Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd071994-2f6d-4abe-9d59-0adb3a6c8a49.roa
File:                     bd071994-2f6d-4abe-9d59-0adb3a6c8a49.roa (raw, json)
Hash identifier:          fni/e9rjSRSVA126qCF0LeLSxk2zfdzi7lp7+K8Sciw=
Subject key identifier:   09:4B:E8:96:AD:6B:F0:A5:8D:D7:39:20:7F:0A:E9:81:90:9E:32:58
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5B1CA5724C70F270AF7F058EDC48A7407707D22B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd071994-2f6d-4abe-9d59-0adb3a6c8a49.roa
Signing time:             Mon 04 Aug 2025 17:02:01 +0000
ROA not before:           Mon 04 Aug 2025 17:02:01 +0000
ROA not after:            Mon 08 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f14:4000::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:1c:a5:72:4c:70:f2:70:af:7f:05:8e:dc:48:a7:40:77:07:d2:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  4 17:02:01 2025 GMT
            Not After : Sep  8 23:59:59 2025 GMT
        Subject: serialNumber=52f08d251c135d704b7a36504c3fd35525cd9d7f16269ff5446f846adbbe934c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:73:dc:19:e5:80:ae:79:d1:61:37:e8:b3:4f:
                    b5:8b:a0:ef:b1:00:2f:9a:c4:90:14:59:1b:ae:c5:
                    86:f1:6f:ec:8a:5c:a9:79:92:06:bf:85:d4:0a:87:
                    79:82:4a:08:86:1a:67:51:57:c3:a0:cb:d0:ec:99:
                    cd:e4:2c:88:2a:78:88:00:1a:a4:06:05:0b:07:48:
                    dc:ae:ae:e0:59:79:5c:80:f1:87:14:77:f3:92:29:
                    a3:cb:f2:74:c5:27:13:f8:58:54:ad:80:8c:f1:bf:
                    10:ef:21:2b:6f:b1:bf:ef:05:ed:af:43:48:22:87:
                    9d:3b:24:c9:cf:df:f4:50:f4:da:f4:44:bc:ab:2e:
                    aa:d3:0b:30:e7:49:66:9c:40:c1:31:12:20:1d:83:
                    79:c1:0a:96:d7:80:bb:50:58:c0:cb:1b:9c:7f:d1:
                    2b:5c:ce:07:ae:e6:08:68:30:3e:35:f9:73:4c:f0:
                    1c:91:03:15:18:39:e3:58:90:2f:5b:2a:8f:fe:3e:
                    04:14:fe:2d:3d:d8:54:3d:4c:1b:71:b2:72:1d:a3:
                    8e:5f:35:aa:c9:f6:d0:76:11:92:ae:d0:79:ea:28:
                    7e:f5:d3:f7:ae:fe:95:4e:d0:75:5f:ec:cd:28:a0:
                    04:5d:18:c1:6f:69:af:f5:0f:31:ad:f8:13:be:9b:
                    60:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:4B:E8:96:AD:6B:F0:A5:8D:D7:39:20:7F:0A:E9:81:90:9E:32:58
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd071994-2f6d-4abe-9d59-0adb3a6c8a49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f14:4000::/37

    Signature Algorithm: sha256WithRSAEncryption
         91:7e:38:dd:4c:35:4c:57:55:39:30:1d:42:f0:28:e2:40:e5:
         31:4f:1d:7a:ee:23:10:a8:f7:24:fb:3e:9e:f4:14:21:2e:60:
         e3:e6:b6:ad:1f:51:1a:87:6a:c0:21:bb:06:93:81:9a:95:db:
         35:fd:08:bd:55:f2:60:4b:4b:68:b7:a5:5c:85:10:fe:36:59:
         80:b9:89:8b:0c:04:b9:86:ee:5f:be:e8:90:b8:cf:5a:66:93:
         5a:dc:98:a9:64:75:07:bf:44:67:8b:9c:67:ba:77:23:20:87:
         ed:7f:f0:ea:c2:0a:ae:bf:2a:25:d1:e0:ca:9c:21:bf:74:bf:
         26:7e:3a:c2:db:7b:14:19:cf:06:42:fd:3e:03:90:27:03:cf:
         ac:1a:33:9e:c5:39:2a:17:2e:94:5f:bb:a5:4e:70:c1:bf:cc:
         33:a0:c1:5c:51:d6:bf:94:24:67:3f:8a:9e:0b:d8:fe:0a:4a:
         a9:53:ff:1d:1b:0f:da:3a:66:f1:df:2f:a4:27:47:de:31:0b:
         bd:9d:a6:e4:da:8d:ad:0c:4c:95:c5:98:30:d5:b6:6a:3d:56:
         fe:45:34:9c:4a:0c:54:01:20:0b:35:59:a4:a7:c4:5c:a3:fe:
         b8:15:96:22:88:00:2d:c7:25:ba:e9:e3:98:ed:2e:c8:c5:47:
         cd:d0:96:61
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Aug 8 00:13:11 2025 by rpki-client