Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/14518d87-9a80-47da-80c6-efeb62f0643b.roa
File:                     14518d87-9a80-47da-80c6-efeb62f0643b.roa (raw, json)
Hash identifier:          YDo2jSbvtXcqFtyaUnzm+130zrYX18giYWx2thEMQmQ=
Subject key identifier:   6E:94:EB:B9:12:7C:8D:1B:5F:F6:4A:C8:91:43:D0:6C:93:38:B7:87
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       379BE938F928F8E1486A379F1BA8193C23EC87CA
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/14518d87-9a80-47da-80c6-efeb62f0643b.roa
Signing time:             Mon 16 Jun 2025 19:21:14 +0000
ROA not before:           Mon 16 Jun 2025 19:21:14 +0000
ROA not after:            Mon 21 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:9b:e9:38:f9:28:f8:e1:48:6a:37:9f:1b:a8:19:3c:23:ec:87:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Jun 16 19:21:14 2025 GMT
            Not After : Jul 21 23:59:59 2025 GMT
        Subject: serialNumber=19cdc004877704393aabe301076e7beb963d2b4a1afa241fa5a3d7ef4d1d8e9a, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ed:9a:99:eb:69:71:df:0f:df:42:24:b2:c6:
                    02:4b:94:d8:0a:ef:2b:3c:80:ed:d0:da:d2:4f:17:
                    ee:f3:67:a2:2b:97:59:9c:b5:c5:7a:ea:9e:e8:3c:
                    d7:87:07:47:47:75:97:a3:d9:7e:a4:00:4c:80:9a:
                    c9:ad:fd:b8:5e:e9:6a:fe:fc:3c:c2:d8:5e:5a:d7:
                    b5:78:ac:e6:19:69:b8:b6:68:93:4f:3b:6f:44:b2:
                    d0:5a:01:d0:a0:82:ea:b7:24:12:a7:75:c5:bd:86:
                    29:7b:a3:f7:0e:8d:73:64:f9:ea:4a:be:06:5f:17:
                    7d:a5:67:79:44:f6:6f:61:af:dc:d6:98:7a:94:17:
                    c1:57:94:24:11:81:65:a4:ff:a5:ee:ff:f5:57:a8:
                    70:ce:1e:4c:b1:4b:4c:89:70:3e:9a:65:a5:de:90:
                    09:60:da:70:45:04:a4:a7:af:bd:ce:3b:c4:86:c1:
                    3d:06:6a:ef:b5:f1:dd:23:91:29:28:c3:ed:8b:ad:
                    31:4e:ca:a3:a9:1c:f4:26:9e:56:e0:59:a1:2e:35:
                    05:47:70:26:81:df:fe:ac:70:d4:0b:7d:c4:a2:7a:
                    c7:62:b0:a1:0e:ff:90:4b:01:3b:13:a8:62:61:71:
                    6b:f0:91:88:f2:4b:7b:50:df:88:97:8a:d3:8a:9b:
                    2c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:94:EB:B9:12:7C:8D:1B:5F:F6:4A:C8:91:43:D0:6C:93:38:B7:87
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/14518d87-9a80-47da-80c6-efeb62f0643b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         4d:b8:5a:b7:7b:23:c4:ac:73:07:12:6d:16:82:d2:28:77:06:
         74:89:e9:c2:9b:d6:62:54:81:9c:67:62:dc:a9:c0:8e:ef:74:
         78:c0:f9:01:fe:de:94:0f:d5:63:57:c7:ed:69:2d:c8:34:ae:
         7f:6c:e5:4c:ab:c1:86:2b:6b:7d:1a:ca:94:ba:0e:b1:3a:1f:
         e3:5d:b1:b0:1d:4d:25:87:85:cb:eb:d0:f1:dd:30:a5:c7:cd:
         74:d4:64:44:d0:02:6f:3f:6c:02:91:f4:4f:24:4e:19:d1:d8:
         08:18:a6:b1:35:9a:7a:da:bb:0b:2f:fe:9f:c4:48:55:ea:0b:
         c8:f4:49:23:f1:b1:76:d4:2f:b2:f0:8f:b9:4f:e2:6b:b7:ee:
         2a:76:d0:0d:1a:0a:39:59:c2:d6:a0:ff:83:a6:19:e2:67:70:
         c6:dd:87:46:d3:22:f2:af:92:38:d2:d5:de:82:5a:4e:ed:bd:
         f4:23:f0:f8:33:54:53:49:59:84:07:cf:48:ff:67:61:4b:ca:
         8a:b2:a3:b3:20:e1:d2:cd:1b:5a:9b:68:d4:d8:0e:62:70:8e:
         56:03:c3:f8:f3:86:d4:b5:0d:b5:84:dd:f7:da:2f:3b:35:14:
         e4:b2:07:a2:75:fb:66:20:4c:0a:47:5a:73:4b:97:66:13:cc:
         cd:0b:24:22
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jun 17 16:54:23 2025 by rpki-client