Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e8bb9b8b-b8aa-4973-83fa-07987f338fc2.roa
File:                     e8bb9b8b-b8aa-4973-83fa-07987f338fc2.roa (raw, json)
Hash identifier:          nuGeLqh+hqEOVElhPAtM0ekDBUIIZqaSAlQWNVUMbgI=
Subject key identifier:   A6:78:80:DB:20:E6:53:5D:CB:67:1C:9A:9B:F5:87:3E:6A:9D:E8:C1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       65765D2C811DA53FD1DF3D9DAB91481DB3DDF73A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e8bb9b8b-b8aa-4973-83fa-07987f338fc2.roa
Signing time:             Fri 13 Jun 2025 16:40:18 +0000
ROA not before:           Fri 13 Jun 2025 16:40:18 +0000
ROA not after:            Fri 18 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:76:5d:2c:81:1d:a5:3f:d1:df:3d:9d:ab:91:48:1d:b3:dd:f7:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 13 16:40:18 2025 GMT
            Not After : Jul 18 23:59:59 2025 GMT
        Subject: serialNumber=7afb23a0bee5be62ce99504177a81b66f4c7f3b51b23f3b9612f603cfb0185f9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:26:6d:f0:a1:3e:f6:2c:53:2b:88:8a:22:76:
                    0f:d1:81:1f:b2:00:4f:3d:69:b3:31:15:a4:03:c0:
                    8c:76:48:6d:4d:b8:ca:35:2c:a0:b8:07:22:8c:be:
                    42:8e:d2:56:30:33:fc:f7:49:fd:1d:60:22:36:ca:
                    f8:90:59:4e:ca:7c:30:57:91:da:e2:9f:dd:a0:37:
                    20:32:aa:c2:11:24:fd:f5:be:ec:e2:f1:5d:b5:f4:
                    74:97:74:b8:68:ba:18:d2:90:97:4d:58:c9:3a:87:
                    eb:21:ce:84:ab:21:31:78:d9:c3:22:e6:cf:d1:7c:
                    88:8f:45:3d:67:87:03:58:5e:96:7c:df:4a:0a:a7:
                    0d:1f:b4:4d:ab:a6:9d:f2:9f:a6:0d:0b:a1:a0:b2:
                    f5:70:fa:3f:de:c1:30:2d:2d:cf:24:97:63:bf:d4:
                    84:02:83:58:4f:dc:b7:9d:d0:e3:1c:ac:6c:00:ab:
                    85:88:88:00:7b:de:1f:28:d7:56:ad:f2:84:0e:79:
                    21:76:6a:47:68:f0:c2:84:00:02:a6:e7:a3:85:2b:
                    10:77:b2:5e:fb:28:68:1c:e7:8d:40:f5:a1:27:fe:
                    4c:35:91:c1:16:18:3a:19:10:b8:eb:7d:7e:93:a8:
                    9c:10:f1:9f:89:93:70:df:f3:2c:60:dc:58:d3:8a:
                    ce:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:78:80:DB:20:E6:53:5D:CB:67:1C:9A:9B:F5:87:3E:6A:9D:E8:C1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e8bb9b8b-b8aa-4973-83fa-07987f338fc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff0::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:8d:84:35:8a:ac:cb:9f:72:f5:b5:ab:41:db:6d:8e:a0:a5:
         af:02:6f:33:f7:cc:49:76:38:6c:a5:30:b2:9b:6e:4a:01:a1:
         ce:eb:f0:b4:27:02:05:b3:0f:bd:74:82:b4:58:91:da:c0:b6:
         bc:c8:5c:79:56:53:da:d7:49:26:57:bd:2b:da:9d:03:38:d1:
         7d:a5:34:e2:81:60:bc:8d:16:be:7f:9b:31:65:bd:5c:8c:05:
         ca:92:5f:40:5e:13:52:85:ef:b7:16:8f:10:c7:6f:8f:0f:cd:
         68:2c:6b:98:b8:3c:98:1c:67:9e:8e:2e:f2:25:b6:42:b4:4c:
         e0:c6:2c:ad:7b:1b:38:c2:94:13:18:a6:17:bd:5a:56:8f:e4:
         1c:80:bb:88:b8:11:c6:af:54:31:04:59:81:7c:c8:34:30:e4:
         4a:f1:77:7b:8a:51:c0:38:bb:30:2b:98:6a:b6:53:65:aa:7c:
         8a:89:7e:d4:f2:10:4b:25:7d:7e:8b:09:3e:1b:96:6f:2b:4a:
         8f:63:a5:8e:26:50:79:40:9c:60:b3:0c:aa:5a:87:60:69:e3:
         09:a7:d2:ac:5b:55:05:a6:35:fc:27:e7:a0:1c:6c:90:07:83:
         07:a7:f5:a8:aa:a5:c1:f3:58:e9:48:37:d9:29:e9:58:c1:e2:
         a2:5f:f2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 07:06:49 2025 by rpki-client