Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9de59557-6a5a-4eb0-b7c2-2a2666d4db6f.roa
File:                     9de59557-6a5a-4eb0-b7c2-2a2666d4db6f.roa (raw, json)
Hash identifier:          rW1WfQ13LNqVnnHuR8UXInu1w2UFwVr2rX9f2V/av8c=
Subject key identifier:   38:0B:0C:6E:53:AD:06:86:01:0A:DC:4E:28:D4:BC:2E:A5:EE:46:8F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7AB6166530EA68B395F1AE5AC31A8B37ABE8B8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9de59557-6a5a-4eb0-b7c2-2a2666d4db6f.roa
Signing time:             Tue 10 Jun 2025 16:41:22 +0000
ROA not before:           Tue 10 Jun 2025 16:41:22 +0000
ROA not after:            Tue 15 Jul 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f61:8080::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:b6:16:65:30:ea:68:b3:95:f1:ae:5a:c3:1a:8b:37:ab:e8:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 10 16:41:22 2025 GMT
            Not After : Jul 15 23:59:59 2025 GMT
        Subject: serialNumber=b8b139afcc7518dea0d5cde070203f53b84688d424a070a62f0a595d978cd1a1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:29:71:e8:40:ea:f9:d6:26:b8:3a:f7:b6:e6:
                    6c:86:e6:7e:9f:54:53:58:55:0f:92:1a:41:8a:64:
                    99:5e:5f:2f:a9:83:8b:0a:93:d2:66:03:85:f2:61:
                    fe:7f:a7:1d:d5:20:7b:b6:87:03:c3:65:57:b5:cb:
                    fb:3e:3e:5e:42:f6:f6:bd:0d:27:09:94:2a:15:c7:
                    e3:be:18:c9:82:54:89:66:ce:6d:3e:d6:63:20:18:
                    0c:06:44:1c:3c:cd:72:08:c6:24:2c:e4:a7:6a:62:
                    2b:e5:02:6d:99:a7:2f:6a:ca:35:31:ef:7b:72:46:
                    56:a5:35:d9:80:75:bf:c3:01:87:c7:3d:d1:0e:88:
                    b1:f3:e6:8d:65:09:79:c8:89:60:40:d0:a3:e4:0c:
                    3e:dc:e4:2a:da:09:72:92:43:64:ab:45:64:ef:b3:
                    25:49:4e:1a:c1:39:db:8a:c7:6e:4f:1c:f5:47:2b:
                    b6:c5:00:3b:2f:5d:9e:49:ee:76:08:56:4d:4b:2a:
                    9f:79:22:24:a4:4b:12:45:ac:f9:a7:7b:3a:76:d7:
                    6a:47:df:c1:a5:bc:1a:8b:d4:74:d3:7c:7a:be:82:
                    14:8e:0e:d0:d5:9e:31:06:31:00:65:0c:54:b9:ef:
                    c3:11:25:27:be:ec:95:fc:e4:b2:ab:36:4b:8a:0e:
                    c8:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:0B:0C:6E:53:AD:06:86:01:0A:DC:4E:28:D4:BC:2E:A5:EE:46:8F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9de59557-6a5a-4eb0-b7c2-2a2666d4db6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f61:8080::/48

    Signature Algorithm: sha256WithRSAEncryption
         d9:51:b8:ea:31:9e:1c:89:8d:66:1b:a2:92:5e:e8:bd:cc:10:
         8a:c4:29:8d:3c:f7:80:8b:d3:e5:f0:ee:a9:b7:a4:19:23:e4:
         44:4a:1c:23:c0:73:3f:b7:4c:d5:e4:36:e0:af:1f:75:68:63:
         ac:62:24:fc:a3:0e:d4:88:22:06:45:ec:3c:0f:b0:fb:07:10:
         7d:c8:58:a7:75:26:6d:98:04:63:0a:c4:84:14:ef:23:3d:fc:
         53:70:c2:d0:5b:44:e4:3e:ae:17:5e:28:14:19:2c:4e:ed:79:
         dd:66:e0:26:b3:dc:aa:c6:03:62:30:44:2e:94:69:30:f5:91:
         2a:eb:18:5a:b7:95:3c:39:88:ab:b8:38:53:0a:bd:f7:30:a4:
         51:09:57:e9:7e:3d:44:37:8f:ba:e0:d3:7d:37:ce:36:69:04:
         88:55:71:d1:18:3f:65:fc:a3:53:74:d8:25:ce:11:35:5c:ca:
         16:52:bf:bd:6a:6b:42:8f:77:6b:4d:71:4e:a9:b0:a3:02:c8:
         07:9e:d7:8d:18:25:e9:76:4e:fa:98:4a:9e:80:69:28:8b:31:
         50:57:83:47:75:2e:1b:92:aa:f8:40:a8:8b:48:90:ce:f0:3c:
         3e:76:57:d4:33:3b:47:79:25:d1:a9:aa:87:35:51:ff:59:e4:
         23:00:b5:f1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jun 17 21:46:39 2025 by rpki-client