Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8c837ec2-a674-4dd2-926c-0d3cdf6bb9b6.roa
File:                     8c837ec2-a674-4dd2-926c-0d3cdf6bb9b6.roa (raw, json)
Hash identifier:          HsImrMMUA4bCpwRaYm2/O3rZ7SOtw9s2t04xWDlcmBk=
Subject key identifier:   B6:20:C8:A4:B1:AB:31:76:C8:E5:D4:22:CB:1F:0E:63:E3:78:28:2F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6EC7D16ADE12674B792D65F9DAB36BA5CF2CDEB5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8c837ec2-a674-4dd2-926c-0d3cdf6bb9b6.roa
Signing time:             Wed 20 Aug 2025 00:12:01 +0000
ROA not before:           Wed 20 Aug 2025 00:12:01 +0000
ROA not after:            Wed 24 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff6::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:c7:d1:6a:de:12:67:4b:79:2d:65:f9:da:b3:6b:a5:cf:2c:de:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 20 00:12:01 2025 GMT
            Not After : Sep 24 23:59:59 2025 GMT
        Subject: serialNumber=0581bdd908b50e68570d0c318e3d4bed7b2490e0492d87f2073cd2348853dce7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:47:46:2b:7c:6d:62:ed:9d:68:e9:da:17:42:
                    34:5f:8e:6c:e8:61:ce:41:ae:1d:05:c5:ea:ee:b4:
                    b7:6c:54:14:08:5c:bf:19:ea:e1:e5:0b:d3:25:ce:
                    ac:3e:f0:ec:07:ab:a7:90:9a:93:0f:cd:61:d7:31:
                    fa:ff:09:ce:bf:a1:a9:48:72:5f:a6:cb:ab:2b:6c:
                    36:95:49:7e:c0:1d:40:1c:10:62:0f:e9:26:ce:7b:
                    ac:95:73:69:32:25:83:ea:7f:42:6c:44:29:70:f7:
                    4f:26:60:97:7e:42:b3:50:b8:f3:18:bc:cf:90:ac:
                    b6:04:b2:fc:59:ee:5e:64:b2:aa:e1:5c:dd:1d:e3:
                    2a:ea:54:4c:f3:f8:25:d0:66:4a:23:c1:9c:46:b4:
                    25:d9:82:05:bc:e3:d1:78:73:e7:fe:7c:f4:49:39:
                    88:cd:27:f4:f7:56:89:68:4c:9b:f0:de:75:eb:4e:
                    00:95:d7:52:e2:e7:6a:30:40:e4:a3:c8:46:26:45:
                    01:fc:45:4b:bb:ed:f7:d2:b4:be:52:c7:46:c7:3d:
                    2b:d2:2b:b7:7a:ff:a5:f1:04:d5:0b:e3:a2:ff:0e:
                    23:86:a8:22:7f:ae:9e:e7:49:cc:d5:bf:db:9a:41:
                    11:d6:a8:e9:6f:45:d1:27:50:82:30:9d:58:8f:c9:
                    37:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:20:C8:A4:B1:AB:31:76:C8:E5:D4:22:CB:1F:0E:63:E3:78:28:2F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8c837ec2-a674-4dd2-926c-0d3cdf6bb9b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff6::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:18:70:7e:b9:6f:92:45:bf:cf:59:7a:a1:68:d0:d9:d2:ef:
         fa:06:c8:9e:aa:b8:e0:36:d0:d4:43:25:85:88:a4:c4:09:54:
         34:e5:9a:1f:08:7e:28:75:a7:74:97:61:b8:fd:9b:c0:1f:c5:
         7c:65:5b:e7:f3:4e:a9:7f:d3:c9:a6:0d:26:a8:1b:a9:6c:0d:
         b9:a7:dd:0d:88:79:ef:2f:68:f8:4f:58:d3:fe:68:b7:f6:af:
         ea:e5:55:86:cf:91:c5:c4:0d:f8:da:9b:8a:27:62:25:7d:63:
         70:d9:5f:a1:9f:47:0d:03:5b:6f:00:7f:f3:24:75:d7:30:a5:
         19:0c:9e:9c:ef:64:5f:20:87:a6:cd:88:77:6c:4b:1e:b2:54:
         de:ad:19:7d:5b:e0:bb:77:06:8b:21:d4:e3:21:14:7a:2c:43:
         73:e5:2f:94:8c:46:37:af:dc:93:6f:33:45:2b:1b:34:6a:98:
         35:cb:ec:86:b6:37:c1:71:2b:90:6f:8e:b3:61:08:ee:08:6b:
         c5:5e:d9:2f:02:3e:f2:e1:ac:b6:92:82:39:d0:cb:58:3f:41:
         d2:82:f9:01:09:e9:b8:a8:57:b0:13:71:e2:df:83:6b:dc:fd:
         4d:5a:4d:ad:ee:38:83:d9:6c:07:dd:b8:61:8c:60:aa:4f:1d:
         66:7b:92:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:39:04 2025 by rpki-client