Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bba7727d-5772-4530-9f9b-7861edad9e0b.roa
File:                     bba7727d-5772-4530-9f9b-7861edad9e0b.roa (raw, json)
Hash identifier:          CpKZGPSNBH4/8Ayh1ZDhqQvAv/rIEwhNpPAG3SOcoHI=
Subject key identifier:   ED:30:AF:25:18:55:52:30:F3:2C:4E:19:33:F6:E6:59:69:26:2E:1A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       26E4D5358C4AA5DCDEF4953FAF071A16D13F94C3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bba7727d-5772-4530-9f9b-7861edad9e0b.roa
Signing time:             Fri 13 Jun 2025 15:51:18 +0000
ROA not before:           Fri 13 Jun 2025 15:51:18 +0000
ROA not after:            Fri 18 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f69:1040::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:e4:d5:35:8c:4a:a5:dc:de:f4:95:3f:af:07:1a:16:d1:3f:94:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 13 15:51:18 2025 GMT
            Not After : Jul 18 23:59:59 2025 GMT
        Subject: serialNumber=6f4ea207ca94eb5ccf3656a07cb7dd581037f323a7d4fb0dbcd81bd3c0a0ac60, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:72:1d:bd:55:c1:39:74:c4:1e:1c:3d:4f:06:
                    9e:e8:93:d4:18:e3:81:f2:bd:88:10:ac:b7:a4:f7:
                    c0:10:bb:2a:0e:cf:9e:10:bf:c4:66:bf:df:ce:29:
                    9b:88:2a:af:35:7d:b7:a2:8e:86:ab:5c:09:e4:d9:
                    4e:8d:0d:ee:e4:8c:3b:b5:79:b8:e6:8b:3e:8b:af:
                    c7:4d:bb:80:dd:33:0d:65:46:69:77:5f:a7:7f:7d:
                    ec:e3:53:d1:ae:4a:f7:7e:67:28:10:c9:41:1f:e6:
                    3f:11:e1:eb:50:8c:f5:20:58:5f:09:73:88:8a:9b:
                    76:b9:7f:f9:2b:b2:a2:2a:24:9f:1a:de:1c:eb:05:
                    70:55:3d:1c:a5:bf:ad:91:22:b2:22:6a:ba:79:ea:
                    8c:cd:ba:75:c2:17:f5:4e:bb:25:31:00:16:21:6a:
                    75:4f:38:e2:08:02:f7:bd:a8:de:4c:7b:a5:de:e4:
                    c1:cc:f4:01:7e:40:46:cf:86:ef:62:90:ad:7e:0c:
                    13:83:3a:6a:cd:f3:42:68:ec:db:9a:10:39:bc:5c:
                    14:3f:cd:ce:c9:9b:00:54:e6:9c:b3:f7:e0:80:c6:
                    22:f5:09:b6:99:c3:65:b3:09:98:91:65:6d:4b:a5:
                    ce:db:b2:6f:8f:a2:b0:be:80:93:b9:c3:04:3a:d5:
                    e6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:30:AF:25:18:55:52:30:F3:2C:4E:19:33:F6:E6:59:69:26:2E:1A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bba7727d-5772-4530-9f9b-7861edad9e0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f69:1040::/46

    Signature Algorithm: sha256WithRSAEncryption
         a2:7f:55:76:ea:f4:63:76:c0:ca:92:3c:42:5f:a6:c7:e3:e1:
         2a:94:ef:47:bc:16:8e:9f:d1:4a:69:2f:8f:fd:33:c4:26:e1:
         7e:4a:74:3b:f9:09:b9:4e:ec:d2:c8:86:a5:ae:f9:3d:d4:2f:
         21:e3:64:aa:29:d6:cf:ca:8a:85:33:61:88:0b:f8:95:33:36:
         84:05:d6:fb:ee:f0:0f:fb:80:09:2b:a7:70:d1:d5:a8:48:82:
         be:0d:fd:10:bb:eb:cb:b7:d2:06:6d:e8:3f:18:c9:4e:34:a8:
         0b:d3:0d:c3:39:c1:b8:66:c3:ec:fd:71:fb:6d:55:df:80:a7:
         c5:be:e5:45:74:72:f6:cc:b1:fe:e9:1e:f1:89:70:2e:ab:a0:
         b7:fb:5f:33:3a:94:98:ea:c8:ef:d8:a1:cb:19:a2:0e:18:22:
         2e:2f:72:88:35:b8:c4:ba:8e:96:78:06:86:68:21:a8:d4:08:
         48:92:7a:e1:41:32:ac:42:3d:72:e6:eb:60:da:f1:b4:41:9a:
         c8:6a:0d:96:29:6c:9a:48:4c:6e:26:15:08:d2:3d:fb:4c:d1:
         ff:c1:68:12:eb:42:f9:f9:4b:5b:d5:61:69:a8:7c:c9:93:e1:
         b3:50:48:ef:0c:4b:60:8b:96:b5:a3:c2:02:4a:8d:26:50:28:
         dd:5d:7e:e7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 14 07:15:04 2025 by rpki-client