Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d07779e-2b8c-4173-b3f8-1cd5de2e437c.roa
File:                     7d07779e-2b8c-4173-b3f8-1cd5de2e437c.roa (raw, json)
Hash identifier:          p1LLbaIbElxSZLVnYYl4oHiIWXPUdYF4vvr+IgmxfbA=
Subject key identifier:   74:82:1E:56:AC:FB:A6:26:2E:D7:4D:FE:CC:64:48:FC:AA:3B:F7:CE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       60FC7F5A5A486381C2B46214E9EA21942F9DE249
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d07779e-2b8c-4173-b3f8-1cd5de2e437c.roa
Signing time:             Fri 13 Jun 2025 17:12:12 +0000
ROA not before:           Fri 13 Jun 2025 17:12:12 +0000
ROA not after:            Fri 18 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f29:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:fc:7f:5a:5a:48:63:81:c2:b4:62:14:e9:ea:21:94:2f:9d:e2:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 13 17:12:12 2025 GMT
            Not After : Jul 18 23:59:59 2025 GMT
        Subject: serialNumber=e144a407dc0672ca62874264b47a8c5f07d21bbf961e11dae06a1a49a5e94583, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b9:41:45:b3:23:ca:95:30:80:1e:93:08:3f:
                    37:ee:e3:48:90:da:8a:38:15:47:c1:29:0e:9a:b8:
                    a7:83:69:28:6d:f2:90:65:bc:de:a4:00:68:0a:ff:
                    df:67:91:c4:66:b6:cf:3c:3a:77:42:26:e5:88:da:
                    bb:6d:da:a8:d8:59:85:58:8f:52:b0:d9:df:49:dc:
                    f4:e5:be:dc:d5:e7:39:0a:83:79:e0:f2:0f:32:55:
                    fd:40:89:71:6b:ae:cc:71:81:07:80:fd:53:6f:d1:
                    11:38:32:0d:7d:c6:2f:9f:f1:45:7e:29:6b:8f:a0:
                    c3:89:57:5e:7c:f9:24:bb:83:8e:42:c4:b6:30:a7:
                    cc:c8:e7:bf:b0:36:f5:20:87:08:d6:3a:d3:ee:6a:
                    0d:67:63:2f:f2:07:c1:53:45:99:98:99:eb:c1:e2:
                    1c:0e:49:40:ce:dc:ac:00:b6:d3:d4:b4:1b:02:f9:
                    22:59:d6:1a:d5:02:74:32:4a:04:a9:1f:b3:32:7b:
                    c7:b6:ee:3c:aa:c7:4f:c3:42:f8:6e:55:15:54:f0:
                    27:a0:4e:99:4d:70:db:ea:3b:fc:e4:ed:24:37:b7:
                    53:2f:61:50:6b:28:85:5d:0d:c2:78:9d:3f:2c:27:
                    ec:ab:28:6a:64:66:12:ae:87:25:66:a4:40:a9:f1:
                    f7:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:82:1E:56:AC:FB:A6:26:2E:D7:4D:FE:CC:64:48:FC:AA:3B:F7:CE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d07779e-2b8c-4173-b3f8-1cd5de2e437c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f29:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         0e:71:81:89:e4:43:26:46:ba:45:46:73:09:50:87:d9:5a:6d:
         c3:be:ef:7c:38:1d:1c:e7:92:24:0d:00:bc:27:3f:eb:3b:ba:
         be:be:59:c0:9d:7f:f8:fc:f9:3a:01:f4:33:b6:eb:18:de:cf:
         72:61:16:dc:53:da:e5:c6:ca:30:9a:07:13:1e:fd:a1:4c:52:
         9f:54:62:d3:80:20:60:51:51:f0:91:46:5c:07:00:fd:7a:57:
         cc:da:fa:e3:70:9f:8b:43:e1:68:98:7e:a7:d0:82:ac:a3:9f:
         53:86:03:02:f8:46:8c:00:44:82:3b:17:34:6b:1e:22:23:b2:
         af:43:97:a6:3b:63:13:73:ef:f9:47:38:df:21:89:ac:8f:c1:
         32:21:14:c7:14:67:e1:4c:67:41:82:09:68:51:7e:d2:73:9e:
         2f:0e:56:0d:db:84:c9:52:26:75:b5:cc:cc:d7:f8:49:fd:ad:
         b3:f2:b7:e4:b3:10:c3:5a:b2:d8:bf:56:33:14:40:ae:e7:6c:
         ac:7b:ed:c0:70:7c:e7:2a:92:80:6a:4a:81:dd:fb:9a:3c:74:
         40:fb:b2:79:d4:07:6b:00:a4:d5:bb:64:61:c3:a2:4b:62:dc:
         81:60:27:e7:f5:d3:3b:91:2c:34:f2:12:aa:0f:b4:27:6c:ea:
         f5:0f:23:73
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 14 06:30:25 2025 by rpki-client