Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/266689bc-b13a-40fc-b1c5-8969de9e6cbb.roa
File:                     266689bc-b13a-40fc-b1c5-8969de9e6cbb.roa (raw, json)
Hash identifier:          HarvzeSzi00531PE4fdrYVTw04+BisyJBsHz6vGWq7c=
Subject key identifier:   E2:56:C8:73:DF:94:C0:86:7E:44:FF:3E:BE:BA:02:42:DE:36:67:CC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       256960C4013D288F1B021A49247AE5BC6D51E4B0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/266689bc-b13a-40fc-b1c5-8969de9e6cbb.roa
Signing time:             Mon 18 Aug 2025 15:41:39 +0000
ROA not before:           Mon 18 Aug 2025 15:41:39 +0000
ROA not after:            Mon 22 Sep 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1fb9:3400::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:69:60:c4:01:3d:28:8f:1b:02:1a:49:24:7a:e5:bc:6d:51:e4:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 18 15:41:39 2025 GMT
            Not After : Sep 22 23:59:59 2025 GMT
        Subject: serialNumber=18d572506d490428a634d05f4ce822ac5108d34a5c6d4ea5f5192568e8afbd13, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:69:6a:43:2d:b0:22:97:d9:70:6a:7e:93:12:
                    2b:26:c9:da:67:dd:b0:7e:c0:68:da:19:61:d2:64:
                    5b:75:15:b7:a1:ae:82:a8:b0:63:66:60:9a:8f:e3:
                    85:dd:1e:2f:b1:79:ec:ce:52:ef:f9:da:f0:38:9d:
                    65:1b:33:f4:38:f4:ec:b2:7a:c5:e0:5e:6c:5f:0f:
                    7e:54:73:5f:3d:e8:c6:7a:59:32:27:28:52:15:01:
                    e1:f5:02:09:cf:fa:ac:8a:52:4a:33:e1:e8:25:0c:
                    82:95:7c:7e:0c:a7:8a:49:24:a2:62:0e:a9:44:4b:
                    3b:b1:98:f6:72:5b:ea:8f:be:92:36:5b:89:52:6d:
                    a7:c7:36:0f:33:d2:08:95:ad:e6:7f:2c:6d:02:e5:
                    01:f8:78:9a:72:f0:a1:95:a4:2d:97:ec:5a:14:ab:
                    fe:58:c6:36:da:9c:8a:35:43:31:50:ad:f5:20:c2:
                    b7:2f:ea:d1:db:54:05:56:a4:28:0b:fe:84:2b:b0:
                    56:74:59:14:cd:80:16:90:30:68:45:ee:17:97:23:
                    8f:6a:a3:39:67:18:f9:81:95:c8:e0:bf:e0:9f:d0:
                    49:34:21:4e:ee:7e:a9:cf:0f:90:aa:f2:0e:5f:71:
                    47:bd:ce:2e:fd:2b:96:9e:0c:3c:d0:0e:b7:f4:56:
                    60:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:56:C8:73:DF:94:C0:86:7E:44:FF:3E:BE:BA:02:42:DE:36:67:CC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/266689bc-b13a-40fc-b1c5-8969de9e6cbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fb9:3400::/40

    Signature Algorithm: sha256WithRSAEncryption
         38:34:5c:33:2a:08:a7:a7:05:c3:9e:7d:25:79:96:db:65:11:
         8e:df:dc:5c:64:c6:d7:76:e7:cc:d3:d7:d5:e3:45:7c:9e:8a:
         75:be:a3:e8:b2:ba:30:7b:ca:0d:0f:9f:fa:59:f0:af:b1:6a:
         46:ec:e1:9a:3e:7f:98:7a:22:c2:3f:83:b7:9e:8c:1a:5f:8e:
         86:b0:59:fa:e9:9f:20:2a:71:34:49:a8:a8:7a:f4:61:ff:a6:
         41:dd:fa:df:d4:ca:20:87:be:32:f9:fa:71:6f:f5:80:ad:6f:
         58:75:d3:44:97:70:a5:94:39:43:1c:fd:9b:a0:12:88:3d:38:
         bf:44:31:41:2a:4d:a8:94:dd:13:49:e2:1a:34:9b:d9:f3:41:
         4f:9c:7e:c3:65:62:29:28:8f:47:1a:40:37:ae:ed:24:7d:55:
         c6:39:68:e4:39:83:ca:51:42:e0:00:65:de:2b:c1:63:df:c7:
         60:9d:be:94:bc:0c:a2:2c:70:9d:45:64:20:46:61:8b:9e:58:
         a7:85:22:e2:c4:52:10:05:7c:64:35:d7:3c:ce:96:e0:b5:c0:
         17:f4:67:f9:ee:6e:4b:47:65:12:72:67:56:21:74:bf:0a:90:
         f0:68:55:e9:ca:27:d9:4a:09:c3:6f:4b:84:0e:ef:42:b6:7e:
         1f:6b:06:0d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Aug 23 08:24:44 2025 by rpki-client