Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab77f06b-1368-4e5e-80ac-dcbc6c1c89c7.roa
File:                     ab77f06b-1368-4e5e-80ac-dcbc6c1c89c7.roa (raw, json)
Hash identifier:          NOC0ILGzQZLzEJy8O7/0P+A5ZySfjE2GZvFaD0cdOUs=
Subject key identifier:   E3:06:F9:AD:C7:8F:1D:A1:7B:1B:65:72:FB:09:22:3A:AD:DB:E7:57
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4892534E8BA3563B3A05B63B64FDD658F408C91A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab77f06b-1368-4e5e-80ac-dcbc6c1c89c7.roa
Signing time:             Mon 04 Aug 2025 17:01:56 +0000
ROA not before:           Mon 04 Aug 2025 17:01:56 +0000
ROA not after:            Mon 08 Sep 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f1c:c000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:92:53:4e:8b:a3:56:3b:3a:05:b6:3b:64:fd:d6:58:f4:08:c9:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  4 17:01:56 2025 GMT
            Not After : Sep  8 23:59:59 2025 GMT
        Subject: serialNumber=6c80efaa2b103fed222a13c84d60cd3453c7101d50864da76cdd1d5cb270e3ef, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:73:7b:15:c3:dc:b8:60:ef:a7:6a:56:78:86:
                    52:f1:33:df:b6:39:d2:ef:14:26:35:23:e4:42:a2:
                    55:72:21:e6:73:7a:94:35:06:c6:8b:a5:cc:6f:84:
                    17:0e:f8:b2:f2:6e:95:7e:36:bc:5b:aa:c8:b5:87:
                    ff:b5:ca:b9:df:ce:2f:28:42:a8:3f:68:f6:4c:a8:
                    ad:9b:a0:91:27:03:0f:e3:c0:2c:ca:a5:bf:36:96:
                    74:ee:fa:ca:16:47:c6:7b:7c:31:48:0a:3d:89:67:
                    8f:84:1e:2b:34:3f:0c:66:13:40:fd:00:13:5e:51:
                    10:b5:b9:ee:48:ed:1b:2b:04:0b:ea:34:0f:60:f9:
                    dd:b3:40:51:87:16:c1:3e:08:f9:09:7f:4c:66:3e:
                    54:17:ca:08:15:10:01:82:6a:af:88:2b:9e:5c:0b:
                    9d:6f:83:2b:b9:7e:1f:dd:55:6f:05:6b:20:7c:70:
                    ec:b8:b7:ee:4c:68:42:6e:7b:f6:19:5d:fb:cf:7c:
                    77:ca:7e:69:0a:b5:4d:62:89:5a:c6:26:8b:d2:ec:
                    e3:38:3a:41:d7:26:b3:c6:ef:81:df:04:67:71:45:
                    4b:ed:e5:fd:91:c6:fc:b7:a2:db:09:c5:03:43:ce:
                    93:92:4c:ff:e1:52:f2:58:35:61:40:0d:34:8c:52:
                    c5:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:06:F9:AD:C7:8F:1D:A1:7B:1B:65:72:FB:09:22:3A:AD:DB:E7:57
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab77f06b-1368-4e5e-80ac-dcbc6c1c89c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f1c:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         35:03:2c:82:84:93:fb:13:15:f1:18:66:66:ad:83:fd:8d:e7:
         56:8e:0b:29:b2:95:d7:e2:74:27:41:17:54:65:fe:9d:94:1f:
         bb:34:2c:72:94:ae:5f:3c:45:36:d4:e9:b5:74:ba:22:6d:d2:
         58:c4:62:76:67:00:39:ff:99:9c:44:06:ec:d0:6c:8f:15:1f:
         4f:25:7f:4c:a6:ef:e0:32:53:49:4b:d1:5f:d2:bc:62:c0:c7:
         fc:62:50:54:3d:c8:d0:d3:a0:aa:2d:c2:90:57:a3:55:3e:11:
         ac:97:1c:9e:5b:63:5f:44:bf:21:30:41:a7:0b:49:1a:56:9d:
         a5:cf:71:ad:74:d3:06:b1:d4:dd:d6:b0:86:46:0a:13:69:bb:
         c9:e8:e4:b7:be:c6:1c:a8:26:8d:f0:58:0d:d2:59:b0:26:28:
         a1:c8:fb:21:6f:e8:df:da:c5:86:03:5d:c6:8d:87:8a:6f:a4:
         de:b2:bf:0c:a7:35:63:40:56:35:e4:af:c1:3b:69:e2:17:04:
         b9:d6:f6:a8:ea:7f:9f:fd:7e:0a:3e:55:28:57:2d:cc:05:97:
         88:ac:c2:cf:85:33:35:6a:f6:fa:cc:83:d3:b4:3e:89:18:34:
         55:24:c9:d1:b0:0f:59:78:97:cd:ce:a4:59:16:6c:29:2e:b3:
         ac:4a:56:ce
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Aug 6 11:19:50 2025 by rpki-client