Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6956d93c-867c-46f8-9ee4-de76eb50bb6d.roa
File:                     6956d93c-867c-46f8-9ee4-de76eb50bb6d.roa (raw, json)
Hash identifier:          cvGhtOBx5ugFy2MaYicZE3cVmvb8nvnYSPVj2j58WW8=
Subject key identifier:   AB:F9:7A:5A:96:42:73:FE:05:AC:B9:F7:4F:B0:97:93:A3:B5:58:6F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6ED7E57DD526CD805D396F4AE489B7FBE42A751A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6956d93c-867c-46f8-9ee4-de76eb50bb6d.roa
Signing time:             Mon 04 Aug 2025 16:21:10 +0000
ROA not before:           Mon 04 Aug 2025 16:21:10 +0000
ROA not after:            Mon 08 Sep 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        2600:1f15:800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:d7:e5:7d:d5:26:cd:80:5d:39:6f:4a:e4:89:b7:fb:e4:2a:75:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  4 16:21:10 2025 GMT
            Not After : Sep  8 23:59:59 2025 GMT
        Subject: serialNumber=5ee2e13da0179c87ecda8aab36774d2f2dc0a677d97e8b58cd93b556879a9502, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3e:d9:ef:57:11:fe:67:64:d2:57:19:83:3d:
                    c6:57:b8:75:ef:76:09:aa:e1:53:f4:ee:c2:15:48:
                    bb:3f:36:d7:cd:05:64:5a:c6:7f:26:55:2c:d2:8f:
                    bf:a4:f0:c3:15:ac:64:76:9b:15:47:ef:75:3d:29:
                    9d:19:8a:70:50:62:ff:36:a6:f4:04:89:2e:62:85:
                    65:d0:f6:7f:a9:d3:3d:13:bc:32:10:af:85:0a:8b:
                    cf:b5:2f:f0:a6:3d:38:8b:49:6d:1d:6c:77:7b:8b:
                    df:e0:81:da:04:10:a4:24:a6:52:d1:31:59:0e:9c:
                    25:92:ae:63:ee:f0:45:2d:51:d3:02:5a:a4:e3:d6:
                    ca:bc:66:6f:50:d1:50:e4:bb:51:fc:73:37:ff:44:
                    ce:24:33:a2:0b:f9:04:c5:5c:7d:b3:b7:8c:e4:25:
                    63:43:3e:46:cc:0e:7f:1e:7d:88:66:48:50:7e:48:
                    8f:b2:09:69:76:ed:96:fe:36:e6:ca:26:d9:a0:0a:
                    7f:6d:ca:8a:81:97:6c:51:7c:fc:ad:32:da:3d:ca:
                    bc:b3:cd:1c:a9:f2:56:37:d3:3a:c9:50:7b:4c:7c:
                    2d:4f:e3:88:46:0e:6b:bc:97:e9:ab:5b:76:28:ed:
                    6c:6a:38:38:d0:d5:2e:44:fe:73:ec:7f:45:a0:0e:
                    8d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:F9:7A:5A:96:42:73:FE:05:AC:B9:F7:4F:B0:97:93:A3:B5:58:6F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6956d93c-867c-46f8-9ee4-de76eb50bb6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f15:800::/38

    Signature Algorithm: sha256WithRSAEncryption
         b6:69:e9:4f:dd:9c:98:ae:94:77:bd:07:bb:cc:f1:af:a3:b1:
         60:5d:e3:d7:64:24:52:b8:b2:34:ba:13:fc:b5:92:ad:d5:03:
         ec:b6:12:ce:bf:0c:3d:6b:b5:fd:6e:fb:a1:5f:8c:57:aa:57:
         97:22:7d:d1:e2:7f:f8:18:be:74:ec:9a:8a:0a:83:c0:71:1d:
         96:95:67:45:31:1f:1c:8f:6e:f4:4b:f3:8a:e1:ff:17:c6:f1:
         9c:a9:0f:fe:da:1a:1f:a6:f4:d3:a0:98:4a:92:f1:de:29:9b:
         75:00:80:bb:5e:12:14:d4:54:f2:db:a3:fb:8f:8d:9e:51:95:
         84:dc:d3:9e:a5:06:64:d1:0a:bc:f5:be:f3:58:a7:e1:63:97:
         e2:a8:b9:76:31:58:b0:1f:c1:5c:2c:89:32:8c:86:68:5c:3f:
         db:39:84:fe:3e:72:c7:94:9a:51:22:f2:9e:a8:54:36:1b:0c:
         97:b6:af:5e:08:79:2d:61:4e:11:a2:c7:9c:93:f2:fb:8a:c7:
         2e:23:fd:67:f6:05:50:5c:e0:13:54:32:65:76:7b:09:b8:86:
         ad:9f:a2:39:31:66:62:c1:bb:95:15:44:4a:41:e1:fd:cc:50:
         c6:38:8c:9e:ff:32:e2:5b:f2:f5:f1:7b:f6:94:81:71:36:32:
         1e:d8:d1:4f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:45:07 2025 by rpki-client