Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9c843971-be20-4ee3-a893-7ff916e12f2f.roa
File:                     9c843971-be20-4ee3-a893-7ff916e12f2f.roa (raw, json)
Hash identifier:          +7TmIQyyqolV1wJ4+wFEvHdvgHFfGA8zAiA34ShYyks=
Subject key identifier:   0A:14:D2:13:4C:F5:99:53:7B:A6:B8:E6:58:90:03:E9:F7:B3:2E:5B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2E354B4F703C3DCCC322992A53EDCDE7F10C780C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9c843971-be20-4ee3-a893-7ff916e12f2f.roa
Signing time:             Fri 13 Jun 2025 15:32:05 +0000
ROA not before:           Fri 13 Jun 2025 15:32:05 +0000
ROA not after:            Fri 18 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f69:7480::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:35:4b:4f:70:3c:3d:cc:c3:22:99:2a:53:ed:cd:e7:f1:0c:78:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 13 15:32:05 2025 GMT
            Not After : Jul 18 23:59:59 2025 GMT
        Subject: serialNumber=abe3bf5445ecf0589df0c07ae0d773b23d11cf4aefbe83688561d99d70edd19e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fb:de:c5:2e:77:ee:75:fb:b4:61:3b:e8:26:
                    8d:a5:59:78:4a:6a:be:b9:1b:7f:21:db:33:33:3b:
                    b4:c0:89:91:d2:dd:40:2b:bf:cc:ea:12:4e:96:56:
                    3c:ac:8b:7a:7e:dc:11:34:31:7c:30:ee:7c:76:20:
                    13:07:c3:98:cb:62:f0:74:f3:da:84:a3:0f:9b:55:
                    8d:ac:e9:b6:c8:c4:04:5a:98:89:2b:03:e3:8b:2c:
                    8b:bf:4c:8c:6e:c6:42:2b:f7:ab:f4:ba:31:db:c6:
                    97:ea:f2:72:1f:ea:8b:f1:eb:b2:19:5b:a4:9b:e7:
                    ef:37:f3:26:6d:00:ae:39:b1:9b:0d:0b:d0:a5:f2:
                    9a:64:58:46:0e:b6:39:e9:32:3d:0f:13:9c:a3:af:
                    f8:b1:1b:7a:29:b7:80:e0:73:a9:30:14:1f:b8:9a:
                    14:0e:bd:69:30:a7:c2:d2:fc:b8:5d:6c:85:27:e4:
                    1e:fb:5a:f3:7a:1f:09:64:a0:7f:62:9f:42:1e:28:
                    08:01:a4:fb:8d:3e:ed:67:5b:06:5d:36:3f:ab:c0:
                    45:64:00:11:44:ed:df:b0:4d:10:08:f1:e9:97:f5:
                    b2:7e:6f:1a:85:cd:48:92:8f:da:62:65:26:ce:f4:
                    60:d5:0a:2d:73:09:24:b7:9e:1e:57:64:7a:f6:cf:
                    1b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:14:D2:13:4C:F5:99:53:7B:A6:B8:E6:58:90:03:E9:F7:B3:2E:5B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9c843971-be20-4ee3-a893-7ff916e12f2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f69:7480::/46

    Signature Algorithm: sha256WithRSAEncryption
         6f:b5:5d:7f:15:7e:bc:84:bb:9d:18:f9:10:88:a6:2e:90:73:
         96:3f:1d:6e:71:67:4d:48:ae:dd:19:6e:a6:33:3a:c7:a7:06:
         59:31:99:8f:3c:0d:8c:ae:65:74:39:dd:8d:bf:d9:3c:9e:cf:
         d2:eb:10:7b:b0:2c:8a:8e:39:9b:46:d5:f8:f7:b1:fd:4e:49:
         8f:7d:1e:3b:00:c5:19:7c:b6:98:6b:0f:b8:a5:e9:21:b2:17:
         71:68:79:c2:13:aa:a6:7d:8a:96:72:b2:37:10:6b:70:00:e5:
         40:ca:68:e0:f7:77:c5:f8:52:6d:f8:32:c8:f5:54:55:a6:fa:
         aa:4d:be:09:8d:a1:53:01:c9:d2:0b:fb:17:ed:ad:53:4f:b4:
         d3:02:4d:dd:99:8f:27:50:ee:8a:ab:db:0d:67:c5:37:3d:60:
         b0:9f:c8:a4:a0:31:bd:c1:6b:dd:7d:f8:13:3a:2c:aa:32:8a:
         bb:f5:cc:ac:23:4a:3c:2f:24:f0:cc:3a:ee:27:3d:e5:c7:f3:
         cd:4e:31:be:d2:c8:43:05:4e:00:b7:4c:04:a1:2c:f6:f7:9e:
         9f:f2:1d:52:a2:14:99:95:a9:e4:88:2e:88:c2:9f:89:1f:fd:
         d8:11:96:8b:b5:d8:28:fd:6c:2b:99:b9:1b:60:52:83:db:44:
         78:41:f3:c4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 14 06:47:28 2025 by rpki-client