Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/de422898-9281-4d4e-b871-bdee8a8f4b79.roa
File:                     de422898-9281-4d4e-b871-bdee8a8f4b79.roa (raw, json)
Hash identifier:          9sj1IGLaXhMCASfNNzAG+t9I7Uzp7h8ujjaOtPwINVw=
Subject key identifier:   A2:E5:3D:10:93:F6:97:68:3F:38:12:9B:F0:D6:FA:1C:67:38:D5:C4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0B596E160BD6ED5E09B87FCC5356EA439DA26E28
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/de422898-9281-4d4e-b871-bdee8a8f4b79.roa
Signing time:             Wed 30 Jul 2025 19:07:30 +0000
ROA not before:           Wed 30 Jul 2025 19:07:30 +0000
ROA not after:            Wed 03 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f69:a400::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:59:6e:16:0b:d6:ed:5e:09:b8:7f:cc:53:56:ea:43:9d:a2:6e:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 30 19:07:30 2025 GMT
            Not After : Sep  3 23:59:59 2025 GMT
        Subject: serialNumber=9ffc2ae61e1d98db101e43fc94be44ce2dcf17dcf30a15d47ead0886c51e8d5b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:54:ce:07:2e:74:32:e0:df:85:bd:5b:07:76:
                    db:4c:aa:a4:2d:92:d3:44:71:a9:7d:52:67:8e:ec:
                    36:d1:21:75:09:8f:95:1d:74:29:1b:6b:21:b2:33:
                    61:c2:41:be:c6:b9:47:a1:30:b0:3c:9b:d1:d1:e2:
                    4a:dd:fd:02:a5:4b:61:c8:bf:a9:2f:90:58:7c:62:
                    26:69:6a:22:65:9f:2b:96:b9:89:6d:d7:8e:e2:ee:
                    e1:9f:8e:c1:a5:f7:17:07:fd:f7:55:60:e3:fc:e8:
                    4f:ae:f7:78:a0:fb:82:fd:de:9a:3f:b1:91:a4:28:
                    64:39:e4:0b:0d:df:26:c2:b3:04:93:db:eb:ce:d4:
                    cb:84:46:ef:0e:55:dc:38:67:1c:8a:34:60:7b:5d:
                    78:af:c5:b6:64:12:c9:68:62:2d:67:f4:ec:2a:33:
                    81:86:8c:d6:21:1a:7e:b6:ec:66:a4:29:de:8d:9c:
                    2c:ac:ad:ca:c7:66:fa:6f:eb:26:78:82:b7:f9:e4:
                    76:e4:b3:67:3d:4b:7f:5b:d0:12:9e:1b:cc:62:a8:
                    5f:9f:85:86:71:13:af:5f:05:4e:b6:5c:29:c9:25:
                    45:d8:a0:31:c5:c7:49:04:29:e2:f9:c6:2b:a0:bf:
                    42:08:08:69:4f:68:cc:ce:45:0f:f1:6a:65:8c:f9:
                    07:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:E5:3D:10:93:F6:97:68:3F:38:12:9B:F0:D6:FA:1C:67:38:D5:C4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/de422898-9281-4d4e-b871-bdee8a8f4b79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f69:a400::/40

    Signature Algorithm: sha256WithRSAEncryption
         d6:35:d1:7c:ca:70:ee:03:1e:cb:79:47:b6:47:a4:91:fe:e8:
         3a:6d:55:9c:ac:2c:f2:02:0c:11:77:47:cd:c4:ce:ae:27:ff:
         85:63:97:5a:6a:13:6e:e8:e3:d8:98:c3:a9:44:68:61:1e:d2:
         86:d3:05:b5:0e:be:8f:f8:cb:e4:27:5b:f4:49:8c:4d:b8:d5:
         30:13:d3:ca:87:f8:6f:92:6c:c0:62:73:96:6f:98:8c:b6:14:
         8d:b6:69:55:23:19:4c:9f:4e:22:c5:3d:34:52:ea:f1:8e:23:
         2d:9b:2a:64:33:e7:38:b8:0c:c9:55:2b:d4:59:06:3b:3f:81:
         6b:ce:ac:73:44:ce:ab:fb:e1:a2:3c:ff:3a:79:86:c7:a1:c7:
         e2:9c:6d:3f:6c:4a:c1:c1:dd:28:9f:aa:f6:d2:46:e4:c8:1e:
         14:7f:06:a9:05:5e:2c:9d:04:b9:aa:c3:4b:7b:b8:72:aa:5a:
         7a:51:0c:e7:79:18:2f:5e:89:4f:16:33:8e:ec:22:8a:9c:18:
         4d:a1:2a:e5:c9:57:82:0b:cd:7d:e4:fb:f0:47:1b:c6:d5:94:
         a4:62:b0:04:87:a5:ca:e7:68:3a:fe:d8:39:d7:a1:cd:4c:87:
         ac:28:ed:a8:9d:af:72:77:82:e5:59:39:e9:7f:75:f3:3b:a0:
         49:dd:5e:3f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Aug 9 10:47:50 2025 by rpki-client