Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/71cb4a8c-8eb6-4bfb-946a-69c882c60f61.roa
File:                     71cb4a8c-8eb6-4bfb-946a-69c882c60f61.roa (raw, json)
Hash identifier:          QPu5SAy2qSaus+ZSmGTofsdZqug2c0QZwkOEI3W8ZF0=
Subject key identifier:   B1:D2:3F:66:14:87:5A:F8:9C:D5:86:D3:31:11:AE:4C:6E:DE:BA:34
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3B29C33DC833D0004C4CDA48371FAE8A45375048
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/71cb4a8c-8eb6-4bfb-946a-69c882c60f61.roa
Signing time:             Tue 03 Jun 2025 20:22:33 +0000
ROA not before:           Tue 03 Jun 2025 20:22:33 +0000
ROA not after:            Tue 08 Jul 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        2600:1fee:5000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:29:c3:3d:c8:33:d0:00:4c:4c:da:48:37:1f:ae:8a:45:37:50:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun  3 20:22:33 2025 GMT
            Not After : Jul  8 23:59:59 2025 GMT
        Subject: serialNumber=9758693adbfc908957fca748dc9c9513c75fb3fcf3fb6136b304e57108284c38, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:c8:a7:9f:21:0c:55:3c:54:9d:d1:49:05:95:
                    47:5d:99:30:63:b5:b2:e1:67:e8:49:1c:9c:eb:64:
                    e4:c6:ce:a2:98:d5:2c:3c:1e:80:c2:90:df:61:92:
                    20:bb:db:f8:ab:ae:c8:bf:18:73:f3:db:86:7f:32:
                    50:d4:bc:2c:8e:96:0e:10:97:35:6b:04:7d:27:9c:
                    ab:0f:a3:70:ab:cb:b7:0b:85:a4:e5:e2:e8:3d:ac:
                    31:cd:db:51:df:61:18:be:39:53:36:64:c4:08:14:
                    2f:c4:be:d5:d0:70:1d:a1:42:9f:11:54:22:d3:d9:
                    b4:1a:2e:79:04:39:a1:8d:23:e2:bc:e8:78:d5:cf:
                    d4:80:91:5b:65:73:f2:b2:92:6a:0f:56:85:e6:10:
                    08:13:d5:b3:f5:7c:9e:96:97:68:50:b6:06:60:0c:
                    e9:4c:1e:29:24:ae:2e:36:1b:7e:58:fc:b8:d3:1c:
                    79:03:40:75:41:bc:17:47:51:3b:20:64:56:28:f4:
                    94:ec:23:e6:0d:e7:de:6d:20:ef:74:1a:98:ad:10:
                    ff:89:ec:18:57:85:23:5d:3c:3f:7d:bf:09:56:53:
                    a5:80:d4:f9:36:36:e5:af:ee:6d:0f:bb:98:b8:e8:
                    fb:a2:d4:4f:99:69:10:a6:30:b4:ff:7b:a2:12:52:
                    f7:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:D2:3F:66:14:87:5A:F8:9C:D5:86:D3:31:11:AE:4C:6E:DE:BA:34
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/71cb4a8c-8eb6-4bfb-946a-69c882c60f61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fee:5000::/40

    Signature Algorithm: sha256WithRSAEncryption
         3a:66:05:4a:b7:8e:70:34:99:7c:b5:2f:5b:d6:62:4c:8c:ad:
         38:28:4f:21:d8:a9:74:a4:e4:9b:4a:08:5a:b9:e1:92:88:8c:
         22:5f:cf:5a:6a:d8:14:7c:5a:5f:4e:25:5c:0a:95:98:5e:3e:
         c6:23:22:db:20:b8:5f:06:d3:d3:24:fd:66:8f:45:8e:01:64:
         59:db:80:4a:68:ca:c9:66:38:23:e8:4b:de:04:a1:b8:a9:94:
         ba:ad:3a:8c:9f:f2:f4:de:85:4c:1c:9b:1e:bb:49:2d:1d:f9:
         eb:98:45:05:cc:0f:a3:e6:21:3e:46:df:e3:ab:0a:90:35:6b:
         6c:a6:a2:06:5f:7a:b7:87:17:d2:94:5c:4e:e1:c2:48:7e:1b:
         8e:33:68:28:61:52:07:79:3d:db:f5:49:34:ee:f4:ec:54:d3:
         e3:8d:81:0d:f7:8d:ee:b4:f4:ce:24:df:d3:fe:0b:2e:77:05:
         bf:0d:b7:cb:5b:3e:4a:13:95:e6:6f:2b:11:16:ba:bd:5d:17:
         4e:e0:87:94:cc:50:15:ff:3a:07:f5:ff:fd:e6:30:7d:15:a6:
         dc:8b:4f:07:38:c7:76:16:bf:00:54:e5:af:e6:8b:25:07:2b:
         40:70:db:7f:d4:bd:bb:7c:59:1b:3b:d3:dc:61:82:5e:d0:d7:
         c3:3b:84:21
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 15 20:42:16 2025 by rpki-client