Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/694e0c3d-e0a6-4e0c-8286-be8fe4b79d8b.roa
File:                     694e0c3d-e0a6-4e0c-8286-be8fe4b79d8b.roa (raw, json)
Hash identifier:          NUXCwE/iTcWlVKvbIBGcLktbALzP5q1koeCtPdeV6XA=
Subject key identifier:   33:DC:8D:58:D0:B7:2E:27:65:7E:78:F5:6E:B4:6D:DC:0D:41:A7:A4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7C1D1D6F3E49B6AEB9C07101BFFB1F90C25D4DE1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/694e0c3d-e0a6-4e0c-8286-be8fe4b79d8b.roa
Signing time:             Fri 13 Jun 2025 17:20:23 +0000
ROA not before:           Fri 13 Jun 2025 17:20:23 +0000
ROA not after:            Fri 18 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f11:4000::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:1d:1d:6f:3e:49:b6:ae:b9:c0:71:01:bf:fb:1f:90:c2:5d:4d:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 13 17:20:23 2025 GMT
            Not After : Jul 18 23:59:59 2025 GMT
        Subject: serialNumber=a881040b2c0f18fad980417d4b40e590d95bc2ea77bf5bf5d44ee86be1bce667, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d2:87:d2:4f:4a:72:70:ed:69:d1:40:4e:44:
                    5b:58:ce:bb:0d:7f:08:7a:9e:d5:46:98:6f:6f:67:
                    dd:a6:4d:85:f6:8a:7c:1b:54:04:7d:6d:c8:e8:34:
                    fd:23:87:4a:97:f7:3f:4a:2e:20:98:7b:28:fa:c5:
                    96:23:88:13:32:60:81:7d:11:11:cb:4b:44:a9:8d:
                    62:22:2e:f3:19:85:e5:69:0a:e3:d4:bb:3a:ea:22:
                    0e:49:af:e8:5b:59:e3:21:69:37:53:b1:35:5d:b9:
                    e4:cb:c3:c9:e5:db:39:8a:4a:ba:9b:04:d5:43:fd:
                    84:cb:8b:97:c6:a0:f7:a1:8e:49:f4:40:7c:ce:6a:
                    86:c0:ef:da:f7:73:7f:cb:d7:ae:f8:7b:9c:05:3d:
                    7d:86:78:16:5d:00:20:f3:28:49:00:ed:a0:b5:ac:
                    c4:d6:aa:ed:88:be:2e:72:f9:38:28:e4:a4:0e:d4:
                    5e:1d:6b:a7:b8:c9:13:b1:f8:f0:42:05:c4:2d:5d:
                    6d:db:5c:5f:ee:68:54:9c:a5:63:d3:75:26:d9:a8:
                    7d:4b:17:55:79:ae:22:96:9f:e8:dc:66:10:3d:aa:
                    3e:69:1c:66:b3:9c:12:b4:d1:75:19:82:72:14:be:
                    f0:f6:17:7c:b2:ee:28:08:bb:fa:09:8c:3e:19:e2:
                    47:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:DC:8D:58:D0:B7:2E:27:65:7E:78:F5:6E:B4:6D:DC:0D:41:A7:A4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/694e0c3d-e0a6-4e0c-8286-be8fe4b79d8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f11:4000::/37

    Signature Algorithm: sha256WithRSAEncryption
         79:1c:2b:08:cf:79:25:83:e0:b5:b3:1b:46:df:4c:6b:72:04:
         54:4e:cb:88:d9:4a:a0:03:72:bf:46:e2:c9:63:03:6f:0a:7e:
         49:92:d9:8b:fb:fa:b7:e9:18:ee:de:ab:e1:05:9b:42:be:04:
         8a:11:dc:cf:ea:ab:5b:27:77:56:da:bf:eb:48:5f:1c:72:2d:
         90:ff:ee:06:0a:62:4a:cb:d9:c5:4a:46:14:87:aa:8c:f7:ba:
         f6:da:8b:a8:eb:54:3a:7d:66:d3:9d:5e:75:26:59:a5:74:d6:
         8d:91:1f:8c:6c:41:05:59:7d:ff:ef:dd:a0:16:e8:51:24:c2:
         e9:45:b4:2f:e6:e5:b1:75:0e:ff:79:3b:e5:ea:0b:84:ba:70:
         f6:82:d3:26:dd:10:76:03:f6:87:6a:23:52:62:66:6d:d0:8d:
         ef:f0:63:45:2d:e8:9c:d8:20:b1:8c:94:40:19:01:8e:4c:cc:
         3e:90:1c:3a:0b:a4:f5:ca:1b:0c:bc:ae:1e:f7:56:8a:fb:da:
         a1:5a:cd:68:7b:5f:e4:dd:ea:df:76:be:77:da:4d:87:55:e5:
         92:21:85:24:b8:f6:6f:2e:b2:b7:1b:10:d9:76:7e:b8:d7:9c:
         5e:4a:3c:34:7c:36:8e:71:52:1a:13:69:8e:a2:5c:ef:31:ef:
         9f:54:c6:f1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 14 06:38:29 2025 by rpki-client