Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/39d7aacd-f349-4a6b-a4b8-d829e9d29a4f.roa
File:                     39d7aacd-f349-4a6b-a4b8-d829e9d29a4f.roa (raw, json)
Hash identifier:          Rnx6lIGuKJ4jndTPD2OLySbnbN6lxojp9AWv55KoCK0=
Subject key identifier:   0C:32:FD:00:DE:F3:FB:2A:4C:C1:C6:72:97:F5:37:BD:45:5E:B8:4F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2E7FEBD4AFF8726AABF4DD37FCC9C3CC46D219F2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/39d7aacd-f349-4a6b-a4b8-d829e9d29a4f.roa
Signing time:             Mon 04 Aug 2025 15:32:14 +0000
ROA not before:           Mon 04 Aug 2025 15:32:14 +0000
ROA not after:            Mon 08 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fff:40a0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:7f:eb:d4:af:f8:72:6a:ab:f4:dd:37:fc:c9:c3:cc:46:d2:19:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  4 15:32:14 2025 GMT
            Not After : Sep  8 23:59:59 2025 GMT
        Subject: serialNumber=2d7ba7023c79e97983237539fae6e461194cb792bbf1a10e9ae7a0c8c719c8fa, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:66:b7:96:64:5e:77:4c:13:ef:33:f0:95:11:
                    c8:76:13:84:1c:9f:9b:1d:31:4c:3a:d3:09:8b:59:
                    0b:be:fa:ab:95:e9:81:12:99:fc:60:0d:83:1e:de:
                    ec:66:b6:fb:df:30:a1:6e:6d:9f:5c:cd:97:b2:cc:
                    ad:2c:da:11:68:4c:5f:de:40:ec:f1:1a:a1:c4:89:
                    fd:ff:9d:b3:96:0b:6f:f3:f8:66:df:3f:79:a8:fa:
                    f3:a4:84:cb:cf:bf:59:be:c9:56:7a:50:79:55:7b:
                    e1:05:f3:85:43:b5:5b:33:01:86:c7:fe:e2:7b:8e:
                    a9:fa:60:81:14:3b:da:75:08:c0:2e:7e:80:b2:e0:
                    40:24:7e:2c:e6:c8:21:78:a7:4a:4c:d0:e0:fb:d1:
                    84:27:e8:17:93:2f:3a:f7:43:cc:f6:1d:4c:2f:13:
                    47:28:d1:38:6d:74:fe:39:9d:d8:7c:aa:fe:64:be:
                    e3:91:38:f8:ee:e8:2a:e2:17:3f:63:d9:2f:85:16:
                    d1:82:b4:4c:9f:4b:1d:cb:1d:2c:07:bc:1c:63:01:
                    d2:6d:95:b4:5b:70:bb:34:13:7c:f1:d6:88:be:55:
                    52:4f:ab:c0:03:cc:5f:ab:ec:b8:22:4a:ce:d2:55:
                    ce:5c:44:11:70:27:c5:73:73:fe:78:9f:da:99:eb:
                    19:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:32:FD:00:DE:F3:FB:2A:4C:C1:C6:72:97:F5:37:BD:45:5E:B8:4F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/39d7aacd-f349-4a6b-a4b8-d829e9d29a4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fff:40a0::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:70:47:a0:5c:60:38:87:38:a6:b6:17:70:04:06:46:05:13:
         af:5c:5e:b5:0c:34:c0:09:bc:36:5c:50:ec:f4:bf:07:46:3d:
         09:b3:8d:20:6a:35:65:4b:5a:7d:f0:c4:ff:3f:a9:14:12:c3:
         0f:e6:96:ee:e4:cd:d8:6a:e6:3d:7c:92:94:09:89:6d:e7:62:
         6e:b5:f6:b2:b4:c1:2e:a7:87:a4:97:4a:4e:dc:5f:e1:c6:54:
         00:ea:9a:1a:80:45:47:7d:22:bf:4d:98:6a:ef:af:ee:5e:8a:
         67:90:b7:cd:9b:4f:65:25:da:f4:2e:c6:4d:2d:53:37:21:1e:
         9f:e2:7a:98:c1:95:a2:04:cd:31:94:fc:f4:6b:a1:d3:80:14:
         aa:82:88:68:10:d4:f1:36:79:38:53:6e:c8:b5:d4:f1:c5:7c:
         64:a4:fb:77:5e:68:53:3c:3c:d3:b5:d9:7c:06:57:2f:47:1d:
         4f:52:92:9d:77:62:f5:af:c6:75:c8:08:f3:3a:af:13:8e:cf:
         e2:67:ca:6c:f2:f5:68:75:7b:17:f2:d6:a1:10:27:e1:73:1b:
         2c:95:d6:25:a6:c6:cd:2e:fe:66:30:80:71:c5:16:56:69:df:
         08:15:ea:ae:bf:de:74:de:7c:ae:f4:c2:8a:d7:f3:ab:cd:ae:
         13:f8:4f:98
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Aug 4 22:14:33 2025 by rpki-client