Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/82d434d3-74fc-47a3-89ec-ed37a23ae562.roa
File:                     82d434d3-74fc-47a3-89ec-ed37a23ae562.roa (raw, json)
Hash identifier:          btP8MdXLdDFOsdkEUSfFc5G+gK1KM9X/H0yxDA5a/MI=
Subject key identifier:   9F:21:58:4C:23:51:1F:BF:79:9B:68:1A:51:12:CB:D1:07:F2:19:2A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2DC2130906474C0F768F6D32B3C26D9ADB2F14DF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/82d434d3-74fc-47a3-89ec-ed37a23ae562.roa
Signing time:             Wed 13 Aug 2025 00:20:30 +0000
ROA not before:           Wed 13 Aug 2025 00:20:30 +0000
ROA not after:            Wed 17 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f22:8000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:c2:13:09:06:47:4c:0f:76:8f:6d:32:b3:c2:6d:9a:db:2f:14:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 13 00:20:30 2025 GMT
            Not After : Sep 17 23:59:59 2025 GMT
        Subject: serialNumber=b323306225ea2f7335a96e13206c046f24a70d31b9af1489d0d8765b2a89cde3, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:4c:da:ef:be:a4:7b:ff:66:09:76:db:6d:10:
                    0d:5d:42:2f:99:66:47:48:30:98:92:47:13:dd:fc:
                    87:b0:2d:da:b9:87:52:f6:d6:79:ee:11:a7:b6:d0:
                    8e:a8:63:ba:70:02:cb:8f:4d:81:74:ea:66:85:aa:
                    aa:e1:2b:a6:eb:15:d4:42:25:00:5c:9d:50:18:b4:
                    9b:41:23:a7:b6:d3:c1:12:d2:b0:79:d6:78:90:d2:
                    72:40:9c:ca:a7:2b:72:60:42:de:af:72:21:b2:a7:
                    55:c4:44:d3:a6:57:7f:25:82:f3:14:bf:14:c5:bb:
                    7f:4f:27:b3:80:00:c6:b9:68:b9:bf:ef:28:ba:96:
                    46:0e:8b:68:2c:df:38:0e:ff:07:a1:10:8e:9a:cc:
                    7e:bf:d9:cc:7c:b4:8a:58:4d:14:c1:6d:42:3b:aa:
                    5d:c8:80:4d:af:e0:cb:67:ee:92:e9:b7:67:03:c3:
                    15:ec:4f:f8:62:04:78:b8:c2:cf:e0:f5:4f:5f:9d:
                    ac:cf:51:db:16:89:03:bc:5f:63:67:ce:d6:dc:1a:
                    cd:35:72:98:f8:68:cb:34:46:40:48:ff:a6:b8:c7:
                    b8:a1:64:17:97:ba:0b:42:8e:a4:b5:ac:43:81:aa:
                    5f:78:e7:ee:55:46:34:52:aa:00:bb:c7:71:d6:65:
                    e8:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:21:58:4C:23:51:1F:BF:79:9B:68:1A:51:12:CB:D1:07:F2:19:2A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/82d434d3-74fc-47a3-89ec-ed37a23ae562.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f22:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         88:8f:9f:cf:dd:ba:11:58:4b:f1:e2:5c:59:e4:0c:3b:91:73:
         c4:f5:a0:1c:e8:d3:39:c8:5a:1f:5a:9a:80:aa:4b:d8:af:f9:
         90:fe:a0:29:fd:2b:be:4b:4d:85:c8:46:a2:3b:18:32:1b:11:
         b7:b7:45:07:8b:73:e3:a8:58:72:09:7f:eb:02:5b:30:fc:69:
         6f:04:27:92:5d:27:6d:0c:35:5c:ae:86:27:82:93:34:bc:63:
         16:f0:fa:d1:fe:ed:86:72:95:f1:5b:04:75:8d:02:8d:81:af:
         04:df:7f:12:71:bf:8d:ce:ab:9b:64:01:5b:76:85:c1:96:c2:
         ce:5a:92:e4:64:77:90:41:cb:99:e0:dc:36:92:14:44:7b:ab:
         f0:38:cd:21:ca:84:6e:77:e6:20:7a:55:7f:9a:e7:c7:bc:b0:
         fd:71:8f:e4:72:33:16:26:7f:73:f3:af:85:e5:74:a1:ec:36:
         97:84:e1:5f:d6:4b:33:db:0a:09:2a:8e:38:3f:28:21:1c:ff:
         40:45:ad:0d:3d:ce:4b:c2:5a:ba:56:ad:1a:f5:1a:1c:97:23:
         e0:fe:bf:76:7e:8b:9e:fc:81:ec:70:63:42:c6:d3:98:23:30:
         37:2d:72:bd:40:7e:27:b2:6e:82:bc:b3:00:d0:38:3b:8a:26:
         59:68:90:76
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Aug 23 06:52:56 2025 by rpki-client