ee:e4:fa:24:10:6b:05:71:5e:fc:8f:95:85:ee:
                    99:53:76:51:7c:ce:09:f9:5c:c5:ad:c7:d5:79:1f:
                    fe:91:e6:32:03:c4:b0:bf:56:86:7e:6e:8d:42:ee:
                    63:5b:ba:dc:04:01:45:43:0c:f2:58:a3:d3:a7:2b:
                    65:98:8f:00:a0:d3:67:a3:28:99:ba:5e:5c:97:f9:
                    71:3e:43:e9:d3:c0:d8:f2:89:2f:b7:47:0a:7b:2d:
                    7d:cb:03:fe:2b:f3:48:42:fa:1b:76:9f:0f:f2:f6:
                    27:27:6e:56:69:37:cf:9d:3c:64:a9:43:c1:49:b1:
                    55:5f:2d:95:bc:5a:42:49:a6:a9:63:a7:90:f8:20:
                    9b:d0:f2:81:63:d0:1a:27:81:9e:64:f2:f5:ff:f2:
                    63:51:6b:71:40:2a:16:65:dc:70:39:2c:b8:73:90:
                    31:28:ec:37:1b:96:55:17:8e:59:ae:5d:4a:05:89:
                    f1:71:72:98:7d:2f:0a:bd:d3:c2:0b:2f:65:d7:3f:
                    8e:f6:b0:5a:62:b4:33:eb:db:a5:41:69:98:fd:e7:
                    4f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:3B:4D:BB:7F:F0:68:5B:59:31:81:6E:0E:F0:62:67:98:D7:7C:E4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/31263499-132a-4222-9382-b584a30ccae1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f28::/36

    Signature Algorithm: sha256WithRSAEncryption
         00:df:30:99:48:8a:8a:6e:14:e0:fd:e7:b4:89:db:cb:ff:89:
         15:e6:d6:88:cb:6d:ab:5c:fe:b7:ac:53:1a:a6:4a:69:32:fc:
         ff:8b:9f:e2:be:07:b3:fc:c3:6a:73:97:e3:44:12:48:c5:e8:
         65:12:f1:0b:e3:3c:ad:54:18:84:9a:ea:96:a0:b9:fa:24:54:
         ff:ca:60:65:08:7b:66:5c:86:b6:23:e4:7c:30:98:92:09:2f:
         6e:fe:6d:d0:cd:33:91:b6:e6:80:b9:6a:6e:91:6b:14:cd:50:
         cc:81:b9:6f:07:47:7f:8d:1a:00:95:1d:78:38:38:05:f5:93:
         f3:5e:7f:47:f5:1b:eb:95:9a:c9:20:80:1a:f3:12:5f:75:9c:
         0d:c4:91:5e:78:58:b1:18:74:3d:4f:a4:62:3d:5f:d6:2a:d7:
         ae:a3:63:f2:db:6a:18:0f:f4:89:8c:fb:65:b4:a0:c4:a6:f8:
         92:16:47:c8:3d:3d:26:02:93:63:30:83:fc:33:d2:10:62:1c:
         95:1a:0b:cf:14:11:fe:a8:9e:38:05:22:1a:23:76:05:26:ed:
         4e:b9:7a:0b:13:40:35:8e:b2:12:60:03:46:c0:26:6e:4b:f9:
         09:ad:4f:51:b9:56:90:8b:37:53:fa:5a:9f:1e:3b:ca:20:92:
         c6:1c:cc:23
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:03:57 2025 by rpki-client