Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6ee98da-ac5f-4668-ae34-9e956ff075a4.roa
File:                     e6ee98da-ac5f-4668-ae34-9e956ff075a4.roa (raw, json)
Hash identifier:          znKENq2jc42qHC1CbQB4WXHtxUe9NIG12NnVKIkY2Tw=
Subject key identifier:   D2:7A:BC:AA:1E:85:C0:25:1F:EE:08:A2:20:3E:ED:CC:FD:76:ED:7E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       60A33CC327FD692EC3DC6EC945C94D0395A46FCA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6ee98da-ac5f-4668-ae34-9e956ff075a4.roa
Signing time:             Fri 01 Aug 2025 16:01:17 +0000
ROA not before:           Fri 01 Aug 2025 16:01:17 +0000
ROA not after:            Fri 05 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fff:81d0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:a3:3c:c3:27:fd:69:2e:c3:dc:6e:c9:45:c9:4d:03:95:a4:6f:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  1 16:01:17 2025 GMT
            Not After : Sep  5 23:59:59 2025 GMT
        Subject: serialNumber=5b57b2103926ca5e7fdb05016d1ae6e69f7fe12dcc0bb6e9c13724ba978b0681, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b2:63:e4:17:75:9a:1e:07:bb:e7:31:1f:c5:
                    d7:ec:61:dd:57:ac:89:dd:9f:0e:e3:06:01:db:27:
                    35:eb:5a:0f:e5:55:41:1b:eb:64:f8:e2:37:93:40:
                    4c:a5:28:b5:4f:65:d5:2d:9d:81:1e:8c:59:0c:4b:
                    15:e5:04:0c:53:15:c8:a3:ab:85:1d:0b:3b:66:09:
                    cc:e8:dd:16:d5:34:a9:ef:b9:f1:d9:c7:7a:6f:e5:
                    eb:82:cf:d7:0f:41:7f:93:19:1d:47:e4:cd:f5:fe:
                    2f:c8:b0:dd:8d:fd:c6:bc:1d:eb:28:d8:e9:7d:50:
                    a5:57:7d:96:68:b1:51:df:e7:21:a0:7f:f1:c5:ad:
                    a0:0d:04:09:b4:e4:09:b5:8f:b4:aa:19:2b:66:14:
                    80:5e:82:2c:79:4a:d0:b8:e4:6d:f1:96:de:a7:69:
                    0f:45:dd:48:34:bf:0b:62:8f:d5:ff:83:c7:62:8b:
                    74:03:63:7a:73:fd:da:a8:4a:6e:7f:87:0c:c6:fa:
                    91:e6:4a:d5:82:30:64:b8:1e:a9:92:66:0f:f4:67:
                    22:5a:8a:ae:d2:43:8d:93:6e:fa:4a:5a:02:4d:9b:
                    32:a3:96:77:56:a2:df:f0:0a:af:d1:97:48:71:a5:
                    6c:04:e9:fd:ca:6d:0f:09:4f:62:2a:e4:39:20:a3:
                    e3:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:7A:BC:AA:1E:85:C0:25:1F:EE:08:A2:20:3E:ED:CC:FD:76:ED:7E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6ee98da-ac5f-4668-ae34-9e956ff075a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fff:81d0::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:fa:42:85:92:00:47:98:6f:d4:3a:43:c0:68:af:72:ae:28:
         87:35:d7:fa:f5:bd:bd:fd:ce:ca:55:c5:36:be:4a:ca:fb:cb:
         47:37:98:0c:c9:4f:a0:bb:cd:98:49:c8:07:93:d2:4a:5f:0c:
         7c:60:33:a6:e9:c9:79:fd:1a:a6:ca:49:7e:51:46:9a:c4:be:
         df:bd:7b:c0:d4:a7:91:59:b4:1e:db:5a:74:d2:b8:3e:03:47:
         10:54:6d:2e:13:92:73:c6:c1:82:53:09:0d:bd:02:0e:d6:8b:
         f4:80:ed:06:66:d4:8e:1b:fc:a6:6d:04:27:38:f8:60:33:4a:
         4f:3c:a5:ec:36:02:ba:76:9c:b1:91:29:6a:82:4a:91:d7:d4:
         a5:9d:e4:be:3d:8d:d5:13:7f:1a:36:d3:9a:f3:5d:0c:8b:b5:
         9b:84:74:e7:9d:47:9b:f4:64:e9:2b:d2:7d:cc:d3:83:14:8f:
         4b:2c:db:d3:be:8f:7d:78:bc:80:60:8c:b9:c8:6e:9c:cd:22:
         ac:ee:b3:99:ee:15:5d:68:33:bb:69:1f:1c:2b:d8:0a:2f:b1:
         76:a6:d4:b0:5b:27:e5:fd:6b:2c:ca:d9:a6:ee:9a:42:f5:63:
         88:11:aa:59:e7:d5:34:52:a0:37:47:2a:57:64:79:82:c3:9e:
         24:63:08:6c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Aug 9 10:50:20 2025 by rpki-client