Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7afd30d1-aca2-41ba-af76-e8ddb5d9dd31.roa
File:                     7afd30d1-aca2-41ba-af76-e8ddb5d9dd31.roa (raw, json)
Hash identifier:          VtNdhUnuiHKPDB7RjMOJJvhJNLz9u/OB1xC0uydA/GM=
Subject key identifier:   E7:01:AB:5D:D3:A3:25:B7:CE:38:7C:0E:C5:2E:38:B1:B8:05:5A:5A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7C4E5C0505577EB43BEEB1B2C310365573A04468
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7afd30d1-aca2-41ba-af76-e8ddb5d9dd31.roa
Signing time:             Tue 22 Apr 2025 17:31:22 +0000
ROA not before:           Tue 22 Apr 2025 17:31:22 +0000
ROA not after:            Tue 27 May 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f19:8000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:4e:5c:05:05:57:7e:b4:3b:ee:b1:b2:c3:10:36:55:73:a0:44:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 22 17:31:22 2025 GMT
            Not After : May 27 23:59:59 2025 GMT
        Subject: serialNumber=5ba4445834a6beb525fa92a935edab9b3781f73fee151b1b2787deb0648847f3, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:f4:7c:cd:6a:ec:a1:4f:aa:7c:e7:f7:5f:62:
                    a7:33:66:9b:da:6e:fa:61:ef:9e:25:d9:4f:de:88:
                    58:6b:5e:15:48:64:24:f7:9b:89:cc:34:45:bc:8a:
                    f6:53:31:dc:f5:52:2a:11:c0:4e:a7:43:b1:a0:cb:
                    5b:5b:cc:44:8c:ae:c6:4f:c2:98:cd:fe:4b:85:30:
                    3d:ec:5a:47:6a:82:fe:87:a9:40:5a:32:9e:30:04:
                    d5:29:42:b7:4a:1a:dd:89:74:ed:e6:d0:33:57:1b:
                    f9:0c:bb:2e:de:68:c1:58:a0:60:09:68:7c:be:dc:
                    b8:20:ab:c0:1b:1e:41:1b:16:d4:7c:f6:9a:93:51:
                    78:54:b4:a3:f8:3f:fe:d0:06:55:0e:6c:1e:e9:db:
                    a2:29:42:88:25:c7:45:9c:cc:2f:ff:02:b8:68:ac:
                    18:35:0e:17:9c:3e:89:ec:fe:0d:0e:fd:61:ed:ca:
                    ba:06:9b:ba:cf:7a:31:9f:b0:13:38:42:48:da:f5:
                    2e:dc:02:fe:44:5d:0a:ea:70:60:24:5a:78:f1:a7:
                    64:c9:6c:3e:a2:07:d3:84:c8:e7:5e:07:03:91:63:
                    29:bb:80:49:86:b7:a5:5f:10:44:6d:d3:b6:e5:83:
                    26:53:d1:e8:f4:20:38:45:65:dc:74:69:4a:5e:48:
                    f7:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:01:AB:5D:D3:A3:25:B7:CE:38:7C:0E:C5:2E:38:B1:B8:05:5A:5A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7afd30d1-aca2-41ba-af76-e8ddb5d9dd31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f19:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         a3:b0:76:73:85:0a:a4:69:09:f5:03:6f:8e:71:75:bc:b4:0b:
         1e:3a:67:19:34:ab:fa:12:89:0a:ee:1b:37:a6:a4:93:f2:82:
         4a:e4:c2:92:7d:0e:9a:27:e3:2e:73:95:61:c6:35:1d:99:53:
         8f:75:5c:9a:6e:73:d7:36:c2:0d:80:ad:be:69:2b:02:f5:76:
         85:5b:af:0d:06:5d:57:a4:86:29:13:12:f7:d7:1c:8f:07:72:
         46:ba:31:97:a1:8c:64:a3:ce:37:74:4f:db:57:14:85:c8:2a:
         bb:40:cb:63:93:84:67:56:de:41:6a:7f:45:bc:48:85:07:5f:
         6c:03:36:e9:bb:8c:8c:b4:40:f5:47:85:92:0b:33:73:2e:50:
         93:02:67:06:dd:ce:fb:72:a7:4f:d0:af:fc:d0:d7:b5:e9:db:
         ab:a0:90:9b:99:b4:1c:96:46:92:69:be:97:dc:f0:90:24:9e:
         eb:63:a6:d2:46:e7:cd:0a:f5:3a:03:92:b1:98:3b:92:6d:66:
         be:48:7b:d9:14:57:d8:61:2c:61:ea:b0:0f:9e:cd:b4:a6:fd:
         61:f3:bf:f5:51:24:32:81:b9:fa:f6:f6:9e:6a:fd:21:a7:a1:
         82:a2:27:33:5b:dd:35:dc:65:9d:b4:66:8c:55:07:1a:12:4b:
         e8:58:3b:d3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:24:07 2025 by rpki-client