Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1922148-0081-4f06-b9be-a02446d66975.roa
File:                     d1922148-0081-4f06-b9be-a02446d66975.roa (raw, json)
Hash identifier:          pjypMnPFlwHRz9i22aVeVHc2IdL/sOG7DW6MdgIBxGA=
Subject key identifier:   AE:61:DD:CF:CA:6E:A3:AA:06:4E:77:D9:CA:6A:73:11:CC:E4:3F:61
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3154593F79EF61FC60CA962A19C4A49536AA1060
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1922148-0081-4f06-b9be-a02446d66975.roa
Signing time:             Tue 08 Apr 2025 00:21:02 +0000
ROA not before:           Tue 08 Apr 2025 00:21:02 +0000
ROA not after:            Tue 13 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f2c:4000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:54:59:3f:79:ef:61:fc:60:ca:96:2a:19:c4:a4:95:36:aa:10:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr  8 00:21:02 2025 GMT
            Not After : May 13 23:59:59 2025 GMT
        Subject: serialNumber=f1f346d8b02aa3a16e275865a06cd8f05f92e209136a676670991aed9c804ca6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:11:04:cd:f3:86:36:2c:a2:87:18:59:27:0c:
                    03:ed:fa:a2:c4:dd:9b:61:88:d9:66:75:d0:25:1d:
                    9f:19:9d:14:da:7d:bd:2b:ec:1d:d9:d7:ce:6b:57:
                    96:51:d5:a0:90:e6:b8:85:06:2c:37:88:f3:0e:26:
                    9a:66:66:4a:cd:d1:b7:bc:4d:97:58:7e:a9:4a:bc:
                    23:c0:a1:8f:4b:a3:52:c5:85:a4:44:47:83:f4:4f:
                    13:13:53:bd:e0:ed:b3:86:74:a8:22:5b:8d:5a:53:
                    d3:f0:d2:ad:69:b4:39:2f:5d:47:eb:28:4c:3c:2a:
                    94:d0:a4:49:e5:1d:c3:c7:fb:cb:4f:8a:7b:f6:93:
                    b6:62:cb:a5:6e:78:11:e9:1d:e9:c8:1e:a3:50:e1:
                    1e:9b:09:aa:7a:5e:5a:6c:4f:10:cd:45:23:7a:4e:
                    d2:3f:46:04:8b:d3:c0:9c:fe:47:32:04:12:2d:4e:
                    16:90:c2:13:5a:04:9b:3b:dc:31:61:7b:3b:41:5c:
                    d9:db:43:19:3a:20:fa:e0:69:61:79:e1:73:61:8b:
                    07:c4:c5:4d:e4:9b:3e:6c:81:dc:dd:3f:85:23:3c:
                    ee:b4:c0:85:42:a2:3d:8f:df:27:97:24:06:2d:bb:
                    17:1d:4b:8c:06:ab:5f:e0:5d:3a:a4:0f:75:5d:d5:
                    cf:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:61:DD:CF:CA:6E:A3:AA:06:4E:77:D9:CA:6A:73:11:CC:E4:3F:61
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1922148-0081-4f06-b9be-a02446d66975.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f2c:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         9b:b5:93:f5:ee:5b:7c:bf:f6:0b:33:40:26:99:87:67:e9:10:
         5f:f9:8d:dd:56:2b:07:c7:75:08:57:f4:b4:04:01:bb:a9:3e:
         dd:c4:7f:e0:5b:5a:93:75:fe:ec:22:9f:ff:d6:64:a3:6d:ae:
         f1:35:3e:86:21:8c:73:a3:37:4b:8a:4a:5c:4e:a4:02:5c:a4:
         cd:06:b4:3d:4e:8d:19:6a:8a:75:05:e6:dd:c2:6c:da:a4:0f:
         b8:eb:33:54:df:6c:ef:3c:f8:f3:c2:58:c7:58:03:e4:88:6c:
         a1:a7:fd:81:48:e0:28:c6:23:15:17:8c:23:f0:12:b5:d5:fc:
         db:ed:ac:44:7b:00:64:bb:8b:8c:35:c2:c2:26:0d:43:b4:bc:
         e1:21:dc:07:93:18:67:a7:5d:a8:5a:bd:58:91:9f:a9:30:5d:
         95:f3:c0:c2:65:c3:9a:cf:b4:ca:d2:82:2b:b0:dc:35:63:f2:
         8e:9c:e1:22:2c:25:69:7d:1d:1c:76:5f:ed:1a:f2:7f:ec:1a:
         7b:cf:6a:95:be:49:3c:75:68:67:22:89:6e:58:dc:4a:65:78:
         ff:aa:0f:f6:46:ca:9e:d2:fa:d4:4e:b0:eb:00:38:c7:4a:fd:
         73:4d:c4:fb:ac:5f:a3:94:a8:6b:4f:73:78:93:00:f8:9e:9f:
         57:fe:44:1f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:40:30 2025 by rpki-client