Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67cccffa-6f12-42e5-86fc-9793e15b5a3f.roa
File:                     67cccffa-6f12-42e5-86fc-9793e15b5a3f.roa (raw, json)
Hash identifier:          u0lcLE2MAy6AmM4+jgaKZ01soM12IFAX4sWBwW3ppUU=
Subject key identifier:   C9:54:6B:85:19:51:02:F3:1D:B3:9D:F7:2E:E5:17:ED:7C:C7:77:1E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5014AC91D044DD3E0E526396A4E6F8B515BDBAD6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67cccffa-6f12-42e5-86fc-9793e15b5a3f.roa
Signing time:             Mon 04 Aug 2025 15:11:30 +0000
ROA not before:           Mon 04 Aug 2025 15:11:30 +0000
ROA not after:            Mon 08 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f00:e0c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:14:ac:91:d0:44:dd:3e:0e:52:63:96:a4:e6:f8:b5:15:bd:ba:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  4 15:11:30 2025 GMT
            Not After : Sep  8 23:59:59 2025 GMT
        Subject: serialNumber=5531ebbcfdab3abd0ec156521f1f9f9900cde731b75d7cf61f37d78ffd05f8da, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c6:d9:b2:f9:c5:19:56:64:d1:1c:35:b3:e4:
                    81:29:91:2a:3e:5f:98:e4:d8:67:c5:88:b3:77:2a:
                    62:4a:53:cd:c8:7a:4a:5c:4a:ca:2d:49:33:07:82:
                    a0:3f:ce:d8:0d:51:77:f5:b1:e8:ab:db:ec:3b:c1:
                    74:61:a4:19:c3:17:b2:eb:6f:eb:5d:31:70:bd:4f:
                    52:c3:98:60:16:bc:f6:3f:b2:48:ae:f4:1a:9b:bb:
                    df:29:13:0c:6a:a9:0e:f2:a2:29:a8:4e:43:31:f1:
                    5a:36:e0:e7:cc:16:71:e3:5e:a3:f1:42:52:a9:b7:
                    db:8a:56:40:a7:bd:6e:41:26:2c:3c:21:84:8b:fa:
                    5a:84:ca:79:e2:22:ee:49:ce:a8:43:17:f1:ca:fe:
                    db:07:a3:de:65:9c:0b:8b:3b:ad:01:89:1e:61:e4:
                    b5:4f:1f:54:f7:fa:6e:af:e1:ef:3e:a2:eb:1c:5d:
                    5b:c5:f5:34:9e:20:6e:2b:83:53:6e:20:b3:09:71:
                    f8:99:54:01:be:a1:f6:71:fc:fc:f5:43:97:13:8b:
                    b7:a7:2a:bf:73:44:ae:da:2c:a8:1c:14:a6:8e:94:
                    a6:32:36:19:fd:9f:12:d2:e6:a0:f4:3e:0b:54:2e:
                    b6:5e:5c:e1:43:4c:6f:96:2b:57:d2:70:7d:8a:92:
                    e6:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:54:6B:85:19:51:02:F3:1D:B3:9D:F7:2E:E5:17:ED:7C:C7:77:1E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67cccffa-6f12-42e5-86fc-9793e15b5a3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f00:e0c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         14:12:a6:94:a3:52:5e:6b:ab:ce:04:2d:4a:be:60:ef:7d:77:
         eb:57:61:47:6e:d2:5c:e9:cf:ac:51:5b:4b:66:6f:03:86:ba:
         60:bd:93:d0:0f:03:83:67:68:02:59:a3:d8:c6:16:8a:8b:9d:
         63:de:0f:26:eb:0f:b8:7d:ef:8e:80:eb:29:6b:b0:1a:bc:b9:
         18:36:39:f3:8c:69:d1:4a:34:fc:1f:55:b2:b7:d0:15:bd:77:
         cf:45:26:98:dd:fc:1e:64:b5:80:1e:11:97:54:62:47:02:c6:
         b0:c3:37:fa:9d:86:4c:0d:eb:ea:9b:f6:8c:04:4a:f3:68:78:
         94:b2:97:4f:69:46:76:aa:3e:14:9a:c9:53:23:57:d5:da:8e:
         ae:7f:cb:2f:03:2b:0a:30:33:a0:40:06:bb:8c:d4:01:71:69:
         38:2e:31:a2:61:c2:3e:d9:0c:e5:07:75:bf:2c:4f:4b:79:a5:
         1b:2a:74:49:64:da:f8:5e:8a:d2:1c:3c:f4:5f:f7:c1:86:81:
         cd:da:f5:99:02:10:8c:7e:a0:8a:08:c1:65:a7:8b:ac:f4:99:
         7b:85:87:12:77:bf:5d:bc:5e:c7:b2:ed:48:28:66:27:58:eb:
         a5:b3:24:b8:7f:f7:42:19:e6:6f:a7:61:c1:72:0f:66:b2:8e:
         2d:94:f6:c5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Aug 6 06:04:09 2025 by rpki-client