Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88ad0cae-2948-4523-a701-85f14b6acef0.roa
File:                     88ad0cae-2948-4523-a701-85f14b6acef0.roa (raw, json)
Hash identifier:          ZCPg7HjmQOFxd76Lm8eQouIk2gciKg1Utf2dZmfKXiQ=
Subject key identifier:   79:C1:3E:21:9C:9A:EC:F8:6D:24:9E:7C:98:D2:03:8B:29:2A:A7:5E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1687012EB9B8F7BE34710A7B67106C752431F83C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88ad0cae-2948-4523-a701-85f14b6acef0.roa
Signing time:             Fri 13 Jun 2025 16:21:25 +0000
ROA not before:           Fri 13 Jun 2025 16:21:25 +0000
ROA not after:            Fri 18 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff7:c0c0::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:87:01:2e:b9:b8:f7:be:34:71:0a:7b:67:10:6c:75:24:31:f8:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 13 16:21:25 2025 GMT
            Not After : Jul 18 23:59:59 2025 GMT
        Subject: serialNumber=154ecb8b97baa892fa11aefadb96b6a735e5b4e5c2de7910bbbe7090d33faa11, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7f:ce:8c:87:0a:f3:7f:c6:8f:7b:64:1d:bb:
                    27:35:60:c9:34:b0:33:56:2c:49:74:3b:50:f5:98:
                    3d:05:a1:7d:6c:70:8f:e8:36:de:42:c7:b0:fa:20:
                    d9:70:bc:29:12:7d:62:2e:28:47:e7:61:b8:50:42:
                    78:61:ff:b0:39:be:06:23:63:33:ad:c2:ff:dc:a0:
                    e0:3f:69:bf:36:7d:2d:41:86:27:db:cb:ca:73:7f:
                    64:66:5b:96:a1:e1:4f:49:20:54:26:ec:34:79:48:
                    66:c9:0e:7b:7e:09:51:07:32:98:5a:b4:f5:56:4f:
                    35:69:00:0e:68:b2:79:ec:02:17:77:d3:2a:73:bd:
                    43:26:ca:62:61:ed:2b:74:99:b9:fe:55:f2:d9:76:
                    77:7b:75:cb:2f:b4:05:d8:cc:3d:a1:97:fc:7c:d3:
                    30:be:32:c3:7c:68:4c:be:62:29:d7:94:d0:60:b0:
                    ef:91:fd:e7:32:d9:6f:00:18:a4:93:13:b7:55:2b:
                    2f:90:f9:6e:4e:4a:1c:9b:5c:72:ed:19:c6:78:01:
                    01:d6:8d:7d:6b:09:96:22:b7:9e:f3:71:07:03:bd:
                    4f:d9:0d:fe:25:fa:97:9b:25:ef:1e:ab:2d:fd:ed:
                    1c:c1:fc:a3:50:c4:7a:5b:79:a1:9a:f6:a9:63:0b:
                    32:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:C1:3E:21:9C:9A:EC:F8:6D:24:9E:7C:98:D2:03:8B:29:2A:A7:5E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88ad0cae-2948-4523-a701-85f14b6acef0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff7:c0c0::/46

    Signature Algorithm: sha256WithRSAEncryption
         49:bf:a3:13:a2:1d:81:82:a1:3f:35:84:a0:c2:c4:2d:ed:14:
         8d:8b:4a:04:f3:a1:ed:0a:7b:b3:ef:da:48:44:3c:48:35:a5:
         d1:aa:ad:9c:81:3f:27:38:5d:15:eb:51:a6:cd:d0:01:8f:f6:
         ed:76:4c:21:82:b0:41:56:21:2a:7b:c4:80:13:9e:3d:b3:a6:
         71:65:a1:e3:ee:05:78:01:f5:24:04:e9:60:a5:17:83:59:ba:
         49:02:32:75:1e:23:bc:8f:91:61:e4:c1:98:20:bd:0a:ec:09:
         69:f4:59:3c:d4:05:41:87:ac:f4:2a:36:da:0a:5d:2c:9a:80:
         f9:a6:2e:9a:dd:6a:e1:28:5a:5b:7c:8a:f8:b3:93:fe:b7:7f:
         2d:94:61:33:60:62:2f:04:c6:41:fc:6d:96:74:b6:0a:91:7c:
         39:b2:78:d8:98:10:c1:31:f7:63:09:7d:39:5a:c0:dd:e3:43:
         18:32:99:4a:22:7d:0d:b6:d0:8c:54:f4:60:3e:4d:ca:30:10:
         16:11:21:38:56:fe:d0:f4:92:0d:e8:62:24:88:19:17:9e:7b:
         3a:1c:07:21:21:56:5f:23:37:bd:53:9c:93:78:f2:7b:3c:49:
         d2:83:2d:67:5f:d3:b3:ed:30:71:38:08:c9:20:bc:04:b6:e2:
         bb:55:2a:ca
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 14 18:49:20 2025 by rpki-client