Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6731eb50-d436-42ae-bcc6-90d9e6f43edf.roa
File:                     6731eb50-d436-42ae-bcc6-90d9e6f43edf.roa (raw, json)
Hash identifier:          Z5L881+4s42fd0M8b4LPp/x2xBz5Of7RDEA8508HW+I=
Subject key identifier:   61:5B:4A:52:B1:0E:94:E0:14:05:89:1D:6E:E9:AE:C5:EA:16:C6:18
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       105D67C48E1872AD47D41F8484EA0A81CE07D129
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6731eb50-d436-42ae-bcc6-90d9e6f43edf.roa
Signing time:             Wed 16 Apr 2025 00:01:27 +0000
ROA not before:           Wed 16 Apr 2025 00:01:27 +0000
ROA not after:            Wed 21 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff6:1000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:5d:67:c4:8e:18:72:ad:47:d4:1f:84:84:ea:0a:81:ce:07:d1:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 16 00:01:27 2025 GMT
            Not After : May 21 23:59:59 2025 GMT
        Subject: serialNumber=8f5c291914bf411d93dab19a0596c955b8acee508ffeb988ac531b8b0efc06f1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b4:e0:13:d7:45:5e:62:8e:23:20:bf:69:17:
                    6f:b6:1d:15:8b:65:8b:a0:cd:8c:77:02:10:aa:a9:
                    f5:41:42:14:4c:13:dd:31:cf:bd:ed:2e:7c:29:dc:
                    c8:d5:ae:79:68:07:be:4b:a1:59:51:a5:1e:b7:9e:
                    ae:87:be:41:01:8a:ee:65:5c:06:8b:c1:8b:ad:4e:
                    13:b9:cc:27:ab:83:94:df:3f:f7:f2:b7:70:3d:c2:
                    80:94:70:66:98:24:27:76:42:1f:71:ec:0a:68:6e:
                    a7:52:92:04:ae:d3:bd:53:c5:c8:89:5a:dc:ae:29:
                    66:12:ba:97:c9:ba:25:ff:d8:61:5a:40:54:c7:ae:
                    37:dd:88:74:71:53:64:7e:db:81:54:aa:51:f1:31:
                    af:74:8f:02:22:ab:01:84:8b:c6:0f:5b:54:9c:d8:
                    61:c2:df:7b:ca:18:f4:b3:be:97:de:0e:13:3f:a5:
                    c1:aa:02:d7:f6:33:43:bc:c3:31:d9:89:9c:10:ef:
                    08:fa:13:cb:a3:eb:33:a5:e9:72:bb:9f:b7:a7:8a:
                    ea:75:e3:d9:79:4d:04:0e:53:8b:4a:69:c3:b3:08:
                    55:f9:8f:37:bd:fc:47:f4:ed:0d:13:ad:ce:5a:94:
                    c8:1a:a4:c2:36:39:0e:2c:17:05:d1:84:cf:bd:90:
                    bb:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:5B:4A:52:B1:0E:94:E0:14:05:89:1D:6E:E9:AE:C5:EA:16:C6:18
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6731eb50-d436-42ae-bcc6-90d9e6f43edf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff6:1000::/48

    Signature Algorithm: sha256WithRSAEncryption
         09:9b:e0:94:5f:27:23:7b:39:09:4d:6e:5d:70:44:e6:01:32:
         be:41:fc:0d:eb:9f:ad:97:2e:9c:de:34:a1:c3:6e:b1:7f:73:
         37:9b:c0:89:21:af:80:8a:5d:32:ee:6a:f8:fb:80:4d:ff:8b:
         99:1d:74:ce:c8:32:1c:25:c9:17:0f:6a:80:bf:2c:25:1f:08:
         6a:7b:58:4e:8b:24:88:a4:2b:92:70:c9:bf:c8:b5:f1:cf:ae:
         48:cf:96:37:ff:f0:40:0c:bf:a1:56:ac:3a:7b:d1:8c:93:53:
         62:f0:bb:24:5b:11:95:11:a5:eb:94:13:66:47:bc:8e:c0:e0:
         ff:c0:a2:0d:04:52:46:17:ab:e1:0f:d4:40:2c:63:9d:74:d7:
         7d:f6:3b:86:15:e6:5a:0f:1c:be:35:d2:9c:32:98:ac:8a:ed:
         f6:a5:d6:07:4d:1a:23:97:44:2f:14:c2:96:64:c9:a6:90:2b:
         7d:63:e5:6c:48:9e:78:59:54:49:4b:1f:6d:43:4a:a5:d5:ae:
         ff:17:fd:5d:24:79:31:31:b5:e6:79:2c:5d:65:2d:35:e0:11:
         d3:bd:fe:ad:f6:7e:ea:cb:7f:a5:10:7f:87:b6:a5:6d:f0:c4:
         38:25:af:1e:52:63:a9:45:cf:56:10:c4:46:4d:94:b1:cd:f3:
         0f:2e:8c:b6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:37:12 2025 by rpki-client