Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9b0f9ab-9ccb-4d2b-a88b-689b8480ef82.roa
File:                     e9b0f9ab-9ccb-4d2b-a88b-689b8480ef82.roa (raw, json)
Hash identifier:          w+28pvOfT7wk/leAA9Ajo6NLgwP1oTzE+yOEhibTxR4=
Subject key identifier:   F9:22:3B:E9:B9:B5:04:2A:2E:B6:AA:6C:7D:8C:23:47:0E:1C:A2:8E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       57D9F47810AB045CD5C12256A0F49CF331176A1E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9b0f9ab-9ccb-4d2b-a88b-689b8480ef82.roa
Signing time:             Tue 22 Apr 2025 16:41:45 +0000
ROA not before:           Tue 22 Apr 2025 16:41:45 +0000
ROA not after:            Tue 27 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f1a:4000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:d9:f4:78:10:ab:04:5c:d5:c1:22:56:a0:f4:9c:f3:31:17:6a:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 22 16:41:45 2025 GMT
            Not After : May 27 23:59:59 2025 GMT
        Subject: serialNumber=2ec0a5926b201af5a5d7d6fc8d80d611afba148543fa655fe155d4ac692af7ac, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a8:46:25:e8:7c:9e:50:23:f3:1e:74:24:c3:
                    47:c0:d9:87:32:70:fe:24:5c:bc:70:86:d2:58:da:
                    e7:2a:83:b0:7f:48:f4:19:3c:52:7f:2b:74:d4:19:
                    d6:98:a4:4b:77:f3:aa:a2:9e:98:53:a3:3b:df:3a:
                    1b:3d:b0:42:73:e0:a6:fd:be:a3:de:8c:24:10:18:
                    30:89:77:93:de:66:f0:49:39:85:34:80:6c:66:40:
                    3c:4c:3b:8e:59:3e:29:69:8f:51:09:14:f3:65:cb:
                    30:e3:5c:34:11:23:24:33:4f:21:6c:69:76:bb:4e:
                    ef:09:25:75:49:a8:76:27:f3:7c:8b:b4:a4:a6:af:
                    ea:45:f9:0e:48:f9:54:13:62:4c:3c:4c:87:42:99:
                    7a:cc:f7:d9:a3:9f:e4:43:b3:5f:4c:1b:e6:e4:bf:
                    9b:c5:82:63:11:21:3f:26:bd:39:b9:3c:f3:75:f9:
                    3e:da:1f:d5:8a:a6:ab:e3:84:d1:dc:35:f6:ee:d6:
                    a4:25:ae:a7:ac:52:e5:87:98:32:24:39:18:2c:d4:
                    29:ce:62:5c:a1:67:27:48:75:1c:29:47:1f:86:61:
                    d4:c5:a1:c2:db:f7:c8:73:1e:ac:93:1b:a3:d0:b5:
                    c1:10:3a:82:a3:c1:7a:df:e8:fb:82:ae:f6:95:93:
                    64:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:22:3B:E9:B9:B5:04:2A:2E:B6:AA:6C:7D:8C:23:47:0E:1C:A2:8E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9b0f9ab-9ccb-4d2b-a88b-689b8480ef82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f1a:4000::/38

    Signature Algorithm: sha256WithRSAEncryption
         12:2b:7f:03:11:bd:96:d6:9e:de:d3:0a:61:00:ca:79:a6:ec:
         6e:f2:db:c4:21:3d:82:2c:63:32:9a:df:a3:7f:55:2a:9e:e2:
         d2:61:b7:ec:af:47:c5:0b:33:4b:8b:70:a9:ae:8c:43:6a:df:
         b1:c0:4f:aa:8a:92:2c:91:57:3e:1b:0d:e3:73:cf:1b:6c:b3:
         50:99:3f:d1:c2:be:a1:2e:2e:93:de:81:27:c4:93:a5:ae:36:
         f0:e3:ca:b5:a9:fa:57:25:7d:b4:52:1e:3b:82:23:a4:42:79:
         7e:b4:c5:a8:85:e8:23:37:57:f0:d9:4e:ba:a7:4d:98:e0:65:
         c3:0e:48:ef:24:47:30:82:fa:10:e6:68:75:57:64:e1:bc:92:
         88:22:1a:f5:e9:a7:7c:ee:1a:a7:80:65:31:84:3b:57:e8:b8:
         da:e4:9e:ad:78:9d:25:32:cd:39:90:88:d8:e3:82:43:17:07:
         a7:59:8e:f9:63:02:fb:0b:de:60:41:b3:86:96:4b:04:26:8f:
         9b:10:d7:f0:c6:9d:9a:9a:44:c9:95:21:8f:34:b6:7c:ba:9a:
         58:73:c2:69:29:09:14:74:47:c5:3e:3c:6a:91:be:23:da:45:
         7e:9a:08:58:ad:67:d3:23:05:ba:6a:e0:77:99:65:58:be:9d:
         23:6a:17:53
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 26 14:52:17 2025 by rpki-client