Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ac3d75ef-cf4d-4c2a-b9d6-c63c2aab79c9.roa
File:                     ac3d75ef-cf4d-4c2a-b9d6-c63c2aab79c9.roa (raw, json)
Hash identifier:          lqAKPvB2mg+OMAH3jvZz+Xz0uEc2q9IpuDcvK6WvUpI=
Subject key identifier:   EE:C1:72:20:E6:60:59:FF:80:61:7F:F8:F0:61:30:7B:BF:2E:59:22
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       08D77E66208A12D98C052F1F3F765E7BC1B3DBB1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ac3d75ef-cf4d-4c2a-b9d6-c63c2aab79c9.roa
Signing time:             Fri 13 Jun 2025 15:22:39 +0000
ROA not before:           Fri 13 Jun 2025 15:22:39 +0000
ROA not after:            Fri 18 Jul 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        2600:1f69:2000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:d7:7e:66:20:8a:12:d9:8c:05:2f:1f:3f:76:5e:7b:c1:b3:db:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 13 15:22:39 2025 GMT
            Not After : Jul 18 23:59:59 2025 GMT
        Subject: serialNumber=5616c04568636844a09b9afdf77f2985ead27ab94b004a9ccf4a527cdbaa53c5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:70:f9:27:c5:68:9d:9f:e4:8f:03:15:e2:70:
                    d3:7c:37:08:ba:f2:6a:af:17:d9:1d:bc:c5:d1:43:
                    24:1f:6c:66:22:54:ba:e4:00:1a:19:2b:65:4a:51:
                    be:90:d6:37:0a:1a:ca:6e:2d:22:bb:a2:17:02:57:
                    92:c9:e9:ab:dd:ac:72:14:df:41:c7:dc:58:7c:eb:
                    22:4a:ff:9f:ed:a5:19:9d:f5:20:0a:f5:f9:35:a3:
                    5f:2f:31:d3:b8:e3:b1:c3:63:a7:24:b9:fb:41:8e:
                    42:f5:a5:e4:e4:66:ab:4b:7e:35:5a:76:ba:4e:b7:
                    b5:8a:16:89:1c:9b:a4:6d:51:eb:c0:75:2f:8f:1c:
                    ba:2d:3f:74:c3:c3:a0:b0:18:fd:36:30:4d:f6:c3:
                    45:da:8b:f3:75:65:bc:ac:45:6a:71:19:82:1f:e3:
                    4d:47:1f:e2:26:56:32:11:f1:cb:a4:ab:af:7b:3e:
                    60:2a:88:17:49:a5:ae:18:bc:86:da:fe:e7:bf:a5:
                    a3:5c:47:8f:9c:99:7a:6d:84:e7:7a:2e:ef:6f:2e:
                    93:b1:f9:af:43:0b:63:2b:8b:e5:f8:2b:66:52:79:
                    52:86:2f:42:2a:ae:3c:58:a5:43:cf:80:e7:f9:5f:
                    96:49:a3:d0:0e:84:42:65:4b:2c:33:a4:08:ae:0b:
                    a5:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:C1:72:20:E6:60:59:FF:80:61:7F:F8:F0:61:30:7B:BF:2E:59:22
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ac3d75ef-cf4d-4c2a-b9d6-c63c2aab79c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f69:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         ce:9b:54:d9:cc:9e:6d:39:1b:b3:e1:df:05:e4:0a:ce:7e:95:
         ff:12:4d:64:95:25:42:21:13:dd:5d:30:00:16:5d:6b:8b:d0:
         b9:55:f0:39:c7:6b:20:8d:08:45:ce:4a:b7:5e:27:79:b3:d7:
         90:aa:ee:19:c0:f2:9c:ca:14:03:d5:59:78:84:9a:2d:24:32:
         48:4a:2e:56:2d:2b:75:5e:41:32:db:ba:3c:a0:7d:3f:f8:d6:
         09:1d:42:41:62:ca:e0:38:78:79:ae:3a:98:f3:62:33:c3:85:
         70:7b:b2:d6:a6:9c:d3:ca:01:80:6e:2e:5b:f2:1a:e3:0a:5d:
         95:6f:5e:d7:2a:dd:1f:31:10:d2:92:4d:47:e3:46:a0:f3:25:
         54:a6:47:01:6c:ad:b1:11:3e:44:03:1a:f5:fc:5a:0b:75:0b:
         91:9c:26:ca:23:59:13:70:bd:6b:05:c1:f5:7d:55:7c:6e:d0:
         fe:b0:7f:88:d2:74:c2:43:fb:d6:9d:e7:f8:8e:c0:74:b1:7e:
         89:2a:cc:c3:fe:a4:48:ad:7b:e4:57:ad:53:c3:f3:a2:de:40:
         9d:c3:b7:87:81:c4:b8:6f:ad:41:e1:d2:5c:e0:f3:d8:ee:4d:
         86:7f:14:e9:ba:19:f3:86:49:53:c6:e7:89:ff:cb:c5:13:3c:
         0f:aa:96:bd
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 15 14:05:49 2025 by rpki-client