Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/780bf320-4503-4ef2-a0f5-fd3456ea9ec6.roa
File:                     780bf320-4503-4ef2-a0f5-fd3456ea9ec6.roa (raw, json)
Hash identifier:          qv2AowKExeK0G3tEPQmvqkEsmHpDfdTExMZLePyWczI=
Subject key identifier:   46:F1:A2:64:F5:22:A1:ED:50:4B:BC:3D:A2:FD:D3:4D:1D:00:BB:B8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3AEDA45C3D6CF448802C3800494E6CCEEF5C6FC6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/780bf320-4503-4ef2-a0f5-fd3456ea9ec6.roa
Signing time:             Mon 21 Apr 2025 18:30:21 +0000
ROA not before:           Mon 21 Apr 2025 18:30:21 +0000
ROA not after:            Mon 26 May 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f00:8030::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:ed:a4:5c:3d:6c:f4:48:80:2c:38:00:49:4e:6c:ce:ef:5c:6f:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 21 18:30:21 2025 GMT
            Not After : May 26 23:59:59 2025 GMT
        Subject: serialNumber=d8133965adad8c918b720cea45ababea400627f5d8cb333cc5feb5e8874c68b8, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:93:c4:9b:db:89:1e:cc:f7:2e:e2:13:91:20:
                    b6:94:b3:26:12:52:87:60:4b:3b:e7:10:b3:0c:4c:
                    b6:13:e7:fc:7b:0a:b6:e1:0f:c3:eb:e6:68:d9:54:
                    6d:58:3e:5d:cd:0b:46:52:f9:83:67:4c:6c:f7:95:
                    57:43:a7:27:14:7b:83:67:b6:1e:69:09:94:ce:2c:
                    4f:a4:1d:23:a9:26:f0:33:99:e7:b8:cd:08:b2:42:
                    90:8d:a0:14:ca:b4:3e:9a:3f:6c:04:c5:e6:a6:77:
                    67:da:60:6f:d5:ef:d2:96:d3:05:20:53:70:09:2c:
                    27:60:08:e1:2a:d1:56:85:88:94:25:0b:2d:aa:4c:
                    a8:d4:f6:ba:91:ab:36:00:fb:62:a8:42:88:53:7e:
                    19:7c:9c:ef:9e:9f:5e:e4:e9:a5:04:46:5f:9e:6f:
                    b1:21:be:82:5d:30:04:34:be:38:b1:21:41:99:00:
                    52:8a:b4:25:c1:f1:06:5e:8b:ce:2d:ac:0a:64:85:
                    d2:ff:24:dc:5f:4f:02:e0:ec:cb:93:1f:da:43:ae:
                    d9:ca:3a:d5:18:e9:44:52:14:ef:3c:cc:1d:3c:c4:
                    07:73:59:0e:b9:3d:f4:cf:ca:96:5c:91:bd:46:bf:
                    6b:0a:28:8f:2d:0e:43:08:48:dd:55:2a:59:24:14:
                    b0:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:F1:A2:64:F5:22:A1:ED:50:4B:BC:3D:A2:FD:D3:4D:1D:00:BB:B8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/780bf320-4503-4ef2-a0f5-fd3456ea9ec6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f00:8030::/48

    Signature Algorithm: sha256WithRSAEncryption
         6b:be:28:3d:e7:dd:5e:f9:ef:98:57:5f:56:96:45:6f:3a:d9:
         25:24:0a:a6:5a:4a:82:f7:0b:fe:48:87:7d:14:48:b0:75:97:
         b2:3a:cc:bd:96:b0:9c:43:39:5e:3c:93:c8:e6:c8:e7:23:03:
         cc:cd:42:16:3c:39:17:2f:e9:c2:5d:7f:6f:5b:c3:78:aa:2a:
         85:e0:b0:84:41:76:cb:43:6d:fb:43:27:d4:a1:71:68:c9:ac:
         a7:db:72:ec:ad:b0:b4:95:62:98:44:97:08:0b:e4:f4:2d:23:
         0e:4c:d8:75:fc:a9:bc:f6:4c:99:e2:12:aa:d3:40:f4:03:99:
         52:dc:f6:e4:27:00:7e:20:2b:90:b0:98:5d:15:6e:8c:95:17:
         06:7d:ad:48:cd:9b:6c:b8:7a:90:3f:5b:0d:a2:3a:ef:47:78:
         66:53:b1:5c:2e:2c:bf:8a:f3:85:0b:8e:29:54:45:8f:85:95:
         eb:8c:a2:97:d9:a0:76:e3:6a:69:1a:24:2f:74:51:da:04:85:
         1b:3d:85:4e:b4:2a:59:dc:1d:5b:cb:b4:8a:5a:52:d1:ed:fa:
         41:23:d5:a7:1e:8a:e5:2f:87:79:33:ed:18:4f:c9:ea:7d:a9:
         7b:3f:c2:e7:c0:9d:75:d7:b9:44:ec:43:f4:b0:60:0a:f3:36:
         c3:5e:6a:46
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:24:03 2025 by rpki-client