Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5cb9a48f-17e2-4fa1-8ff6-b5f80c8a8908.roa
File:                     5cb9a48f-17e2-4fa1-8ff6-b5f80c8a8908.roa (raw, json)
Hash identifier:          1jCIQlNeYJdGkm7iuXUpBqvfO+j8yJcBaCSVy69ROX4=
Subject key identifier:   18:21:8B:24:82:0B:51:C6:A5:12:41:67:7A:B5:3F:75:4B:A8:FE:07
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       36E96978AAD6082AE1B1E73AD09F15EDF16B0F2D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5cb9a48f-17e2-4fa1-8ff6-b5f80c8a8908.roa
Signing time:             Mon 28 Apr 2025 15:20:24 +0000
ROA not before:           Mon 28 Apr 2025 15:20:24 +0000
ROA not after:            Mon 02 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fef:c000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:e9:69:78:aa:d6:08:2a:e1:b1:e7:3a:d0:9f:15:ed:f1:6b:0f:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 28 15:20:24 2025 GMT
            Not After : Jun  2 23:59:59 2025 GMT
        Subject: serialNumber=295588b12dc77c0ce88f1d9538925e1f482f8c33f9d950deaea5908f99132a78, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f3:f4:ff:44:60:5e:8f:de:85:f6:8c:aa:05:
                    99:46:89:4f:50:d6:cc:06:41:3d:77:59:cc:bf:78:
                    8b:7d:8a:20:6e:57:2c:79:a1:20:03:70:35:88:b0:
                    8a:87:1d:68:88:ad:09:56:30:4f:d5:df:04:d9:47:
                    ca:1b:ed:fa:46:27:3c:cd:80:21:56:df:9b:e2:24:
                    eb:e1:08:47:70:44:d3:9c:6c:39:16:b5:3c:ab:fa:
                    0c:93:bf:2a:b6:d3:30:f1:25:d1:20:c4:7b:c1:62:
                    f4:c6:04:c3:b8:e7:54:ff:56:6c:f0:3c:f9:4f:49:
                    e0:6b:1f:7a:0a:14:c1:99:11:85:3b:77:73:c6:ca:
                    c8:55:11:ed:28:d3:1c:63:83:1c:4c:29:92:dc:8f:
                    60:42:c9:02:f4:15:05:10:c4:4b:2e:b2:69:c0:8b:
                    ef:ec:4c:20:28:ed:15:56:e6:33:c7:9d:f9:27:43:
                    01:cd:72:e8:79:c0:99:8a:ec:1d:54:00:f8:84:9a:
                    e6:b0:41:08:c8:3b:4c:ec:e1:6a:95:fc:25:fc:82:
                    c2:80:59:30:f3:12:8b:ac:5d:22:b6:b7:c6:14:46:
                    f8:a4:47:97:fc:e0:5b:b7:44:4f:eb:93:91:19:b0:
                    e3:cc:2e:30:3d:f3:e9:eb:b8:0d:7e:c8:df:ad:4d:
                    c0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:21:8B:24:82:0B:51:C6:A5:12:41:67:7A:B5:3F:75:4B:A8:FE:07
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5cb9a48f-17e2-4fa1-8ff6-b5f80c8a8908.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fef:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         ba:e1:a0:83:46:4c:25:fd:88:ec:23:0d:2d:32:7a:78:cc:ec:
         46:c1:f6:fd:5a:42:27:53:62:ef:6f:11:30:f7:8c:65:d9:bb:
         2d:18:f5:85:77:d7:40:80:f3:bc:d7:16:b6:ff:ca:1d:e0:46:
         c2:f6:ff:c9:f9:bc:23:8b:40:41:7c:53:4d:47:32:e9:6b:e5:
         92:0d:b3:0f:20:d9:08:5b:97:28:b0:da:8f:fd:14:77:c8:80:
         04:5f:e4:b3:61:2a:e1:0c:4a:c4:2a:20:5d:5c:e3:b9:10:a4:
         cf:b2:e4:5c:cf:04:c3:7b:31:7f:87:93:98:98:a5:a7:d9:7b:
         71:4c:e0:41:f2:92:53:10:22:03:0e:56:11:93:c0:f0:22:67:
         18:ae:1f:8f:dc:00:56:be:ed:54:21:9b:60:4c:41:c1:fb:52:
         bd:36:a4:82:88:ee:d9:68:57:65:3d:35:cd:8b:41:f6:d4:42:
         ee:85:b6:93:96:98:c1:f0:e0:89:c5:0a:9a:6c:fa:e1:2e:de:
         64:ef:8b:af:68:63:37:41:96:6b:5e:12:ea:75:c8:82:fa:4e:
         d7:6a:f8:60:fb:74:72:d0:84:7c:4b:a4:50:da:ce:11:a2:80:
         5e:5b:51:cb:3d:b7:66:7c:bc:3e:15:4b:93:6b:89:26:a8:7f:
         7e:0a:ae:09
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue May 6 03:54:32 2025 by rpki-client