Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/595cf9d8-cab3-4f63-83fa-aba430c3eaf5.roa
File:                     595cf9d8-cab3-4f63-83fa-aba430c3eaf5.roa (raw, json)
Hash identifier:          LNFaDdOJyHqGPmOZ3qo97fRZ9M4iHBiaPSxOvdEGYKk=
Subject key identifier:   C8:AF:A4:41:39:79:48:DD:92:86:E6:E5:64:64:E4:FD:F3:39:AA:FE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       074611320E4740261D31E48B9214A1D8CE2143A0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/595cf9d8-cab3-4f63-83fa-aba430c3eaf5.roa
Signing time:             Mon 18 Aug 2025 15:41:48 +0000
ROA not before:           Mon 18 Aug 2025 15:41:48 +0000
ROA not after:            Mon 22 Sep 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1fb9:e000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:46:11:32:0e:47:40:26:1d:31:e4:8b:92:14:a1:d8:ce:21:43:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 18 15:41:48 2025 GMT
            Not After : Sep 22 23:59:59 2025 GMT
        Subject: serialNumber=69276bd211b8bf54bd39ce289fdf787871d57e53bbe695f9803aeb3b1431af84, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4f:6a:57:da:ca:c1:ac:7c:b3:d0:cd:08:ea:
                    28:c2:bb:7d:52:a2:8e:32:f1:2d:8b:bc:d3:5f:9e:
                    3b:60:ae:d6:54:45:0a:37:ea:80:75:1d:a8:27:aa:
                    86:8b:45:4d:78:ac:bb:4c:75:d0:69:48:4c:04:29:
                    60:96:bf:ef:8d:d1:f8:82:2f:9c:0f:72:34:77:91:
                    d4:df:c9:06:2c:94:55:63:69:e3:00:29:d7:ba:c7:
                    01:5f:48:ab:79:2b:78:68:53:fa:d5:ce:98:d8:2d:
                    5a:6a:37:46:4d:fe:fa:6b:34:87:ba:9e:7c:dc:75:
                    6f:11:f9:b8:fe:f5:ba:21:66:da:bf:69:fb:57:dd:
                    be:bd:c3:2f:7c:88:01:eb:1d:1d:6d:5f:5b:e5:c8:
                    76:42:8c:e2:f6:26:02:f9:8c:3d:4d:2c:be:d7:bf:
                    87:36:96:c6:2a:ad:49:dd:ab:3f:14:06:b6:24:1a:
                    d6:9f:56:9c:b2:0a:b9:27:ff:72:43:12:6e:9f:82:
                    fa:20:ba:88:13:be:56:5f:21:a1:b8:45:b7:9f:dc:
                    55:b4:83:ec:c6:b0:8b:78:6c:e7:4b:32:01:aa:9d:
                    9a:cb:63:ad:b1:c5:32:df:5f:cc:e8:6f:32:af:e0:
                    2b:20:94:07:75:20:c9:f5:a4:17:2d:16:7c:67:2e:
                    9d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:AF:A4:41:39:79:48:DD:92:86:E6:E5:64:64:E4:FD:F3:39:AA:FE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/595cf9d8-cab3-4f63-83fa-aba430c3eaf5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fb9:e000::/40

    Signature Algorithm: sha256WithRSAEncryption
         6d:71:75:14:83:e7:64:a2:de:b0:34:c5:4c:a0:2e:c4:e7:09:
         c9:7c:37:4b:5b:af:f4:71:c8:1a:25:5e:4e:04:b8:12:0b:96:
         1d:2e:cb:a3:51:9d:8c:62:b1:4b:9a:de:06:6a:4f:b0:0e:33:
         10:19:4f:e0:e3:b6:c3:f4:59:bd:5b:d7:2e:2b:fa:e4:81:d5:
         79:11:e6:9e:87:de:c9:92:f6:d0:f4:83:d5:45:b9:af:a3:11:
         f6:af:6c:16:b6:af:a9:ce:77:b5:7f:57:31:74:8f:ec:68:32:
         ad:da:3e:4a:03:f4:83:73:91:85:39:a7:88:2f:f4:2f:b6:dc:
         f7:34:f3:8c:1d:85:47:59:47:16:4a:ec:28:23:58:10:69:d1:
         76:2b:41:4f:9a:1c:85:47:7d:94:3e:db:e4:0e:50:72:31:de:
         47:16:d7:ac:94:de:6e:97:88:2b:e0:a8:69:61:29:4e:91:61:
         55:33:ee:90:e8:14:64:61:31:4b:15:72:ee:56:98:58:29:6b:
         97:4e:5e:8d:76:56:fb:15:36:2c:1a:ed:6d:c5:d4:2e:48:28:
         5f:c4:c2:bc:8c:47:df:ef:19:70:5a:58:9e:a9:f0:43:99:3d:
         ec:53:70:8c:33:1a:6e:06:78:09:0d:d2:48:d9:60:c5:98:42:
         9d:78:a1:b2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Aug 23 08:20:31 2025 by rpki-client