Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62f09371-735d-42fb-9b57-288b7c3a6758.roa
File:                     62f09371-735d-42fb-9b57-288b7c3a6758.roa (raw, json)
Hash identifier:          mrDs9gY6TpuETS/AfGEAd2g4am9W/17pBJo2SHmfx4c=
Subject key identifier:   93:D0:E9:B8:BE:D0:0C:02:A1:BC:EB:E2:EF:04:1B:62:8C:5A:A6:84
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       232F00AFFB1B7046CE473F86BE633F88A24880AA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62f09371-735d-42fb-9b57-288b7c3a6758.roa
Signing time:             Wed 04 Jun 2025 00:11:45 +0000
ROA not before:           Wed 04 Jun 2025 00:11:45 +0000
ROA not after:            Wed 09 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f60:3400::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:2f:00:af:fb:1b:70:46:ce:47:3f:86:be:63:3f:88:a2:48:80:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun  4 00:11:45 2025 GMT
            Not After : Jul  9 23:59:59 2025 GMT
        Subject: serialNumber=518fb42e970a0983b97b8d699470bb67c5ec02d787d32f341abc6c8bc3bcd0bf, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:cd:10:9b:e2:a0:4a:6a:04:c4:01:7f:2a:1d:
                    2b:b3:52:d1:a7:bb:1f:d2:36:1f:ea:e9:79:81:f6:
                    23:67:9c:6e:1b:1b:e4:02:4e:98:ca:e5:a0:a3:3e:
                    a7:ca:ca:be:43:63:47:c1:f3:29:2f:d0:2f:da:ee:
                    2c:8f:d0:03:17:be:d9:be:f3:29:33:a5:de:0b:c9:
                    60:94:f1:96:52:92:13:cb:7d:57:19:ff:54:74:8d:
                    68:33:82:ac:57:82:f4:53:97:32:ae:f2:eb:da:14:
                    b4:9f:13:66:df:0c:5a:b1:44:b3:04:0a:99:5a:87:
                    a2:d9:8f:7a:13:70:c4:86:1f:8f:22:a2:e0:35:27:
                    97:9c:f1:64:95:62:f9:7e:e3:a3:68:b0:86:a0:dd:
                    55:cc:6e:87:fb:81:b8:a7:47:ea:5f:71:08:d4:4a:
                    f2:43:80:cb:f4:c4:7a:85:eb:0a:c7:be:f5:ba:17:
                    1c:a9:16:90:da:03:d9:54:9d:a6:0a:c7:c5:59:3c:
                    f5:f2:ec:24:8a:2d:79:d6:80:df:1b:c4:8f:94:8c:
                    ce:fe:3a:34:00:31:bc:48:6f:01:d6:cc:ab:0d:fe:
                    a3:7a:56:f4:87:cb:73:c1:06:6b:52:32:02:e6:99:
                    f8:17:68:23:0c:11:1f:c5:f9:94:90:71:fa:82:88:
                    2a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:D0:E9:B8:BE:D0:0C:02:A1:BC:EB:E2:EF:04:1B:62:8C:5A:A6:84
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62f09371-735d-42fb-9b57-288b7c3a6758.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f60:3400::/40

    Signature Algorithm: sha256WithRSAEncryption
         bf:e9:91:9f:28:13:74:06:36:e4:c1:6e:57:08:69:d0:70:08:
         22:b3:9e:c3:66:50:db:7b:1b:b2:ed:75:8d:51:2e:b1:ac:b8:
         c2:1d:3c:56:92:3f:5f:13:fa:89:6c:64:8c:61:49:0f:d7:83:
         99:fb:03:49:9b:f4:3c:52:b6:88:a7:c4:7a:b3:b4:3c:58:46:
         55:f0:54:37:81:5d:29:e8:85:9b:e5:30:6a:41:35:8f:6f:de:
         2f:b2:29:af:14:40:11:f3:56:18:0c:13:ab:bd:d2:58:11:3c:
         67:c3:a7:ed:ed:bc:de:4d:93:28:6c:a4:69:23:b7:08:d0:fa:
         d0:c8:df:93:32:fb:6f:43:44:0d:b8:f7:f9:17:22:7c:1e:30:
         90:03:84:62:c4:d7:25:08:ba:8c:75:a2:8d:97:84:34:bd:41:
         ef:05:34:77:37:62:55:fa:ec:db:98:20:ca:a4:02:2c:81:bb:
         a0:6f:9e:28:d8:79:4c:02:ae:d5:6c:9d:55:62:14:f2:d6:4e:
         44:66:29:28:2f:55:ad:dd:6e:a5:16:18:ed:c4:c3:4b:20:2c:
         c2:b2:e8:12:bf:d3:8e:57:58:e1:3f:7d:aa:a7:50:d8:96:76:
         73:9b:39:38:b7:8a:52:b1:0d:4d:87:5f:c3:52:12:68:08:a1:
         bf:5c:45:76
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 14 06:43:19 2025 by rpki-client