Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b7bbafbf-e6d4-4487-9ebb-cbd72b3d6c73.roa
File:                     b7bbafbf-e6d4-4487-9ebb-cbd72b3d6c73.roa (raw, json)
Hash identifier:          H8CSKnBN5q9zTRN6p/1gxj2uNJiYUVpsGi1IbNn36ps=
Subject key identifier:   CF:26:46:25:81:28:9B:66:13:37:0A:CB:25:10:4A:DB:D9:F6:4A:CB
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       014180843210BA35D5651C27BC3B94388A336F26
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b7bbafbf-e6d4-4487-9ebb-cbd72b3d6c73.roa
Signing time:             Fri 25 Apr 2025 18:10:03 +0000
ROA not before:           Fri 25 Apr 2025 18:10:03 +0000
ROA not after:            Fri 30 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0::/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:41:80:84:32:10:ba:35:d5:65:1c:27:bc:3b:94:38:8a:33:6f:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Apr 25 18:10:03 2025 GMT
            Not After : May 30 23:59:59 2025 GMT
        Subject: serialNumber=dd40a27e499dc990398a25184cf926642a9451f8d36d1024d519f740539c3dfa, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8a:b2:4c:21:46:ab:61:94:c2:2b:78:40:ea:
                    c2:dd:4c:31:23:4b:7a:e0:84:71:66:52:ae:de:e5:
                    92:4b:d9:e6:04:fc:71:f3:86:e0:91:76:78:d7:7c:
                    8b:49:8b:3e:f0:7a:23:89:e3:41:ba:1b:67:10:96:
                    d6:67:36:95:14:f0:22:e6:7d:cf:4e:83:6f:96:a4:
                    9d:e7:8d:4f:9e:99:de:bc:73:da:a3:a6:68:0f:fd:
                    da:bf:db:1c:5f:6a:63:94:5c:31:44:47:7a:ab:ba:
                    7f:83:c3:f5:33:26:67:69:03:f2:bf:52:ff:e2:48:
                    f2:18:ef:e9:5d:3a:c7:a3:63:bd:19:d3:dc:08:af:
                    db:88:9f:23:03:f7:98:2f:c3:42:a3:99:f6:4c:1b:
                    a8:0d:c8:73:8a:52:ad:b7:5c:9f:28:81:a0:71:ac:
                    fb:c6:a7:fb:17:41:4c:f7:73:a6:64:bb:c0:ac:b0:
                    eb:5e:23:04:99:96:e5:42:da:e3:60:6d:52:91:a0:
                    68:50:57:9e:23:3b:2d:2c:86:13:d9:35:cc:2d:87:
                    a9:43:7a:8c:d1:a1:8c:62:a1:1a:b2:3c:ef:8a:cb:
                    d3:68:20:61:a1:d5:d6:db:3e:92:ff:15:37:9e:00:
                    9b:60:53:e8:4e:4c:05:f9:4a:05:ee:43:6a:6f:df:
                    8b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:26:46:25:81:28:9B:66:13:37:0A:CB:25:10:4A:DB:D9:F6:4A:CB
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b7bbafbf-e6d4-4487-9ebb-cbd72b3d6c73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0::/28

    Signature Algorithm: sha256WithRSAEncryption
         45:1c:0b:e8:76:e6:ba:b7:41:19:67:1b:ce:16:c3:d9:35:09:
         be:61:da:87:49:8b:fc:e9:dc:5d:c4:42:6f:e3:b4:9a:6a:38:
         e9:14:a4:00:a0:2a:a8:ad:53:70:d7:c7:d8:ba:a2:33:3e:81:
         dd:2f:29:f8:b6:49:52:c6:7a:da:b1:47:52:03:cc:06:81:31:
         ff:a9:4e:96:e6:5e:3a:78:89:70:e8:cc:65:91:60:3d:13:9a:
         ff:9f:57:b6:a7:82:3a:18:df:e2:5a:14:e1:7c:87:06:3b:c4:
         fa:0a:66:fb:06:ac:16:cd:af:ef:e6:dd:e6:8f:7e:a9:07:66:
         76:40:10:83:4a:bf:65:54:ae:3d:2d:19:e2:05:a8:d7:4d:a9:
         b5:53:34:5b:c9:b2:99:97:5e:6d:4f:18:b1:3b:46:1d:14:47:
         c0:20:00:68:7e:eb:50:08:99:29:a8:ba:a6:24:2a:79:de:9e:
         26:c6:95:0f:c3:70:8f:c6:22:0e:64:e8:44:6a:97:39:2b:b6:
         6f:71:e2:35:8d:cc:bd:9d:4b:f1:16:7d:48:be:ba:0e:34:8c:
         9c:f7:64:14:29:f7:19:53:a2:65:3b:64:3a:af:f5:77:c3:67:
         18:21:b0:8a:82:83:13:de:a3:a1:ee:f6:40:69:40:d3:56:f5:
         8b:88:9e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:27:08 2025 by rpki-client