Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d5570ed9-b388-4577-9238-0b853e9cc2f3.roa
File:                     d5570ed9-b388-4577-9238-0b853e9cc2f3.roa (raw, json)
Hash identifier:          CqSlYrJYfYOzVIKSFEr5xIB34yj4c42jWKt/GOdAU98=
Subject key identifier:   E9:3B:0F:AD:7D:51:8F:5B:B2:D2:24:8A:E4:D3:68:89:41:B5:3C:70
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       06E236618252D015E840944C4E8EFD2324030736
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d5570ed9-b388-4577-9238-0b853e9cc2f3.roa
Signing time:             Fri 13 Jun 2025 16:10:23 +0000
ROA not before:           Fri 13 Jun 2025 16:10:23 +0000
ROA not after:            Fri 18 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f69:3400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:e2:36:61:82:52:d0:15:e8:40:94:4c:4e:8e:fd:23:24:03:07:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 13 16:10:23 2025 GMT
            Not After : Jul 18 23:59:59 2025 GMT
        Subject: serialNumber=91b5a4afdf065cd41946dde96d1fb09c127868b5ef696d6fe0b50d772c48c527, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:77:bf:37:57:91:d3:35:92:06:0d:a7:f2:a6:
                    66:f2:fe:03:2b:46:e2:2a:84:65:65:71:0c:f7:4d:
                    24:03:0a:12:12:fe:fd:e0:b9:2b:73:6e:31:af:d4:
                    d8:39:08:d0:7c:bf:72:9c:51:8d:ae:53:d5:85:92:
                    23:dd:47:96:7f:00:5c:a0:52:be:89:ee:04:2d:7c:
                    01:13:92:46:fe:c8:2f:a4:b4:a0:d5:e2:7a:b7:35:
                    da:fb:91:37:93:28:b1:a6:5b:75:d7:7f:6d:d8:7f:
                    f5:d7:11:39:59:4f:9b:62:00:70:80:36:36:a2:2d:
                    b3:41:28:4a:d7:4d:dc:9e:dc:a9:b4:0c:37:e7:4c:
                    98:f1:35:ea:21:62:84:f7:f1:38:e9:2d:3a:3c:c0:
                    03:83:e5:bd:e6:73:0e:5a:10:f3:10:a4:71:93:ca:
                    29:ed:5f:32:d8:5f:3d:ed:ed:0e:a0:46:d6:0a:3b:
                    a2:9f:aa:83:cf:92:52:c4:ba:58:3a:55:b4:04:6e:
                    82:57:2e:f2:15:4b:71:c7:aa:8a:64:fe:2e:0e:13:
                    0b:52:61:34:27:62:8b:ac:ab:0f:68:3c:60:36:25:
                    cd:3a:7e:ab:f8:d9:02:2d:71:ad:df:6c:4d:d3:4c:
                    8c:b6:bb:5c:0c:18:4a:35:2f:62:1b:71:45:ef:63:
                    03:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:3B:0F:AD:7D:51:8F:5B:B2:D2:24:8A:E4:D3:68:89:41:B5:3C:70
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d5570ed9-b388-4577-9238-0b853e9cc2f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f69:3400::/40

    Signature Algorithm: sha256WithRSAEncryption
         7a:84:1d:0b:3d:84:4a:de:0d:fe:98:10:0b:e5:88:ac:f7:ee:
         1b:33:38:cf:56:b6:fa:68:f8:92:b7:94:f9:08:7e:1a:92:60:
         4a:2f:8f:d6:e4:d2:6d:1d:a8:e2:2e:25:27:50:4e:6f:18:bf:
         38:21:6a:36:da:54:4f:fe:d8:f4:6d:7e:66:2f:8f:50:7f:fc:
         17:36:ea:ab:b1:44:4d:1c:45:b6:ff:30:a6:84:28:de:93:ea:
         d8:9f:92:ba:cb:ce:34:8a:91:9e:3e:fc:a8:70:42:f1:e5:3f:
         92:2c:41:53:f5:1e:5f:fe:1c:25:b6:dc:a5:de:1b:21:30:e8:
         5e:d5:84:98:f3:ac:74:a4:25:9b:3a:f2:f8:2a:74:e3:3a:eb:
         bd:45:76:cc:a1:00:34:ac:31:ac:b9:4d:1f:c9:49:3a:da:73:
         a2:f9:c7:85:3f:df:b1:78:68:33:98:68:a0:bf:78:f1:55:71:
         bf:89:e3:dd:c7:92:22:dc:e5:86:2d:23:f8:f8:7c:33:69:88:
         75:bb:55:4e:6f:1b:d1:e1:a1:d6:f5:0b:3f:6e:9b:6c:ad:e5:
         65:a5:a4:8a:a5:9a:e5:b0:48:7f:09:01:76:19:c0:5a:44:a3:
         a4:5d:61:38:60:01:c6:eb:b5:cc:c9:25:21:7d:90:21:76:b2:
         95:6d:e8:bf
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 14 18:53:00 2025 by rpki-client