Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79a08982-5194-4b4d-8be7-6d940279e284.roa
File:                     79a08982-5194-4b4d-8be7-6d940279e284.roa (raw, json)
Hash identifier:          k2R8Ccy8Gwr1tNuKrYkUTK03kPTBIQCNTMdJOSf1bMk=
Subject key identifier:   FF:5C:7D:88:4C:3E:07:18:82:51:5C:1A:8C:17:E2:C2:AB:F1:F0:F9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       668D2967796B31914F9C330E6473EA16A0B3D82A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79a08982-5194-4b4d-8be7-6d940279e284.roa
Signing time:             Tue 01 Jul 2025 00:10:24 +0000
ROA not before:           Tue 01 Jul 2025 00:10:24 +0000
ROA not after:            Tue 05 Aug 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1ff4:4000::/39 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:8d:29:67:79:6b:31:91:4f:9c:33:0e:64:73:ea:16:a0:b3:d8:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul  1 00:10:24 2025 GMT
            Not After : Aug  5 23:59:59 2025 GMT
        Subject: serialNumber=ff952bf110ed030750cfee98a3e89d87fecab2ecc357fbe94c754d9205b7643e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:57:cd:db:3a:73:1d:8a:64:81:f0:9e:31:9f:
                    aa:29:aa:74:38:68:21:c0:57:bc:64:0e:1a:bb:ea:
                    70:de:ca:e2:35:71:ca:63:9c:0e:83:c5:51:78:88:
                    74:39:9a:2a:46:d3:f3:a5:f9:1d:3d:ca:3b:e9:34:
                    a4:2a:54:d6:47:e6:d0:1d:44:78:82:8f:de:bc:0c:
                    68:52:a8:18:2b:ac:11:d8:f5:18:5b:51:d7:fd:62:
                    38:c5:53:ce:70:78:4b:aa:2d:93:fe:f0:0d:95:ff:
                    7c:11:f6:68:b3:90:41:cf:89:09:23:9d:e6:3b:b6:
                    be:32:f5:d3:2b:ba:2a:de:e4:37:15:bd:1a:61:c9:
                    c8:8b:d8:58:ed:63:5e:0c:d5:14:01:a5:64:7a:15:
                    ae:84:c8:20:52:fb:e4:73:64:b2:7e:33:01:93:20:
                    70:94:e2:58:a8:3f:17:a7:b6:ce:52:0b:84:fc:54:
                    bc:db:dd:48:f5:33:b2:ba:5d:84:78:ac:5e:13:b4:
                    ef:d2:29:d5:1c:b5:5c:89:67:2f:40:2c:51:c8:7a:
                    69:f4:56:60:ac:f1:e6:03:1a:f2:d4:61:c6:64:2e:
                    4f:a1:12:a1:c4:80:b7:7d:07:f9:13:74:5e:c4:0a:
                    ea:1a:1c:84:36:cc:52:5e:4e:3d:88:5d:88:1a:9e:
                    2a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:5C:7D:88:4C:3E:07:18:82:51:5C:1A:8C:17:E2:C2:AB:F1:F0:F9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79a08982-5194-4b4d-8be7-6d940279e284.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff4:4000::/39

    Signature Algorithm: sha256WithRSAEncryption
         2d:8e:07:28:f5:9a:9f:46:65:ef:a9:01:fb:02:88:c8:6c:92:
         a9:02:d4:b9:b3:88:ae:ab:99:08:4d:9b:60:d7:5c:93:2d:37:
         dd:fb:fc:6a:42:15:3a:1c:c4:02:0a:56:f4:07:b6:08:5a:45:
         a1:47:a4:78:46:9e:ba:9c:69:c1:c2:2e:8d:ee:f5:8d:7a:22:
         bb:3d:d5:b9:e7:64:f2:42:40:2f:4f:16:bc:e3:2f:6b:54:3d:
         75:4f:54:ea:3a:4f:bf:5c:56:3f:4e:72:71:84:b1:93:ea:c4:
         c9:ac:96:dd:b3:cc:4c:2e:0c:13:a6:f0:9b:d1:05:c7:00:84:
         a4:c8:4d:a6:95:8d:55:5e:7f:52:21:8e:58:e9:10:b5:25:75:
         13:3b:f9:bb:df:f5:ff:59:d5:51:18:da:8e:fa:3f:c4:88:62:
         b9:c9:bd:a8:4d:57:9c:b2:59:47:c0:ec:37:4c:41:bc:95:3f:
         fd:64:04:5b:e0:a3:58:23:5b:8a:ad:15:aa:92:fe:98:9d:47:
         39:22:c2:d6:1d:f2:a7:15:08:f3:d8:85:5f:8b:22:94:24:f4:
         fb:01:db:f0:2b:76:27:5b:e0:21:e0:50:13:94:9f:a4:7c:38:
         91:8a:1d:f8:f0:0f:e8:fd:85:c6:74:7f:5f:28:b0:37:21:b7:
         49:ad:08:b9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 11:12:51 2025 by rpki-client