Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/51483cb9-c790-4553-bf9f-798a406fc39f.roa
File:                     51483cb9-c790-4553-bf9f-798a406fc39f.roa (raw, json)
Hash identifier:          Ge09Kc2pjSpKkFKQEpsbV9Jaar1PcCUtGf5kedR/dH4=
Subject key identifier:   ED:AA:A8:46:E2:71:39:9F:54:F2:36:35:4C:28:B5:96:D6:52:3A:C9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0F18C98210DA5B283DD9D8271CA0DAB51B73A707
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/51483cb9-c790-4553-bf9f-798a406fc39f.roa
Signing time:             Fri 01 Aug 2025 16:01:25 +0000
ROA not before:           Fri 01 Aug 2025 16:01:25 +0000
ROA not after:            Fri 05 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f61:7480::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:18:c9:82:10:da:5b:28:3d:d9:d8:27:1c:a0:da:b5:1b:73:a7:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  1 16:01:25 2025 GMT
            Not After : Sep  5 23:59:59 2025 GMT
        Subject: serialNumber=5ad97855080d426368991fb4ca11eb701a4c08728a79d58bc9ce5439425c32da, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a3:96:ce:ca:2c:b4:bc:03:bd:69:2b:1a:c7:
                    7f:6f:7c:c9:fa:1b:a2:92:76:fa:a4:f2:6c:c2:58:
                    1b:2b:f3:4b:0e:31:08:6f:67:9f:e6:d3:47:4f:9e:
                    f3:33:61:2f:90:58:33:5e:16:ac:50:f8:be:1d:82:
                    2a:94:29:5d:66:64:fe:48:da:9b:60:67:4a:3a:97:
                    81:99:4f:4b:34:bf:21:3c:ec:30:55:08:1a:14:e0:
                    e0:12:f5:70:2b:ae:3e:f9:11:2b:46:a9:03:93:3e:
                    10:ee:00:a0:e6:c8:0a:58:f1:4f:d4:4d:1c:9e:a9:
                    39:d3:f4:f6:5b:bc:f8:85:0f:99:5a:c6:6a:d3:4f:
                    39:13:9c:24:11:9a:8f:0f:f8:35:b3:47:a6:8f:a4:
                    5a:a7:63:32:13:cf:a0:ad:9c:55:16:9a:fe:79:e3:
                    42:f7:13:34:f5:b0:e0:65:da:be:97:9f:0c:c0:e4:
                    d6:50:ad:aa:19:cf:86:5e:9e:e8:58:20:ec:30:8a:
                    fe:6a:1d:fc:c3:57:12:44:71:1e:7b:7c:b2:56:4b:
                    5d:26:5f:4f:03:e0:07:77:ca:15:e8:9c:71:f3:70:
                    2b:2f:d0:16:43:ff:94:b6:fd:32:9a:50:7b:6c:b6:
                    dc:1d:13:9d:b3:5f:d7:c4:0c:eb:56:a3:c5:85:99:
                    44:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:AA:A8:46:E2:71:39:9F:54:F2:36:35:4C:28:B5:96:D6:52:3A:C9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/51483cb9-c790-4553-bf9f-798a406fc39f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f61:7480::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:55:00:bb:bc:63:ab:20:b9:06:9d:a5:76:d6:17:5f:c5:6c:
         7a:66:3c:05:2e:a9:d2:c4:10:07:4d:c5:03:c1:eb:84:ff:bb:
         2e:7c:90:cd:b7:f1:a5:44:0e:29:05:00:e1:7f:99:0f:61:c6:
         a5:69:f1:77:72:47:1a:09:6e:13:31:d1:a8:7a:5f:c8:22:a5:
         0d:b5:26:c5:65:d1:40:32:3a:59:e3:07:73:33:85:84:45:d1:
         fc:5f:35:e3:62:a3:36:c4:e5:8a:b9:4b:f4:25:6a:b6:b2:66:
         4d:78:f4:7b:fe:c0:fc:c0:87:f6:31:74:c4:9e:38:62:27:83:
         b5:73:3a:07:4f:64:63:2c:54:ed:8d:ba:ca:ec:3e:81:d0:b9:
         55:98:cf:50:60:43:d0:e3:09:7a:2c:10:8a:8d:47:21:0d:50:
         ca:6e:99:84:bd:ab:37:84:78:6f:29:71:24:22:28:aa:72:e7:
         d0:23:94:d1:2a:aa:41:99:86:04:a5:bf:cd:b5:5b:d5:bf:65:
         76:3c:68:3a:50:cb:be:0f:f1:a3:8f:83:8a:12:7b:ff:1a:5a:
         8d:c8:44:98:a3:b0:19:b4:6a:73:51:b7:2d:21:63:14:d1:fc:
         38:ae:e5:c2:7c:08:97:e1:02:59:6a:69:c9:9e:64:1c:d4:8a:
         74:db:97:28
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:18:31 2025 by rpki-client