Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/51d50b39-7870-44a9-b76b-572243a73f11.roa
File:                     51d50b39-7870-44a9-b76b-572243a73f11.roa (raw, json)
Hash identifier:          0c/lIUOoyv2CShjw8m8wrKJvKYHjZFIuvu2ADeD9vOc=
Subject key identifier:   24:EB:1B:F9:0A:52:A2:78:EE:DB:8C:31:E7:3E:61:85:BF:6A:52:14
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3A41E3DBC3200ABC9CFAA1B5F4156313EE93F592
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/51d50b39-7870-44a9-b76b-572243a73f11.roa
Signing time:             Wed 11 Jun 2025 00:11:48 +0000
ROA not before:           Wed 11 Jun 2025 00:11:48 +0000
ROA not after:            Wed 16 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f00:40f0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:41:e3:db:c3:20:0a:bc:9c:fa:a1:b5:f4:15:63:13:ee:93:f5:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 11 00:11:48 2025 GMT
            Not After : Jul 16 23:59:59 2025 GMT
        Subject: serialNumber=bc4c0af2617f274e4b461dce9601a1556f2431760af8eca744769d856ec8ec45, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:98:d2:c4:a5:95:8e:a3:21:b2:a9:cd:55:e3:
                    13:28:3a:90:86:d1:1c:be:16:40:d8:28:2e:59:a9:
                    f3:7c:63:81:ce:6f:e1:4e:24:a9:a9:e5:15:b8:ed:
                    9b:ee:b6:99:f1:75:9e:bd:b6:d6:ad:1f:45:fd:db:
                    bf:dd:cd:fc:99:f9:4a:8c:a5:ba:41:5a:50:d4:5f:
                    b0:47:0f:95:8f:07:21:46:14:04:68:86:16:bb:6b:
                    40:3f:05:b4:37:e8:5b:de:4d:f3:1d:f5:9d:1e:23:
                    fe:27:1d:e0:82:db:02:e8:3c:00:59:ff:60:e0:5a:
                    71:4d:b3:49:cf:84:11:ce:dc:88:38:72:e2:0b:71:
                    a7:16:03:e9:1c:a7:15:e4:64:ef:b4:df:48:a1:cb:
                    24:41:24:5b:f0:18:92:df:b4:3d:b5:83:2c:40:3c:
                    31:07:a7:2a:e0:06:ca:15:fe:8e:47:c2:78:f7:75:
                    02:24:03:0f:3f:e1:ca:27:7c:86:e0:94:0b:91:81:
                    f1:ce:62:4f:d7:e5:00:ba:36:8b:46:f4:71:59:39:
                    ba:8a:42:b9:f4:2f:6b:3f:fe:84:56:8e:ad:b2:ce:
                    03:74:e9:65:68:c5:15:71:ed:81:52:c5:28:b0:b2:
                    b4:50:c7:a3:ab:7f:b4:60:f0:54:6e:bc:f2:31:ac:
                    e2:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:EB:1B:F9:0A:52:A2:78:EE:DB:8C:31:E7:3E:61:85:BF:6A:52:14
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/51d50b39-7870-44a9-b76b-572243a73f11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f00:40f0::/48

    Signature Algorithm: sha256WithRSAEncryption
         ac:f6:ef:34:7f:4a:ba:5c:64:1f:8c:b8:8f:ba:5e:1b:0f:0a:
         cf:ae:c4:00:02:53:ff:95:9f:e3:be:fe:af:81:fb:c0:e4:be:
         37:b3:76:47:4e:3d:43:8b:06:49:6b:cf:2e:bd:84:c9:b4:a6:
         62:13:51:1a:27:e1:73:41:1e:f1:40:6f:b0:34:fd:af:07:97:
         c7:9a:e3:38:2a:16:42:80:29:16:7a:db:98:05:a8:37:41:47:
         23:19:7f:c0:1c:08:33:fa:ff:de:53:20:94:87:67:42:78:67:
         e1:79:78:d7:2f:ed:4e:7e:e8:46:62:b8:80:a4:42:0b:64:c9:
         a0:39:ea:ff:ec:4d:5d:83:f0:50:cb:16:16:74:de:37:39:e6:
         a2:98:4c:cb:ce:19:48:a7:6a:78:2d:d7:f6:06:c7:e8:0c:58:
         bd:ba:53:1b:7f:e7:01:9f:ac:de:b6:31:ee:a3:c8:64:f8:4e:
         1d:d4:4a:ab:6f:e3:05:5a:eb:e4:cd:b9:06:c3:97:58:a8:7c:
         85:90:0d:98:a0:fb:3a:e7:d2:0e:10:92:91:33:2a:c3:b7:2b:
         bc:30:5b:c7:0d:d2:3b:f0:a8:1f:b6:c8:6e:37:6f:00:ec:97:
         0f:bf:82:e6:1d:98:98:c2:6c:b3:34:19:66:bb:63:a5:b4:35:
         d1:c9:83:56
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 14 06:37:24 2025 by rpki-client