Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/76bc385e-05d0-4b6c-a48b-d5ca6a29b110.roa
File:                     76bc385e-05d0-4b6c-a48b-d5ca6a29b110.roa (raw, json)
Hash identifier:          d9UgVY0gI9mfq0/+s2SZRmjfaBLnSxrVqxPQbbb/p8Q=
Subject key identifier:   2D:C0:B2:D0:8F:32:12:B8:8F:AC:F4:D2:FC:D0:1D:6B:19:E9:87:81
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       771CF6A288135F2114CC1380CD4E557B18515C91
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/76bc385e-05d0-4b6c-a48b-d5ca6a29b110.roa
Signing time:             Wed 16 Apr 2025 00:01:21 +0000
ROA not before:           Wed 16 Apr 2025 00:01:21 +0000
ROA not after:            Wed 21 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff6:6000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:1c:f6:a2:88:13:5f:21:14:cc:13:80:cd:4e:55:7b:18:51:5c:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 16 00:01:21 2025 GMT
            Not After : May 21 23:59:59 2025 GMT
        Subject: serialNumber=6cf925e1f4cd3ad4e2c6bbe7ab518aa7f7b7c616b714d2c4dcf7488cfe12bcf9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:a6:57:66:ba:75:ae:a3:f3:6f:e5:20:37:c3:
                    ca:58:42:ea:8d:26:bb:d6:dd:77:57:36:6b:bb:a1:
                    87:8c:6b:3b:7a:78:61:42:57:91:98:f5:22:b5:a5:
                    fe:a5:45:62:38:92:4b:e5:23:95:c8:06:58:e0:07:
                    4c:23:e5:d5:13:60:df:e5:3f:e9:94:d7:dd:9d:44:
                    3b:05:2e:d3:ce:82:f9:89:9b:38:1b:ad:8e:3e:a6:
                    82:98:28:9b:9f:76:56:c2:cd:7f:5e:5d:32:ab:a1:
                    40:8f:46:94:5a:a9:5e:6c:7d:27:ee:07:da:d9:ea:
                    c4:85:9c:e1:1f:77:52:90:81:c6:e6:2d:4b:da:82:
                    54:04:d8:a1:bd:65:55:2e:d2:93:6a:34:d6:b5:94:
                    5c:f1:7b:23:57:41:eb:c1:df:25:f3:b1:78:1f:40:
                    7c:22:6d:41:6e:84:ae:db:86:bc:1c:0f:d3:8e:0f:
                    cf:66:e8:f8:db:ce:5d:5a:85:ff:f9:66:cf:7b:6d:
                    4a:16:f1:74:82:70:78:02:56:c1:4e:6d:4e:71:19:
                    fa:bc:31:44:7d:00:96:b5:23:6e:8a:4b:74:b3:a7:
                    ea:52:1c:2c:74:c0:67:56:05:2d:b7:4a:64:8a:65:
                    67:57:f5:89:c4:7b:d1:7d:fe:22:3c:27:1e:41:98:
                    56:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:C0:B2:D0:8F:32:12:B8:8F:AC:F4:D2:FC:D0:1D:6B:19:E9:87:81
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/76bc385e-05d0-4b6c-a48b-d5ca6a29b110.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff6:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         d2:8b:ba:3b:99:8f:2b:76:a6:20:8b:cd:e0:78:6d:8c:ad:ef:
         7c:f6:79:30:7a:cc:08:6c:6a:b2:3c:fe:b6:9e:e8:db:26:f8:
         69:e3:58:6d:24:8b:b3:44:8d:52:ea:17:af:f6:22:92:9b:5b:
         46:c0:0b:bc:a1:c3:c7:f8:6c:a2:84:ee:96:e2:ff:14:1d:f8:
         da:fa:c3:78:76:cf:9a:3d:91:bf:6e:df:9d:5d:c6:8e:7d:be:
         a6:96:75:ab:2c:3e:52:ae:09:58:c5:6b:3f:9c:ac:a5:5c:7e:
         a4:33:c0:d4:06:85:12:e3:ba:db:f0:f6:c7:b2:51:81:c8:0f:
         3a:ae:08:e1:ba:55:73:d5:cc:13:30:42:8f:cc:4d:08:7b:a9:
         fa:ba:9b:b3:ac:2c:a9:6f:74:d2:8a:05:b8:ad:bb:0b:10:8a:
         5d:67:00:ab:57:b0:23:bd:74:23:42:38:3c:c0:e9:57:1e:96:
         ba:95:ba:59:a7:54:29:8f:31:26:f2:2f:9d:32:2c:e2:c6:dc:
         4c:96:6d:61:b2:85:48:a4:71:44:6c:08:87:cf:04:62:17:62:
         b6:a6:d4:e8:db:cc:2e:f7:95:85:e5:74:19:1e:c6:48:68:9e:
         d7:6a:50:49:57:e2:7a:80:31:62:15:ad:fb:a6:94:05:37:7b:
         04:cb:22:c0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon May 5 04:24:09 2025 by rpki-client