Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/78f8258c-1030-4218-97f3-976654699349.roa
File:                     78f8258c-1030-4218-97f3-976654699349.roa (raw, json)
Hash identifier:          ScLstRpIjgoDz3OCb1pj185Kutho3Yf9lYIcgrsJsEo=
Subject key identifier:   DA:C9:66:FE:55:BE:9F:A9:4A:81:09:A8:CD:CF:17:CE:CA:DD:09:D7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       31F2C34C05D69FE815DDA637D902373FED0604A8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/78f8258c-1030-4218-97f3-976654699349.roa
Signing time:             Fri 01 Aug 2025 15:21:52 +0000
ROA not before:           Fri 01 Aug 2025 15:21:52 +0000
ROA not after:            Fri 05 Sep 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        2600:1ff2:5040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:f2:c3:4c:05:d6:9f:e8:15:dd:a6:37:d9:02:37:3f:ed:06:04:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  1 15:21:52 2025 GMT
            Not After : Sep  5 23:59:59 2025 GMT
        Subject: serialNumber=bf15d4184f72948d002add830d1e262ed2a1c2fe1548bc23b71a79ec04f01fcb, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:25:8f:92:8a:ee:0b:5d:ad:5b:4e:ef:6e:d9:
                    fa:28:69:5d:83:55:91:f7:7e:1f:71:d0:cd:0e:4b:
                    6e:6a:85:8b:32:f3:29:bf:9b:58:e6:2f:33:15:66:
                    e2:c9:97:1d:29:8f:f6:75:a8:42:8c:e6:ea:5b:5d:
                    78:10:6d:80:cc:4e:4c:fc:1f:f6:9b:b5:e0:39:4a:
                    0b:6c:67:87:4d:58:5f:b5:50:68:e8:76:20:c4:fe:
                    b9:60:59:57:b5:0a:e4:2f:1b:cd:57:0b:23:69:78:
                    87:64:17:85:9c:8c:02:e5:48:b3:80:08:b9:9d:86:
                    58:d9:31:f6:08:e5:6b:15:75:9b:f9:39:20:e3:c2:
                    bd:6d:57:68:dc:26:dc:bc:18:4f:14:8a:0d:5c:43:
                    3b:b1:ae:4f:72:dc:e7:6e:a2:01:61:ce:35:ea:1e:
                    6e:37:32:96:87:99:76:c3:9c:98:ff:53:3c:b7:82:
                    88:0c:62:62:03:e8:39:37:3d:ef:58:4d:bc:c3:41:
                    3e:3c:37:0a:10:31:cd:e0:08:73:3d:2b:81:28:ec:
                    bb:c5:48:0b:61:b4:3d:70:a6:5b:52:4e:92:46:45:
                    b7:23:d8:dc:98:eb:de:b2:2f:e7:ec:64:50:ce:f7:
                    4a:54:6a:2d:11:83:4b:21:4d:6a:e8:b1:d5:af:ea:
                    a8:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:C9:66:FE:55:BE:9F:A9:4A:81:09:A8:CD:CF:17:CE:CA:DD:09:D7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/78f8258c-1030-4218-97f3-976654699349.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff2:5040::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:87:54:72:28:02:9e:c5:c8:b5:9e:73:87:e0:62:52:63:85:
         31:07:cd:16:7c:3e:6c:23:e6:d6:3b:32:64:32:6b:9e:cf:4c:
         26:4b:23:ca:9b:5f:8c:9a:b3:e5:bf:6b:3c:81:b3:90:c0:ed:
         57:bd:94:8e:ec:bd:40:cd:bb:2f:64:4b:f4:92:8c:ba:cf:22:
         3d:16:2f:89:19:23:dc:8e:1c:6b:84:35:a1:5c:ed:42:26:4a:
         a1:03:6e:1e:21:3b:ee:a7:f1:0f:7e:97:a8:3d:04:5a:bd:15:
         45:e6:8e:b7:a7:11:59:64:c3:59:6e:d9:62:07:74:73:e2:d4:
         9c:0b:53:66:1d:4a:a4:1b:bb:99:25:6a:1f:3b:29:dc:47:9e:
         98:72:35:ee:15:41:15:d5:5a:21:4a:d6:37:67:ea:a0:8f:ab:
         47:69:85:9a:07:71:55:0f:5c:ee:be:15:0e:db:b9:29:4d:64:
         0b:b9:94:63:da:db:e4:47:66:71:92:5c:2d:73:19:9c:2b:04:
         ef:0e:a1:3d:a2:03:36:f0:7a:63:5d:44:4a:84:e0:5b:1e:88:
         55:07:f5:2f:6b:e7:96:e3:b0:5b:36:bb:87:21:78:e6:85:61:
         bb:9e:49:a6:0d:f1:c2:90:e8:c8:38:5c:9f:2f:a0:f7:bf:67:
         e1:ab:33:86
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Aug 8 20:57:13 2025 by rpki-client