Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dffe7c41-91f1-4ad3-a375-4c43d7b3ade4.roa
File:                     dffe7c41-91f1-4ad3-a375-4c43d7b3ade4.roa (raw, json)
Hash identifier:          DFFru7rHcqalkrLL6PvorkXEX/VZ0CHWz8ugDelkzQg=
Subject key identifier:   3D:F7:3D:28:09:DB:07:96:49:C9:A1:13:58:9E:69:6E:7C:B9:EF:2F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1F642AFC3DE57F1392A0CD9FD44F0478E3615F72
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dffe7c41-91f1-4ad3-a375-4c43d7b3ade4.roa
Signing time:             Fri 18 Jul 2025 00:11:10 +0000
ROA not before:           Fri 18 Jul 2025 00:11:10 +0000
ROA not after:            Fri 22 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fa0:a400::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:64:2a:fc:3d:e5:7f:13:92:a0:cd:9f:d4:4f:04:78:e3:61:5f:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 18 00:11:10 2025 GMT
            Not After : Aug 22 23:59:59 2025 GMT
        Subject: serialNumber=aba34b261c4c57f1fec25cda63a70df2aab2f6e47fcea04a863db6503a48ebee, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a1:6b:ca:01:0a:bf:3b:1d:b0:6c:a6:61:f4:
                    0a:68:55:33:e8:0d:92:36:3b:ba:e1:d9:67:bb:bf:
                    82:ec:06:af:0d:cb:f8:74:6e:7c:4a:2a:c2:ba:e2:
                    cb:81:5d:d9:3a:7c:e4:1a:b9:2f:4a:30:22:db:66:
                    a1:bc:df:c0:fc:aa:3c:10:b6:38:0a:b8:f6:f1:97:
                    cf:a8:fa:3a:bd:c7:da:8c:12:a8:8b:c6:87:60:02:
                    c5:25:1a:5f:f7:19:14:bd:85:df:7e:59:c1:af:2f:
                    69:d5:f9:45:f7:b5:00:eb:7c:ac:f2:fb:f7:59:32:
                    b5:c6:4b:4e:0c:c2:30:51:4e:ba:40:d3:e9:e1:57:
                    8d:44:7e:d7:3d:aa:32:88:2b:86:2d:57:bf:82:f2:
                    43:b2:f2:e9:be:af:c9:29:82:5b:41:c9:f6:5b:77:
                    9f:c6:ab:f0:47:92:76:b8:f6:ed:8d:a2:34:f8:95:
                    90:c8:b5:8a:fc:6f:cb:d5:af:34:9e:71:2c:f3:e7:
                    67:01:91:9e:39:b1:b5:61:be:9e:3c:8c:79:2f:ed:
                    af:d3:84:30:4a:a7:4e:94:70:c4:73:ab:e5:9d:20:
                    a8:21:bc:8e:a5:84:b6:a1:ff:62:ee:fb:e4:94:a1:
                    ff:c3:c5:fb:36:ac:10:f5:f7:33:42:97:e9:dd:ad:
                    f3:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:F7:3D:28:09:DB:07:96:49:C9:A1:13:58:9E:69:6E:7C:B9:EF:2F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dffe7c41-91f1-4ad3-a375-4c43d7b3ade4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fa0:a400::/40

    Signature Algorithm: sha256WithRSAEncryption
         a7:a7:a0:39:34:81:46:e2:8e:f0:72:4d:7f:6f:bb:f9:23:da:
         9f:88:43:d8:f5:80:31:90:2e:36:42:7d:69:8f:c7:48:ae:88:
         4f:aa:61:c1:2f:36:81:9c:62:88:8c:66:fb:a2:8e:8c:56:96:
         7c:45:35:8f:79:3c:08:49:b8:26:94:4b:de:74:3d:a8:c5:9b:
         ab:51:9a:b4:ad:c8:8a:9b:da:7e:79:3c:2d:25:53:cf:b1:d9:
         61:55:18:68:69:38:87:79:17:83:42:fc:0e:2d:3a:35:aa:3e:
         98:13:84:4a:fc:6c:7c:f7:3f:fe:31:23:aa:a2:7a:09:7c:93:
         9c:06:0e:87:7c:6a:5e:83:6a:2b:b4:92:a7:e8:36:1b:c1:94:
         f6:48:9b:9f:61:be:56:2a:36:38:fb:e7:c0:fb:cc:9b:db:11:
         61:4c:e9:04:39:4b:3e:ab:53:de:6d:95:48:61:14:ef:6d:f1:
         5a:d8:00:51:ab:3f:c8:7d:53:97:3b:36:30:91:6e:c9:9e:8f:
         e6:d9:8a:41:c6:ce:c2:50:3a:35:a2:86:bd:89:29:cf:a3:cf:
         91:8f:0e:85:3a:0c:63:e1:0d:c9:21:68:49:e8:ee:2b:a2:2b:
         1c:7f:f1:e4:a5:2a:b7:c9:c1:9c:cb:8c:fb:08:c9:db:77:c0:
         f2:6e:95:35
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Aug 6 05:14:45 2025 by rpki-client