Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2bf5a1ea-38c0-4ced-acd0-3ceb6bf26faf.roa
File:                     2bf5a1ea-38c0-4ced-acd0-3ceb6bf26faf.roa (raw, json)
Hash identifier:          KxTO+HGvcJrtTYcQHGUO0fdrm6lRCY9T39KGeUl34xM=
Subject key identifier:   F2:49:4A:D3:86:8B:11:C0:A5:7D:AA:05:DC:A5:73:E1:47:DC:14:F6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6DCF6BBBDE17321B005C967371DC13550D52A9C4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2bf5a1ea-38c0-4ced-acd0-3ceb6bf26faf.roa
Signing time:             Tue 12 Aug 2025 00:11:00 +0000
ROA not before:           Tue 12 Aug 2025 00:11:00 +0000
ROA not after:            Tue 16 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f01:4806::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:cf:6b:bb:de:17:32:1b:00:5c:96:73:71:dc:13:55:0d:52:a9:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 12 00:11:00 2025 GMT
            Not After : Sep 16 23:59:59 2025 GMT
        Subject: serialNumber=c69dc83d4696e22f8dda9aff050aa0cf0a0bae9183faeacdab4859c9f5627d92, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:60:c4:54:a8:fa:58:31:7d:28:72:ae:ef:f8:
                    61:d1:af:e0:3e:f5:83:d4:6b:64:97:69:02:7f:a7:
                    f6:56:1e:da:1e:90:24:b4:b1:b5:c7:8d:6d:84:b1:
                    12:f3:30:7d:93:2f:e3:67:42:f8:ee:88:07:84:71:
                    4e:73:69:89:39:5c:2e:5f:3b:1f:ad:2f:61:24:93:
                    48:cf:31:03:89:b8:83:59:ff:56:03:f2:c0:65:d0:
                    d7:14:d9:ff:1d:d6:67:19:ea:6c:25:b6:85:b7:b4:
                    04:78:20:93:e8:c7:04:a4:ee:d2:fb:a9:fa:8f:e8:
                    29:c4:69:ed:87:30:7e:a5:8e:e3:b0:ef:0f:2b:f7:
                    4b:27:2f:6c:08:d0:34:d3:98:45:3a:90:00:54:16:
                    89:b3:c4:94:7b:5d:06:e0:69:ba:d8:f5:b6:69:7f:
                    79:21:1e:20:48:72:b7:18:ad:29:7c:59:b1:55:45:
                    82:be:79:01:ac:d4:ad:a5:dc:6d:f8:5d:ee:3f:de:
                    d4:3d:ff:9f:9b:d3:b2:90:f2:e7:9f:c6:71:e3:91:
                    00:b6:08:88:7a:d5:62:27:27:36:6f:7d:e8:e0:96:
                    5d:31:08:5f:d4:24:0c:f0:55:09:48:f4:ff:e7:a9:
                    f3:63:4d:b0:82:28:34:5f:75:75:d8:92:36:4a:46:
                    22:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:49:4A:D3:86:8B:11:C0:A5:7D:AA:05:DC:A5:73:E1:47:DC:14:F6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2bf5a1ea-38c0-4ced-acd0-3ceb6bf26faf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f01:4806::/47

    Signature Algorithm: sha256WithRSAEncryption
         2b:b4:56:c7:fa:46:44:ec:eb:1f:50:ae:88:b6:6e:84:ca:66:
         7f:f5:11:a6:f5:eb:28:ec:9c:17:0e:87:b3:6e:62:3f:55:4b:
         82:54:6b:29:55:2d:66:e9:6c:7c:67:21:4d:f2:22:fb:76:ca:
         c6:d8:31:68:32:a8:71:3c:9c:95:66:3c:9e:19:19:9b:8f:75:
         f7:41:6b:bd:3c:a8:89:ff:bf:0f:98:ab:9d:b6:37:dc:bc:e1:
         6c:bc:67:d7:e9:2c:62:aa:a1:c2:68:41:e7:1c:72:66:8e:59:
         06:84:a1:a0:3c:cb:f9:b5:07:fc:3e:c5:4f:60:25:e8:21:04:
         27:5d:82:1d:45:0b:f3:02:ae:2e:22:90:6c:58:d4:89:f2:f7:
         a9:c1:bb:b6:57:27:5a:51:00:64:a6:bd:f0:7a:fb:09:5b:84:
         68:df:d5:1a:6a:be:aa:d2:58:83:eb:b8:33:a6:67:a3:c8:d0:
         57:73:22:f5:20:98:53:14:2d:c7:1e:78:3e:c7:ca:7e:51:67:
         74:8f:63:f0:ca:ee:db:ee:ec:84:d4:d8:4d:d8:bd:b5:fc:43:
         99:43:d7:54:bc:ee:1d:a1:40:1c:1b:11:6b:6f:6e:d1:1f:b0:
         64:45:d8:9a:7c:ea:a0:a1:11:45:b0:7b:39:88:17:08:95:fb:
         ea:1c:3a:ff
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Aug 23 08:16:40 2025 by rpki-client