Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5594092f-82ef-4d6f-8f58-c5ef49a043c0.roa
File:                     5594092f-82ef-4d6f-8f58-c5ef49a043c0.roa (raw, json)
Hash identifier:          JNH5mJ95thoBiMz15YLmBVt12YTQzwLjPCcFSCBXmyY=
Subject key identifier:   E4:D4:F2:FE:3E:26:CB:2D:B6:DE:2B:94:CB:6F:71:AB:8D:2A:4E:5A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0CA01D6BD7AF35E78432EBEF3DEC7650BA36B570
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5594092f-82ef-4d6f-8f58-c5ef49a043c0.roa
Signing time:             Tue 05 Aug 2025 00:11:58 +0000
ROA not before:           Tue 05 Aug 2025 00:11:58 +0000
ROA not after:            Tue 09 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff3:8020::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:a0:1d:6b:d7:af:35:e7:84:32:eb:ef:3d:ec:76:50:ba:36:b5:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  5 00:11:58 2025 GMT
            Not After : Sep  9 23:59:59 2025 GMT
        Subject: serialNumber=076c9bfc0d2c191a08af84d196f3d42ce44abe2f0c8d0fd3921b73e900b5efb2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0a:fd:45:fc:76:84:1f:c8:d2:a2:99:05:77:
                    18:c7:5c:ad:44:ec:d1:8c:cf:81:f4:71:56:33:3f:
                    ef:1e:be:9b:46:64:b4:55:7f:8e:b0:42:0d:0c:70:
                    73:4c:e9:2d:62:3b:91:37:10:1a:aa:22:b9:14:02:
                    5f:98:aa:69:b0:e8:a5:42:13:c3:ee:4b:1a:e5:22:
                    e8:50:41:64:5a:09:be:18:4b:d1:ea:70:b7:43:dc:
                    66:cb:0d:82:e6:9b:ea:71:b1:04:63:25:d2:f0:dd:
                    fe:e7:53:31:fb:26:45:fd:1f:be:a7:d6:5c:6a:03:
                    66:af:0f:a5:1f:83:8a:d1:b5:aa:6c:ac:6d:73:c6:
                    7c:b6:54:20:7c:ae:55:44:29:1a:df:08:9d:8f:f7:
                    61:11:78:b4:50:5b:61:dd:a2:f1:9a:0c:93:19:7c:
                    aa:fb:fe:a8:f2:72:59:a5:85:73:b0:c0:61:5b:dc:
                    41:c2:8f:e1:49:64:e5:ac:e3:0e:a2:33:73:c5:8b:
                    e0:f2:1d:46:9c:da:e3:1c:35:b8:df:aa:21:0f:50:
                    be:af:61:ce:47:b1:8a:ab:6c:51:25:a2:1f:fc:21:
                    04:99:b3:00:ee:1b:c4:a1:bf:b9:e7:d6:87:30:b3:
                    a1:2e:b3:31:c4:32:fe:03:6d:c4:5c:5c:46:e8:04:
                    1e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:D4:F2:FE:3E:26:CB:2D:B6:DE:2B:94:CB:6F:71:AB:8D:2A:4E:5A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5594092f-82ef-4d6f-8f58-c5ef49a043c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff3:8020::/46

    Signature Algorithm: sha256WithRSAEncryption
         54:04:ee:2a:f5:34:40:4a:04:b2:24:c8:08:99:93:bd:61:b6:
         90:b4:3c:41:d7:ef:42:ea:49:2c:e5:47:83:a2:c3:56:c7:30:
         cb:9b:b8:fa:41:6f:94:ce:7d:07:24:42:f9:4a:c7:44:cb:05:
         0b:e9:c9:95:98:75:50:f2:2c:03:10:7e:a0:d5:ee:2b:51:1f:
         50:d5:2f:e2:01:7b:62:bb:ce:e2:8d:be:ed:dd:35:f1:d8:21:
         ca:2d:a1:59:11:ad:07:47:60:ee:6c:5e:08:69:87:94:dd:ed:
         c4:47:9c:02:be:b1:2c:fe:a0:d9:4c:18:c8:b1:b7:cc:37:5f:
         23:19:a8:b4:2d:91:8b:1b:94:20:f7:5d:7e:30:cd:09:a2:54:
         72:a2:e8:b9:50:9e:01:68:ee:e6:4c:61:9b:66:1d:93:f8:bb:
         ae:4b:5b:c4:e5:ea:f9:15:c1:89:5d:82:e0:cf:37:b0:06:94:
         72:fe:33:be:8b:b9:39:5f:3d:7a:b9:04:03:82:e4:0c:e6:1e:
         fe:cb:ed:e3:ee:84:01:03:c4:e8:6b:ef:68:df:1d:1d:73:5d:
         7e:39:69:65:ee:60:6c:46:cb:65:9b:0a:f3:e4:a4:2a:fd:fc:
         1a:9c:b2:65:62:c1:db:f0:0d:b5:49:5c:16:68:ee:8b:d5:66:
         66:a1:96:d0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Aug 6 04:10:24 2025 by rpki-client