Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ea5b7ae-7572-4cb6-ad11-f441a34761fe.roa
File:                     5ea5b7ae-7572-4cb6-ad11-f441a34761fe.roa (raw, json)
Hash identifier:          WpjOzjRh4LDgcNMrkH9ZKKiUJgeLH57Ot9p/WGqt9iw=
Subject key identifier:   9E:7D:5B:1F:37:0C:7A:D0:88:9D:5D:AE:21:DB:73:4A:55:65:2A:0B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2E12322DB638AA1575D9021572EEEAD119DA5B51
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ea5b7ae-7572-4cb6-ad11-f441a34761fe.roa
Signing time:             Fri 13 Jun 2025 17:01:48 +0000
ROA not before:           Fri 13 Jun 2025 17:01:48 +0000
ROA not after:            Fri 18 Jul 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f2c:c800::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:12:32:2d:b6:38:aa:15:75:d9:02:15:72:ee:ea:d1:19:da:5b:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 13 17:01:48 2025 GMT
            Not After : Jul 18 23:59:59 2025 GMT
        Subject: serialNumber=842ddfe641448dce91df4f600d2e1bac27e8cf1a176e3c0b90dd3b27c2ccff64, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d8:ab:ec:96:6e:13:d8:00:2e:2f:13:e9:2e:
                    8c:b1:35:b0:5c:8b:6f:7f:25:0d:6e:e3:8e:7b:0f:
                    1c:5a:c6:b7:69:fa:c8:a8:7d:e9:45:a9:41:aa:1b:
                    93:37:89:23:65:ae:e9:9f:78:22:2f:dd:82:52:83:
                    de:7a:4c:ab:4e:58:cb:90:f2:fe:a3:1a:13:2b:6c:
                    f9:f8:33:d3:b6:28:ba:a8:79:a3:72:5d:eb:63:b9:
                    33:23:d1:94:d1:f3:de:f0:d6:eb:e5:ca:77:b2:89:
                    e7:c4:26:89:72:96:39:6f:db:51:7a:69:d9:a4:f4:
                    0d:b0:50:35:2a:d2:24:d2:49:14:92:27:08:29:0a:
                    2e:d1:c8:1c:fe:c9:bc:de:34:8e:7e:de:d3:36:83:
                    63:98:9d:1f:38:79:dd:e6:61:22:47:31:c1:f3:7e:
                    8e:a5:4a:2e:f2:e9:88:35:49:ac:b2:5e:e4:db:6a:
                    c2:0f:19:e1:22:52:96:98:0b:e8:e6:2f:c1:3d:13:
                    72:32:68:ec:d2:6b:15:c7:b0:7a:7a:7e:a3:bc:91:
                    5a:be:61:d8:0b:12:1f:77:bb:54:48:80:c3:0f:05:
                    8d:84:e2:37:2a:0e:c5:27:fb:ff:86:55:91:eb:a3:
                    56:6b:c4:1c:05:22:d7:4d:c6:1f:aa:83:fe:c9:86:
                    9c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:7D:5B:1F:37:0C:7A:D0:88:9D:5D:AE:21:DB:73:4A:55:65:2A:0B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ea5b7ae-7572-4cb6-ad11-f441a34761fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f2c:c800::/37

    Signature Algorithm: sha256WithRSAEncryption
         21:8a:8a:f4:f2:ce:fd:63:78:52:dc:88:ab:ae:28:a1:a5:9e:
         41:ff:22:70:7f:a8:53:d8:44:e6:fc:61:f4:0a:c4:e0:58:6d:
         1a:d7:40:cb:fc:f1:11:86:cf:e2:d8:0e:61:c2:97:8c:59:66:
         c2:b2:5f:2f:ae:3c:13:ad:94:5e:e5:fe:79:4c:18:78:37:0b:
         a3:48:3a:79:e8:35:d5:0c:57:79:23:a1:16:c9:e3:2e:19:d3:
         cb:e8:88:ff:44:1a:c9:63:df:54:10:73:18:ba:7f:38:01:4d:
         6b:6d:b4:45:4a:9d:bb:d5:4d:3d:5e:09:9b:1e:fc:3a:81:ab:
         5e:0c:c6:5f:57:95:46:8c:d3:16:c4:92:82:5e:0d:5d:4a:0f:
         9c:5c:15:9a:4c:c9:cc:8a:ed:35:77:aa:1e:47:0c:3a:5a:39:
         ab:69:70:f3:eb:56:e5:42:a8:40:4d:f5:d1:db:f1:a7:23:7a:
         10:62:c2:b3:34:a0:54:f0:be:d7:2c:92:bf:61:b6:10:74:82:
         1a:67:1f:93:1a:93:4d:f3:75:4c:4d:96:a5:ce:10:ea:7b:51:
         1a:01:ea:62:b9:09:96:93:d3:c9:91:49:66:ba:45:0e:2c:f5:
         72:11:c3:58:5e:6f:12:a4:7f:cb:7f:1e:4f:9c:16:a4:b8:7c:
         69:96:cc:0a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jun 17 01:28:39 2025 by rpki-client