Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b3784a13-962b-4401-a647-8c2b62b7dadb.roa
File:                     b3784a13-962b-4401-a647-8c2b62b7dadb.roa (raw, json)
Hash identifier:          2djHqcr2ZwjVbH6xN0OwSfV3hNan7BUen0/XDMw3eIg=
Subject key identifier:   91:8A:19:DB:C3:00:08:5A:4B:2F:8B:CB:77:11:D4:D4:EC:13:A4:DC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       155F4E75E1AADABC06E4F6EC6854DAA212DF689C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b3784a13-962b-4401-a647-8c2b62b7dadb.roa
Signing time:             Fri 13 Jun 2025 00:52:03 +0000
ROA not before:           Fri 13 Jun 2025 00:52:03 +0000
ROA not after:            Fri 18 Jul 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        2600:1ffb:2080::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:5f:4e:75:e1:aa:da:bc:06:e4:f6:ec:68:54:da:a2:12:df:68:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 13 00:52:03 2025 GMT
            Not After : Jul 18 23:59:59 2025 GMT
        Subject: serialNumber=b60e64b842b8ae6dcdfdac9d2e61c95d899802d8f6ec9167b6887abdd149305a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:88:a4:8b:76:a5:c6:f3:88:03:3e:c8:65:f2:
                    34:09:28:9b:b7:4f:36:b7:a5:52:f5:eb:23:04:59:
                    cb:70:e7:60:fb:98:5e:01:4a:64:a0:f5:b0:6e:16:
                    dc:c5:a9:32:f6:65:a2:7c:18:c5:26:82:7f:3f:1d:
                    8d:01:ae:69:d3:64:92:84:2e:7d:59:26:ad:16:2d:
                    7f:3a:64:8c:6c:02:7b:5d:8c:50:c8:d8:0e:c3:a1:
                    0d:2d:26:b9:38:3d:bd:2d:11:8f:9c:04:05:e3:61:
                    f2:8e:99:2f:49:c7:7a:92:e6:64:dc:ac:3d:72:8d:
                    72:1f:eb:0b:81:e1:4b:f9:1c:1f:89:ce:45:e8:9a:
                    97:33:78:9e:da:44:01:16:33:aa:59:64:9b:a0:21:
                    f6:16:08:44:75:b8:55:34:61:b5:f3:41:62:6a:60:
                    09:2e:ac:50:c5:25:06:6e:a7:e3:cc:dd:fa:b7:ea:
                    bb:16:f9:ef:7f:5a:14:e9:bc:57:99:30:72:c1:83:
                    fd:e3:f3:b6:57:30:57:7b:2b:37:f9:08:52:19:a4:
                    19:07:68:0d:2e:09:e1:9d:d7:7a:af:3f:21:93:67:
                    ba:c6:cd:9f:9a:39:cb:16:2e:83:95:21:37:12:41:
                    94:2d:14:04:94:f0:cc:43:76:9d:dd:39:08:72:11:
                    13:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:8A:19:DB:C3:00:08:5A:4B:2F:8B:CB:77:11:D4:D4:EC:13:A4:DC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b3784a13-962b-4401-a647-8c2b62b7dadb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ffb:2080::/46

    Signature Algorithm: sha256WithRSAEncryption
         bb:54:5b:76:05:ec:cd:ce:f1:e6:76:df:4d:10:05:3a:3b:df:
         93:1e:d4:c5:b0:2e:01:ef:e0:5e:12:3d:fc:10:e1:7b:e3:77:
         d9:45:1c:80:97:7f:d8:7c:4d:ec:6d:50:4d:ff:79:c5:e1:22:
         46:7d:97:d8:d5:b1:80:10:ce:e5:6e:5b:9c:99:e4:f9:57:06:
         23:ab:12:4a:3c:1a:23:47:1b:d5:55:57:03:ca:15:37:40:71:
         d1:5d:68:ad:79:ee:a3:f6:b9:cf:6b:7b:3d:73:13:e4:58:b5:
         2e:e8:af:04:cb:bc:8d:ee:09:89:98:55:f1:31:09:41:75:06:
         8e:b8:bf:a3:c8:31:12:1a:a1:22:ce:f2:f2:c4:73:66:f0:d2:
         d3:68:38:3f:86:f9:3f:0e:61:71:65:ba:36:17:68:ea:c7:9b:
         8a:b1:b6:d6:ba:55:ed:ae:57:ae:db:64:64:4a:cd:d0:51:1c:
         fd:22:7c:cb:10:a3:f6:88:d3:c5:a7:43:02:eb:03:46:aa:e9:
         aa:5a:c7:63:01:40:c3:30:5a:51:4c:f8:20:f6:14:8a:36:79:
         ed:a4:86:f2:6c:71:77:46:65:0d:16:dd:87:ef:44:a5:01:68:
         cd:3f:6f:66:d1:11:dc:f2:6c:be:0a:cb:e2:fd:a7:66:86:98:
         d4:86:93:3a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jun 16 04:14:41 2025 by rpki-client