Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5da3c1c2-2ef0-4ade-8296-ffac8f2e088b.roa
File:                     5da3c1c2-2ef0-4ade-8296-ffac8f2e088b.roa (raw, json)
Hash identifier:          94JTRXv/dqIT53/CpfC/6MA14p2JORbwm0QfFf3Um8c=
Subject key identifier:   C1:F5:D6:E0:4B:37:5D:C8:CA:C8:65:EB:42:43:26:47:75:8B:E2:AC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       016319B1EE0A0835E1F9F4F5EA977CFB87B62AC0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5da3c1c2-2ef0-4ade-8296-ffac8f2e088b.roa
Signing time:             Mon 23 Jun 2025 15:11:35 +0000
ROA not before:           Mon 23 Jun 2025 15:11:35 +0000
ROA not after:            Mon 28 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ffd:831b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:63:19:b1:ee:0a:08:35:e1:f9:f4:f5:ea:97:7c:fb:87:b6:2a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 23 15:11:35 2025 GMT
            Not After : Jul 28 23:59:59 2025 GMT
        Subject: serialNumber=725594b9ce7a0be83f8e5ff3dfc6aba838ec8f4ae4831cd4be8b8b14d3415ef5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:69:15:a4:0e:4f:da:8b:6e:f5:b5:a8:80:c0:
                    2c:66:0e:e8:4e:eb:4d:14:a2:f3:12:4d:cf:e3:19:
                    fc:5a:80:36:4c:2b:21:c4:c5:35:86:d4:2e:a5:9a:
                    7a:8d:83:23:9b:ab:12:e0:5c:49:3c:23:d9:c6:fc:
                    f3:24:9e:c0:b5:c6:08:85:fa:46:29:56:ca:f5:d0:
                    01:18:8d:3f:3d:05:c3:5e:b9:0f:55:10:16:c8:90:
                    f2:ea:04:e0:95:86:7a:0c:e1:ec:da:bf:09:fb:8a:
                    ac:ba:eb:fd:8f:e9:51:e8:c8:a8:95:2a:c3:ae:ad:
                    3e:e6:76:14:c5:70:d0:c7:0d:4b:c5:44:8b:f8:02:
                    30:e7:6e:cb:35:ea:90:2a:e3:dd:e4:3e:51:19:a5:
                    cf:24:e2:78:1a:84:b6:87:0b:52:57:70:9b:31:ed:
                    93:e2:69:aa:8f:46:9e:04:90:97:d5:e5:ad:b7:91:
                    70:1c:e7:d6:41:be:d0:6a:d4:c7:51:ec:84:a7:e4:
                    2a:48:65:75:2e:67:84:a3:33:23:70:28:c8:fa:d4:
                    1f:8f:e7:62:8a:5b:08:c6:fc:ed:94:00:d4:8d:15:
                    1e:14:8a:e8:0c:bd:fe:8a:50:39:22:a7:02:e3:4a:
                    27:59:24:e5:07:8e:9d:09:5c:99:3d:25:d5:70:46:
                    87:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:F5:D6:E0:4B:37:5D:C8:CA:C8:65:EB:42:43:26:47:75:8B:E2:AC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5da3c1c2-2ef0-4ade-8296-ffac8f2e088b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ffd:831b::/48

    Signature Algorithm: sha256WithRSAEncryption
         0a:9a:0d:e2:b7:b2:03:eb:3f:73:4c:89:52:88:dd:fa:e4:c8:
         4d:8f:63:f7:17:5b:da:6b:9e:e1:4f:34:b6:49:5d:19:cd:3c:
         ef:07:42:7e:4d:d7:23:e0:9f:08:91:75:0f:70:2c:31:35:6b:
         94:15:1d:49:02:bd:5e:8d:4f:86:aa:ba:26:7f:0a:e4:ed:92:
         80:c6:5c:4d:a6:cc:9f:09:fb:93:d7:f9:b1:d4:c9:de:7f:71:
         fb:7f:6b:14:69:81:88:01:f5:33:68:dc:35:06:64:13:10:36:
         5a:55:01:b5:b9:bb:dc:8b:b9:61:b3:40:6d:e8:71:d2:23:45:
         90:ee:1c:54:f1:8a:78:cc:34:bd:c7:d4:91:86:05:fb:2c:ea:
         58:57:dd:22:3e:70:ee:b1:94:a0:cc:21:fc:a6:c0:5c:96:2b:
         3d:e5:b4:2d:2d:83:50:e2:06:23:cb:a8:78:e6:84:93:3d:ed:
         d4:49:31:94:55:8c:55:c8:4d:a1:eb:33:12:c6:83:78:72:d4:
         74:22:79:79:5c:d2:d5:88:c6:85:40:c7:18:16:b9:dd:0c:50:
         ff:7c:0e:43:c8:c8:f0:ff:5e:be:3f:41:b0:83:e0:0f:c8:a1:
         c2:78:77:91:bf:8b:96:a2:3e:9b:c5:c2:71:8c:48:a8:fc:76:
         2b:03:bc:2a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 2 05:24:16 2025 by rpki-client