Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ac8db7e-0352-4ac5-97df-faf09a2fa46f.roa
File:                     9ac8db7e-0352-4ac5-97df-faf09a2fa46f.roa (raw, json)
Hash identifier:          GNpVXpVzvl0l0SjRrt/KVrbc8KbhY6VddhvE0XZQJI0=
Subject key identifier:   A0:EE:B7:44:F1:6A:C4:18:33:BF:55:90:46:55:F4:CA:AF:18:12:4E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1790E939E9DD8F519536A8324FD04E7B2A71293C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ac8db7e-0352-4ac5-97df-faf09a2fa46f.roa
Signing time:             Fri 01 Aug 2025 17:01:37 +0000
ROA not before:           Fri 01 Aug 2025 17:01:37 +0000
ROA not after:            Fri 05 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fff:5080::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:90:e9:39:e9:dd:8f:51:95:36:a8:32:4f:d0:4e:7b:2a:71:29:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  1 17:01:37 2025 GMT
            Not After : Sep  5 23:59:59 2025 GMT
        Subject: serialNumber=eeed8f8ab2249e909a39c03f93c5623d68d106f80f384a3c2611b43f5414a3a3, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a4:6b:de:6e:bb:b3:51:37:f9:39:28:98:97:
                    0e:7f:b1:77:6c:e9:58:48:b4:f9:76:b2:4c:59:69:
                    f5:6c:ee:12:b3:06:a9:b8:dd:af:bb:77:6b:8a:b3:
                    76:0f:17:f1:d3:69:81:01:f8:b0:65:c7:ef:92:55:
                    06:a1:b2:14:1c:4c:93:bc:df:15:2c:6d:99:c2:7c:
                    ab:f9:6d:ac:a2:47:9e:54:24:56:94:e4:20:d6:59:
                    3b:04:f6:4a:12:33:74:b8:7a:43:7a:a3:82:74:e6:
                    25:d1:b1:8a:73:93:4d:64:a5:d4:4d:09:bf:19:db:
                    7c:17:fc:3e:89:88:01:14:fe:e2:3b:be:7d:cc:f5:
                    ee:4c:eb:11:e8:9f:98:8c:33:06:6d:3d:9e:1e:66:
                    be:04:ab:91:61:ee:19:cb:63:e9:ad:e0:51:1c:82:
                    9a:c4:ce:f4:a5:37:0e:ef:d7:0f:9d:28:df:ee:83:
                    b6:1e:19:3c:83:a5:79:ee:70:df:af:ca:da:3f:da:
                    7e:15:05:e5:42:9a:f2:18:f4:9c:e2:28:dd:55:3d:
                    cb:5b:75:3e:7f:08:e2:4b:69:ee:1d:cb:76:19:41:
                    ba:2b:bf:78:67:ee:76:bb:4e:c0:a8:8c:b1:63:7b:
                    fd:98:d3:48:15:3a:74:5a:6d:c7:83:43:4f:e2:df:
                    ae:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:EE:B7:44:F1:6A:C4:18:33:BF:55:90:46:55:F4:CA:AF:18:12:4E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ac8db7e-0352-4ac5-97df-faf09a2fa46f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fff:5080::/48

    Signature Algorithm: sha256WithRSAEncryption
         1c:ff:84:4c:66:b2:2d:38:c9:98:4d:1c:6c:00:a4:24:e4:4f:
         40:02:1d:39:de:2c:88:b3:a0:a2:ab:92:c5:04:58:51:84:5f:
         ae:b5:0a:ef:16:6d:d9:54:9e:74:86:2a:7f:92:85:25:73:53:
         7b:19:48:0f:ac:88:d2:05:c8:13:c6:80:07:ec:b3:8d:a2:21:
         9f:cb:f0:d0:d6:5e:9c:cc:73:47:19:03:72:e9:9c:91:fd:75:
         70:73:fb:2c:af:75:3f:5c:4a:d8:33:d0:08:b9:f3:8e:02:73:
         eb:ea:b9:46:f4:96:03:6c:8c:18:9d:12:34:95:6a:ef:9a:27:
         4f:ad:1f:ea:09:34:3e:b1:89:0f:35:d9:7d:a7:57:99:d2:be:
         a8:cb:c9:e2:21:6d:07:e4:55:a7:fa:22:dc:82:07:66:50:dc:
         69:f9:6b:6b:6a:5f:93:00:50:32:23:65:51:d9:f0:2e:d3:b7:
         1e:d7:7a:29:15:87:7a:bc:51:79:bf:92:ec:e4:c0:f6:a9:af:
         c1:ba:9b:39:44:b4:79:2c:7e:29:20:4a:00:ed:5d:5a:c9:d8:
         03:ef:d0:0a:b8:43:0b:0d:1d:ed:ee:72:80:4a:19:2b:4e:db:
         ac:2e:8c:9e:eb:b3:22:2e:10:dc:1f:fc:02:35:34:23:e8:3e:
         e3:50:a7:30
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Aug 6 04:10:01 2025 by rpki-client