Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/606042bc-09ce-4328-8e07-400d09289731.roa
File:                     606042bc-09ce-4328-8e07-400d09289731.roa (raw, json)
Hash identifier:          a/GtERf1S3zCXxIM+BpuEbl9Y22hxDC2dj9DVjYJaNA=
Subject key identifier:   ED:F2:DA:C1:07:68:1E:35:28:FB:3F:59:C8:01:BE:B8:11:F7:6C:5D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       56180D4BBEF821C6C6CDD2BF35A2C7992B547C7B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/606042bc-09ce-4328-8e07-400d09289731.roa
Signing time:             Tue 22 Apr 2025 00:20:19 +0000
ROA not before:           Tue 22 Apr 2025 00:20:19 +0000
ROA not after:            Tue 27 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff2:c0c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:18:0d:4b:be:f8:21:c6:c6:cd:d2:bf:35:a2:c7:99:2b:54:7c:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 22 00:20:19 2025 GMT
            Not After : May 27 23:59:59 2025 GMT
        Subject: serialNumber=1e165bbec34432adb8ed58cb055057371cab7e7bad28a04b6835d8606c19197b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:04:d1:53:a3:6a:fd:86:90:73:0b:a6:fc:a8:
                    69:ce:8f:0e:61:b0:9b:c8:f0:7b:44:9c:f7:0a:eb:
                    98:df:c2:f8:ef:c1:2f:e7:41:a5:33:d1:22:c8:a6:
                    a0:5c:d5:57:41:3f:5c:66:52:12:b3:73:2d:76:15:
                    e8:b7:76:c9:11:c3:3c:72:a5:1f:7c:5a:37:21:3a:
                    ba:de:2e:99:a0:29:85:fa:8c:95:6e:b1:97:93:a9:
                    6b:1b:b7:15:19:40:61:0b:91:a3:14:4b:50:8b:b7:
                    e8:16:8a:23:a2:5d:23:6e:4c:78:f8:26:d7:7f:da:
                    2f:79:77:67:13:99:2a:0a:4b:92:ab:4e:35:3a:71:
                    7c:9a:7b:99:79:15:23:07:90:0a:c4:b6:b3:96:70:
                    0a:2e:1c:c6:80:10:d5:9b:3c:2b:99:6a:7c:90:b4:
                    f9:36:d4:18:0d:26:94:7c:ee:85:df:8a:f5:6e:e9:
                    f0:ab:32:e4:96:12:6c:df:97:33:28:d3:ae:95:96:
                    49:77:16:09:e1:3f:87:68:0d:78:1d:c2:21:8d:31:
                    f0:30:c9:34:bf:1e:1a:8a:09:10:3b:d2:f2:2e:8c:
                    66:41:29:54:d8:5e:c6:9e:45:c8:8d:01:73:34:1d:
                    3c:32:11:44:f3:64:70:99:75:3a:5c:50:c9:62:77:
                    71:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:F2:DA:C1:07:68:1E:35:28:FB:3F:59:C8:01:BE:B8:11:F7:6C:5D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/606042bc-09ce-4328-8e07-400d09289731.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff2:c0c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         3f:13:9b:54:26:02:ab:f7:ad:e6:2c:dd:b5:40:bc:39:88:c4:
         17:5b:4e:12:5a:07:e9:5a:95:91:4d:5d:fd:e6:7a:7b:fe:06:
         32:94:6d:23:88:d7:5f:36:c9:4f:21:c5:2c:50:bd:d4:cf:43:
         a7:8c:4f:53:15:a4:33:fb:a4:a9:2a:b3:ad:12:70:c1:75:75:
         3c:c0:c2:8e:ce:5a:a0:43:d6:15:03:14:a4:3d:c1:69:d8:81:
         51:4a:15:b6:d2:05:c3:c3:b8:72:68:8a:68:f1:6d:ad:a2:e0:
         a6:57:fb:eb:17:d6:06:74:56:46:27:cc:5e:45:b2:c0:fe:47:
         d0:a5:3d:b6:01:53:b5:d5:3f:e6:34:61:2a:bb:fb:74:00:e0:
         dc:8b:f8:44:56:48:42:40:4e:57:b0:9a:73:6c:f9:e7:01:c5:
         27:24:98:7e:68:f3:a3:2b:5b:66:d4:c3:69:59:f0:07:5d:a9:
         dd:eb:41:eb:eb:a0:6c:ae:25:ce:e9:36:33:57:44:02:1a:c9:
         f9:65:f1:d5:2f:35:ee:43:02:33:79:6e:ae:90:df:0d:23:ae:
         4c:bf:26:54:df:80:73:1e:37:2f:e9:c3:f0:34:df:5f:e9:9b:
         f5:64:45:e0:31:6d:a9:16:70:81:fb:67:80:74:d7:8b:b4:96:
         d6:eb:b3:bc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:54:33 2025 by rpki-client