Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/75e564e6-dc69-4fde-a5ef-ec9609456180.roa
File:                     75e564e6-dc69-4fde-a5ef-ec9609456180.roa (raw, json)
Hash identifier:          rPchg3wcv8ElCV2wDSHaKLOZl+FnBFRjc07nykIsE6A=
Subject key identifier:   84:C1:21:96:32:16:3F:D2:11:DA:39:72:BA:5A:78:74:FF:61:99:B8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       054186F5062F5E2A144EA0BE689A0D0D0E53E981
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/75e564e6-dc69-4fde-a5ef-ec9609456180.roa
Signing time:             Fri 13 Jun 2025 16:32:21 +0000
ROA not before:           Fri 13 Jun 2025 16:32:21 +0000
ROA not after:            Fri 18 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff1:3400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:41:86:f5:06:2f:5e:2a:14:4e:a0:be:68:9a:0d:0d:0e:53:e9:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 13 16:32:21 2025 GMT
            Not After : Jul 18 23:59:59 2025 GMT
        Subject: serialNumber=a0f914f10d53eff6e560dd485abaf22e5ffdb76c1a88aa3cc2337fe2293551c1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:da:8f:57:b1:90:f6:f6:9a:e2:99:21:63:50:
                    32:74:f7:49:49:a5:7c:b5:ea:76:ce:17:7e:22:4f:
                    af:01:4a:f5:d5:83:77:0c:75:a3:7f:d9:bc:a5:f0:
                    f5:90:74:b6:87:be:34:d0:12:18:be:27:bc:b7:b0:
                    b8:e6:7c:25:6e:87:5c:ed:b8:bb:a1:26:ab:00:fe:
                    fb:27:4f:f4:b8:23:c6:e2:e7:ac:e1:3d:f3:f5:64:
                    5e:f5:89:60:cc:e5:42:1c:ee:00:5b:6d:4d:ca:95:
                    6f:c0:4c:58:d0:4d:78:85:fb:39:eb:0b:84:23:dc:
                    c5:2f:1f:91:94:7c:e6:48:ff:5b:8c:a8:83:a2:e0:
                    55:08:a7:82:3f:2d:d1:0e:f8:3b:21:30:a6:7c:1a:
                    7b:61:b7:74:c7:2f:d0:f3:78:df:ed:cc:75:70:cf:
                    7b:85:3e:26:e1:b0:cd:bf:84:12:1e:c7:3c:5c:79:
                    ca:93:6a:71:a9:d6:93:d7:d6:da:af:c9:bd:b1:cf:
                    e1:ca:e5:cc:b4:3a:ba:b5:cb:a8:f5:4d:8b:eb:d4:
                    9d:98:d3:09:b6:4f:5d:4e:1c:b0:5e:ec:89:07:d4:
                    0c:4e:8e:94:1b:a2:a1:ed:9f:6b:c9:aa:9c:05:ba:
                    7f:e5:4c:e5:2b:6b:87:1f:c6:55:79:1c:6e:20:8a:
                    5f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:C1:21:96:32:16:3F:D2:11:DA:39:72:BA:5A:78:74:FF:61:99:B8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/75e564e6-dc69-4fde-a5ef-ec9609456180.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff1:3400::/40

    Signature Algorithm: sha256WithRSAEncryption
         0e:fa:f3:f7:18:b7:94:01:8e:c2:01:bd:50:1f:1e:2d:d6:37:
         df:16:2a:fe:17:4d:56:03:4c:4e:ff:da:a5:a6:65:b8:a8:96:
         09:64:61:35:49:51:aa:c1:2f:51:2c:e3:bf:da:64:aa:bf:ca:
         f9:91:9f:e6:ca:00:c0:1c:55:6a:f4:6c:ca:c0:0d:fa:ca:d4:
         0c:af:51:f2:8e:d1:9e:83:1e:8d:ec:64:89:f8:64:56:9b:6a:
         d7:21:9c:2b:78:20:f0:06:c8:3f:b4:c4:43:2b:f4:74:6d:d1:
         9b:22:f5:cc:7a:6d:0e:f1:06:a5:c5:7f:85:96:9c:b4:e8:5f:
         ef:7b:1f:a4:f7:c2:26:b5:76:ca:f9:a1:0f:cd:96:28:7d:7b:
         ed:7f:57:05:69:e9:31:ef:8d:50:ab:3e:db:a1:57:aa:36:4d:
         6a:df:77:16:43:db:d9:96:3f:7d:b0:89:a6:51:03:15:1e:e6:
         55:2f:b0:38:0d:7a:0f:68:eb:7a:39:f4:0b:17:dd:a1:9b:86:
         7b:e5:a6:36:ca:38:e6:87:dc:57:86:f6:13:b9:57:1b:99:2a:
         a1:e5:cc:4b:99:5e:41:b4:27:d7:6c:51:31:56:68:9e:ef:1c:
         6b:77:d8:f8:09:80:e7:a9:dc:19:82:1a:17:6c:65:0b:07:2b:
         09:7a:9c:e8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jul 1 06:08:21 2025 by rpki-client