Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6bd427c6-2161-4025-ba29-5d5bee0dc5c6.roa
File:                     6bd427c6-2161-4025-ba29-5d5bee0dc5c6.roa (raw, json)
Hash identifier:          I1VgZFdNwVk5Qwk78Mdw0xQ+LHT0AQ+S0HGyxOlFzMw=
Subject key identifier:   27:A6:EF:CF:DA:82:5B:40:21:63:60:2F:63:58:74:B4:FB:E1:7C:7E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2BA81F469368850D885856CB915E3B55720A851A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6bd427c6-2161-4025-ba29-5d5bee0dc5c6.roa
Signing time:             Mon 28 Apr 2025 15:20:24 +0000
ROA not before:           Mon 28 Apr 2025 15:20:24 +0000
ROA not after:            Mon 02 Jun 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1fef:c000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 17 May 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:a8:1f:46:93:68:85:0d:88:58:56:cb:91:5e:3b:55:72:0a:85:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 28 15:20:24 2025 GMT
            Not After : Jun  2 23:59:59 2025 GMT
        Subject: serialNumber=8028a02d21362ba191b09292bbfaa2cc8e9492508f3d7f95f5768994b00bfbf3, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:03:c6:ae:3c:ed:90:a4:0b:fa:4a:f1:6a:24:
                    65:9b:00:22:b7:0a:56:bd:3c:1f:54:5d:1e:db:82:
                    f2:74:79:b3:4d:7c:65:08:98:4d:53:9e:a7:14:10:
                    3a:3d:4a:a9:3c:5b:9f:89:c3:2d:5d:b7:99:0f:75:
                    d4:56:5d:61:85:20:da:3a:d1:f2:bc:6a:73:e2:7b:
                    97:8c:c1:7b:02:ea:e8:1a:8a:75:0f:4d:55:d8:c3:
                    4e:37:ac:13:fb:25:f5:a7:81:30:c6:e1:69:12:46:
                    62:28:c9:d5:c3:15:e6:47:dc:bd:fd:fc:4b:bc:fa:
                    ee:3d:8e:91:1c:f5:87:30:51:fe:e8:e6:9d:08:29:
                    1a:ab:52:18:0a:9a:43:8c:c2:da:1f:4b:de:46:bf:
                    fd:49:25:e9:82:c2:ff:ec:7b:6a:f5:04:6d:49:15:
                    be:39:26:27:7c:15:7e:50:f4:0f:f6:96:4d:bd:41:
                    e0:08:2f:67:a4:1d:0a:71:b1:47:1c:ec:c1:bf:4f:
                    d5:c3:1f:81:ba:30:ee:49:6e:0b:43:cb:a6:a7:a1:
                    01:2b:4b:e4:9e:7e:3f:6c:93:fa:27:31:66:98:e9:
                    80:19:03:f0:20:e4:ce:7d:c8:dc:ab:51:bc:32:12:
                    71:7b:ab:4a:de:b2:f2:5c:84:64:7a:c4:8a:53:ff:
                    8f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:A6:EF:CF:DA:82:5B:40:21:63:60:2F:63:58:74:B4:FB:E1:7C:7E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6bd427c6-2161-4025-ba29-5d5bee0dc5c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fef:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         40:39:78:d3:31:74:67:e3:c3:11:16:c2:ed:7f:d6:6a:f2:c5:
         05:8b:b1:a2:82:b3:ef:67:a0:0b:21:de:6f:85:2e:0b:6c:de:
         a2:ec:fc:8a:77:9c:4d:ba:3a:4c:e1:7e:6b:6c:36:39:c4:02:
         ed:a9:bf:48:5b:18:3c:55:ab:24:94:aa:82:b4:f8:97:0a:fe:
         1d:44:b6:56:30:c1:6d:f0:54:e3:93:06:4f:d1:f2:98:25:cf:
         30:66:18:8f:4b:06:bf:a8:65:3c:4f:c6:85:76:1c:53:35:ed:
         6d:44:f8:d8:38:87:3d:34:93:27:12:51:04:cc:69:5d:c8:82:
         78:87:58:9f:ac:60:42:7f:e6:b3:2e:ee:fd:d2:5d:22:f1:d2:
         9a:c7:cc:00:2f:5d:a0:73:ca:ed:7c:c9:1d:5e:09:8d:bb:21:
         5d:5d:2e:41:ff:ef:b2:97:e1:29:52:02:aa:61:eb:ca:e1:dd:
         1d:b8:94:51:e8:43:f0:cc:f5:37:2c:27:63:8c:69:e0:c1:e5:
         70:af:8d:bb:52:2b:ab:99:0b:c9:79:e7:86:e2:a5:55:52:70:
         2d:ba:a2:f8:a5:55:7e:52:d3:5f:31:d9:09:23:a5:2a:fe:be:
         ff:3c:80:7c:c9:82:e8:4d:da:33:15:b2:1e:a5:d8:9c:e6:84:
         80:73:8e:12
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu May 15 17:59:20 2025 by rpki-client