Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62f09371-735d-42fb-9b57-288b7c3a6758.roa
File:                     62f09371-735d-42fb-9b57-288b7c3a6758.roa (raw, json)
Hash identifier:          85yX1tgp9SAAa3QGe4cYNeROepBx8DdZuLZcBVby4NA=
Subject key identifier:   4F:09:7B:7A:5C:D2:AC:3E:16:A7:21:2A:A8:6B:9B:4D:68:64:18:68
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       02BF5AC8A3F57987B720CBD181BAE0ADB5AD8699
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62f09371-735d-42fb-9b57-288b7c3a6758.roa
Signing time:             Tue 19 Aug 2025 00:11:09 +0000
ROA not before:           Tue 19 Aug 2025 00:11:09 +0000
ROA not after:            Tue 23 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f60:3400::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:bf:5a:c8:a3:f5:79:87:b7:20:cb:d1:81:ba:e0:ad:b5:ad:86:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 19 00:11:09 2025 GMT
            Not After : Sep 23 23:59:59 2025 GMT
        Subject: serialNumber=fe065edca79e11fdc0af32abc5040c21fb39e073160971dc3d71cbeea26ae00b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f3:5a:c8:47:62:19:a2:bf:dc:a2:f4:97:d7:
                    b6:de:31:15:ac:9e:7f:d3:dc:bb:4d:8b:31:31:63:
                    3c:df:7a:67:eb:9a:c7:f6:73:e1:ff:e1:f3:2a:fe:
                    b1:0f:26:11:f8:d1:6a:ea:c4:38:4a:de:63:f4:34:
                    1d:de:9f:13:29:53:8b:40:79:4a:e3:8d:7e:e0:61:
                    15:33:95:2d:3d:95:4c:53:7d:3a:a8:0d:52:3e:92:
                    21:df:f6:fd:fe:dc:9d:a1:1a:7f:10:da:c3:f6:5b:
                    13:9f:3f:9c:b9:37:86:1a:33:ce:c9:33:83:1a:77:
                    44:ea:92:73:49:db:55:d6:81:98:fa:8d:03:c5:10:
                    01:11:68:d1:aa:27:5e:24:52:c8:67:c1:4c:0b:9c:
                    87:3f:e6:93:15:3c:c2:e4:42:be:f4:3c:f9:f2:78:
                    70:e9:d1:3b:ab:d2:ed:72:40:f2:d7:5b:1c:7c:69:
                    89:f2:8d:63:df:ca:d7:8b:d9:7b:0d:e0:b5:1c:92:
                    09:17:0c:c8:0b:a4:b0:17:00:e4:a4:c9:21:ca:38:
                    8b:69:06:ac:16:59:5f:ca:63:32:7e:14:8b:ff:c0:
                    ba:50:fc:2d:d8:3b:f5:38:b8:60:f3:ca:1b:e7:3c:
                    9f:40:ee:5a:b0:be:8d:11:4c:34:88:b4:76:e4:e7:
                    60:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:09:7B:7A:5C:D2:AC:3E:16:A7:21:2A:A8:6B:9B:4D:68:64:18:68
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62f09371-735d-42fb-9b57-288b7c3a6758.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f60:3400::/40

    Signature Algorithm: sha256WithRSAEncryption
         c1:d5:b8:48:1a:45:a2:1c:9c:ca:bb:76:45:43:45:d7:cf:94:
         8e:1f:c6:fc:f9:e6:7b:0a:c9:70:fe:24:37:26:2a:96:bd:0b:
         65:59:c5:d3:83:e3:28:e2:eb:63:96:1a:6e:9b:4a:75:e1:95:
         18:8c:ef:8d:ee:4d:07:72:d2:48:b3:3a:61:b5:72:9b:64:bb:
         70:d3:15:6e:8c:32:0f:09:6c:27:89:44:07:d0:2a:b3:f7:19:
         ca:aa:d5:eb:6c:b7:1d:b8:e6:24:15:6c:f0:70:2e:83:df:16:
         3a:cb:16:52:09:e2:ca:b4:a7:36:df:46:37:38:70:e4:d6:a7:
         05:eb:21:ae:03:aa:0b:ed:b5:55:c7:6b:9a:6b:65:ab:e9:fe:
         db:61:cc:82:57:f8:f8:63:83:5c:3d:d8:cd:3e:37:81:07:a6:
         9b:ae:cc:b3:c6:9c:0b:ae:d9:8b:33:28:ad:d9:8d:f3:20:60:
         e6:ad:7a:77:dd:7a:ec:a4:d3:56:6c:2a:de:e6:b2:a3:c4:07:
         e0:1d:d5:83:20:f3:c8:68:dd:e7:ab:f9:4a:d7:8a:12:0f:09:
         86:9e:7e:1e:67:9a:27:82:e0:6a:3b:57:25:a6:dc:97:51:2f:
         d4:66:ec:0b:51:83:a8:77:a3:9e:84:21:80:9b:61:76:06:ae:
         7b:24:e4:ef
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:22:12 2025 by rpki-client