Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/33a8e79a-f50b-45fa-87c0-dad918540ac7.roa
File:                     33a8e79a-f50b-45fa-87c0-dad918540ac7.roa (raw, json)
Hash identifier:          aGfG/rKKspCRvruFFeRzBMmQ4EqUHxmeoA0qPdN8Vow=
Subject key identifier:   80:7A:55:B5:39:8B:45:5E:55:00:78:F9:9C:F9:1A:6A:14:F9:CA:96
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0FFD7F2050FD2675404EAB9F7B7823ACDB8B523D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/33a8e79a-f50b-45fa-87c0-dad918540ac7.roa
Signing time:             Fri 13 Jun 2025 16:52:09 +0000
ROA not before:           Fri 13 Jun 2025 16:52:09 +0000
ROA not after:            Fri 18 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f15::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:fd:7f:20:50:fd:26:75:40:4e:ab:9f:7b:78:23:ac:db:8b:52:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 13 16:52:09 2025 GMT
            Not After : Jul 18 23:59:59 2025 GMT
        Subject: serialNumber=c2418c4ee39463153b4b74e4b4c992e07ec62bbe1027c5f9f7eef32a03b5ae7c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:1c:94:be:40:96:7c:47:7f:60:35:7f:6d:d2:
                    a3:7f:18:ab:8a:00:0a:d4:51:4f:84:60:55:4e:9f:
                    39:29:8a:ea:f0:f2:3f:06:03:1d:cb:30:ee:00:2f:
                    ff:d7:a6:6a:77:73:1c:a0:1f:00:e7:c4:d2:bd:ef:
                    62:5b:88:72:32:a0:2e:b7:84:f0:61:8f:ff:ea:26:
                    83:b4:b5:39:43:53:c4:31:32:8c:fe:df:28:c2:ef:
                    7a:0d:50:7c:24:f2:29:9f:1f:a6:97:2d:91:45:e0:
                    25:ad:d3:11:e1:ab:d9:0a:89:f3:cd:b1:ce:43:a3:
                    b1:06:5d:31:d0:5c:7c:cf:7d:28:38:69:93:aa:f8:
                    8c:d6:8e:aa:c3:d1:32:53:38:79:a4:65:ee:33:83:
                    79:74:7d:56:a0:98:b7:ee:65:80:d9:73:6d:18:c7:
                    16:af:1a:cb:21:11:5f:db:a7:2b:df:d0:af:44:5a:
                    b2:d9:b5:00:73:2b:3b:70:c9:61:fb:8a:b0:98:d0:
                    28:a5:6f:ce:0e:f0:34:e8:02:98:82:4a:a2:8f:df:
                    e4:83:e4:22:27:02:7b:12:4c:5d:4c:4b:d8:1e:ee:
                    7f:e0:bb:bf:29:07:04:79:3f:9b:52:aa:57:71:bd:
                    8b:62:bc:bc:c7:6f:2b:d8:7e:92:e1:9d:87:0c:70:
                    fa:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:7A:55:B5:39:8B:45:5E:55:00:78:F9:9C:F9:1A:6A:14:F9:CA:96
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/33a8e79a-f50b-45fa-87c0-dad918540ac7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f15::/36

    Signature Algorithm: sha256WithRSAEncryption
         ab:92:b0:33:34:b9:ac:44:f0:c9:2c:d6:d0:89:2f:3a:fe:43:
         07:62:80:a2:cd:21:06:7a:a9:44:bb:08:4c:12:79:dd:9d:65:
         4a:5b:eb:0f:2c:3c:01:14:3f:5f:58:5e:c8:01:f1:9c:98:bb:
         ff:07:e0:c1:67:01:45:d4:5c:e8:eb:48:7e:ca:27:57:02:ec:
         e9:ab:01:d3:e3:19:53:d6:42:67:d7:71:4d:d7:dd:a0:b5:86:
         1d:17:79:50:de:3f:00:8d:a2:ca:12:ab:de:c9:db:42:75:76:
         2d:66:3e:15:68:48:fa:76:97:63:e3:99:b0:d2:af:80:0a:d4:
         82:94:e6:63:f5:89:3c:33:27:78:bf:86:57:09:c3:5c:c6:01:
         ae:74:d8:5a:8f:26:ee:c5:5d:a8:43:9f:68:33:b1:22:b7:36:
         09:9d:1d:74:32:33:76:ae:c9:49:04:78:0e:5f:c6:cb:17:1e:
         a4:a4:25:b8:7c:77:3e:e6:eb:41:a0:21:36:0d:d8:a0:4d:84:
         ba:0c:49:75:e6:ad:81:b8:ba:97:ca:ed:6e:3e:82:c7:89:b6:
         a5:33:66:93:ed:16:41:93:03:e9:b5:5a:82:6f:69:6e:4c:50:
         ee:9f:e4:89:a5:fe:6a:74:a0:dd:07:50:aa:22:4d:fa:61:bc:
         a8:d6:51:ff
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 14 06:55:41 2025 by rpki-client