Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6ec6eac3-6772-49b5-b04f-ebbfe1d2c01f.roa
File:                     6ec6eac3-6772-49b5-b04f-ebbfe1d2c01f.roa (raw, json)
Hash identifier:          K+f1RFg8lf5pUjlt2rNbmQxIF4ccz/NdtxHWesj/SZA=
Subject key identifier:   80:6C:F6:23:62:48:1E:0C:3A:A5:1B:28:88:89:93:AF:29:50:F4:33
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       73AC6768D6C0871DDE290EB3BC954A7ADE6CE126
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6ec6eac3-6772-49b5-b04f-ebbfe1d2c01f.roa
Signing time:             Mon 02 Jun 2025 18:36:58 +0000
ROA not before:           Mon 02 Jun 2025 18:36:58 +0000
ROA not after:            Mon 07 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000::/28 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:ac:67:68:d6:c0:87:1d:de:29:0e:b3:bc:95:4a:7a:de:6c:e1:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jun  2 18:36:58 2025 GMT
            Not After : Jul  7 23:59:59 2025 GMT
        Subject: serialNumber=af9cabbd2dbfe27f8c0ef7bab3ea386aa2cacdf8d54cce967e9682ed12b9fbe3, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3e:77:41:bf:e3:5e:6c:4d:71:c0:05:d4:d3:
                    47:24:78:a5:2f:be:8a:50:78:97:c0:aa:63:20:33:
                    36:75:c0:c0:59:9f:fd:64:08:fa:2f:16:d0:10:b5:
                    0f:3e:97:c0:a7:2c:63:9c:42:ae:16:80:59:9d:bb:
                    8f:f0:a7:f6:8c:22:83:63:a8:7f:7a:c2:40:ac:dc:
                    94:f3:29:8f:a7:9d:71:6d:0c:fe:77:63:26:8b:81:
                    21:4d:6a:94:67:ff:4c:56:07:72:4d:05:bb:f9:01:
                    65:1a:58:03:85:b9:e4:30:b6:94:8c:bd:31:d0:d4:
                    e3:af:89:b4:7c:6b:a1:78:68:54:9d:3c:e2:39:c0:
                    70:9a:f8:97:1a:e0:d0:03:dc:dc:91:e3:e4:f2:d1:
                    3e:ba:38:c2:2d:b2:65:8e:41:79:85:23:b1:22:a8:
                    2d:13:6f:0f:02:2e:4f:b4:51:70:c9:89:dc:b0:da:
                    37:4b:c4:b9:cc:cc:e7:d6:3b:39:b7:60:c2:99:68:
                    dc:dd:89:65:9c:16:f3:ac:93:b4:94:8b:53:2e:34:
                    ab:1a:a4:23:81:3e:f9:d8:48:2d:2c:3f:4e:ef:f3:
                    6c:4a:6d:f9:ea:e1:dc:13:e6:95:d9:b4:29:5e:bd:
                    e1:6e:7b:93:0e:f0:96:85:f0:73:7c:92:63:0f:3c:
                    3f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:6C:F6:23:62:48:1E:0C:3A:A5:1B:28:88:89:93:AF:29:50:F4:33
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6ec6eac3-6772-49b5-b04f-ebbfe1d2c01f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000::/28

    Signature Algorithm: sha256WithRSAEncryption
         2f:d9:da:00:d1:d2:f7:2c:94:67:95:c4:cc:4a:c9:bf:b1:7a:
         58:d1:de:05:e3:c6:d2:ac:d5:82:f0:28:88:40:22:77:80:ae:
         50:2a:15:06:91:02:70:1c:23:ab:2e:29:24:bc:c3:da:46:bd:
         56:55:80:7c:0a:4f:12:72:ee:b9:77:ad:df:89:e1:89:d7:f7:
         db:75:e4:b6:a8:f2:52:5b:f8:21:24:7e:7b:3f:e5:ef:25:64:
         de:a8:ed:41:b2:e7:43:a8:a5:67:18:62:36:29:94:39:a8:9e:
         22:c9:ff:37:1e:71:aa:2e:01:fb:b7:d4:f6:cf:69:19:42:49:
         1c:22:ab:b0:d5:2a:01:38:8c:f5:2c:5f:fb:4a:9c:cc:fe:9b:
         59:dc:fb:f0:5c:73:da:87:32:45:3b:a4:b7:88:06:3f:97:e2:
         99:94:48:25:7d:3d:75:23:7a:c4:33:e4:95:16:ec:f4:35:af:
         01:ce:7f:1a:e1:6e:d2:b0:79:65:76:a2:9e:b1:bc:73:8e:ab:
         67:24:14:2d:96:53:49:32:89:71:6c:ec:f8:84:5e:98:1c:79:
         bb:8b:8f:9f:f4:a3:48:d6:4a:8b:af:fd:37:b5:a5:7a:27:20:
         8f:10:a3:37:54:73:cf:8b:2d:28:c7:18:af:ce:ef:d4:d3:74:
         03:9c:29:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:05:14 2025 by rpki-client