Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7980d2a9-9ad0-487c-82a5-834ec5af0a39.roa
File:                     7980d2a9-9ad0-487c-82a5-834ec5af0a39.roa (raw, json)
Hash identifier:          7NyqzfYYGavj38HfL1ftKb72RpnjXR9R2OufEfG8Zto=
Subject key identifier:   94:79:E6:15:15:BD:F3:06:23:B5:CF:C4:B4:55:55:7D:52:55:F4:9B
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       4F12C5A7FF720C01AEE0F7845C0989F82A05F9BB
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7980d2a9-9ad0-487c-82a5-834ec5af0a39.roa
Signing time:             Wed 04 Jun 2025 20:06:57 +0000
ROA not before:           Wed 04 Jun 2025 20:06:57 +0000
ROA not after:            Wed 09 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:a::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:12:c5:a7:ff:72:0c:01:ae:e0:f7:84:5c:09:89:f8:2a:05:f9:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Jun  4 20:06:57 2025 GMT
            Not After : Jul  9 23:59:59 2025 GMT
        Subject: serialNumber=6465e24adbd6ba902a30d4ef71351ae236bb3963f900e0cffeef41c149481240, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d1:44:05:32:68:85:c8:a6:2e:ea:21:20:3b:
                    9a:a2:e0:3b:b5:d2:92:fc:bc:ff:2d:03:d8:5c:9c:
                    22:89:29:cf:ec:b6:dd:e4:8b:fc:cc:2d:4b:c2:9f:
                    10:9e:5c:21:2e:72:17:38:29:aa:92:9b:2d:e3:19:
                    43:db:41:15:3a:ff:50:10:aa:c1:0b:b5:10:c4:e6:
                    e3:4a:72:fb:41:ba:2c:34:57:ae:5e:3f:bb:c5:69:
                    8b:87:5d:68:06:5b:46:56:15:d0:85:a4:f7:e6:0b:
                    ec:8d:0c:a8:ce:79:a3:1d:d8:c6:31:55:7a:8d:64:
                    47:f4:b7:b0:53:bb:9c:d8:f0:ad:3a:e2:ed:c3:52:
                    4e:d1:16:75:bb:94:8c:a1:7e:60:c8:cc:32:23:e1:
                    d2:f6:7f:e2:90:b7:3b:34:0e:87:97:6a:52:91:0b:
                    d2:bd:c9:04:b3:6e:f8:67:4b:20:21:63:85:d3:4f:
                    99:59:22:2e:c3:95:8f:89:2d:9d:fd:8a:c3:aa:24:
                    cb:15:32:20:71:55:f9:c3:17:3f:b1:80:49:d1:63:
                    ac:6b:25:3f:4f:2e:b6:6e:1e:04:57:f4:3a:df:36:
                    c7:ca:e3:ff:09:23:99:a5:37:f0:3c:32:4e:3e:3b:
                    89:12:35:65:e2:49:47:e5:9c:32:e4:99:99:8c:81:
                    f9:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:79:E6:15:15:BD:F3:06:23:B5:CF:C4:B4:55:55:7D:52:55:F4:9B
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7980d2a9-9ad0-487c-82a5-834ec5af0a39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:a::/47

    Signature Algorithm: sha256WithRSAEncryption
         5f:c8:6d:48:9e:96:01:fa:fd:2a:98:08:71:ea:0e:7d:b0:27:
         5a:3d:4a:d3:79:8e:18:14:84:14:9c:e3:82:74:0c:16:3b:e7:
         5d:93:1f:40:0b:f3:6f:37:79:84:ac:3a:51:61:26:c9:38:06:
         1e:d5:4d:8e:c7:8f:f2:6a:c4:3d:25:85:a5:f0:fd:5b:13:2a:
         20:0f:31:58:dd:c1:47:59:3a:f9:e4:ec:43:08:ab:63:b6:a5:
         55:29:37:39:22:1c:71:57:9e:b3:ae:2e:90:0d:30:84:b3:a5:
         4a:d4:10:fb:88:c7:3e:9d:40:f7:3e:48:c7:b4:e9:cb:be:45:
         45:44:a9:5f:c3:a9:61:76:76:b3:fa:82:05:1e:0f:d9:2a:b0:
         fe:c4:d8:aa:2e:d2:ae:3b:51:8b:a3:db:88:62:6a:2c:1f:7a:
         1f:09:58:81:28:e3:87:b3:77:9b:96:3b:57:f0:c0:d9:3c:c7:
         52:84:0a:cd:8f:c7:16:49:1e:05:cb:c7:7c:f5:1c:8c:10:28:
         10:8a:df:42:2c:2f:95:4d:ad:4d:88:11:76:03:a6:02:fc:86:
         1b:1d:11:67:77:96:a1:8f:c2:22:08:d4:cd:aa:6b:9b:62:8c:
         fc:a0:30:a2:2c:40:85:fc:49:1a:c1:86:a6:a4:c5:e9:3f:47:
         a9:7a:9b:aa
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 14 18:49:56 2025 by rpki-client