Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ad7f6d19-fa41-466c-b2f1-2e0a3dbfea13.roa
File:                     ad7f6d19-fa41-466c-b2f1-2e0a3dbfea13.roa (raw, json)
Hash identifier:          PCoyvsgdRD8ztV+mp5/2w4/OLNASnvZoCaqWpcgeSLg=
Subject key identifier:   38:F0:58:02:FC:64:60:17:FA:FB:2D:78:41:6E:D0:3B:E4:B7:48:71
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5EADFB1CC60299B487B2C5ED6B802DDF721FDE4E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ad7f6d19-fa41-466c-b2f1-2e0a3dbfea13.roa
Signing time:             Wed 06 Aug 2025 00:21:53 +0000
ROA not before:           Wed 06 Aug 2025 00:21:53 +0000
ROA not after:            Wed 10 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fef:8000::/39 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:ad:fb:1c:c6:02:99:b4:87:b2:c5:ed:6b:80:2d:df:72:1f:de:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  6 00:21:53 2025 GMT
            Not After : Sep 10 23:59:59 2025 GMT
        Subject: serialNumber=c74090ff7a832f2fff14aeaaa3fbbe4e8bacbe95f932322fdc4b3782784e5109, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:30:06:1e:14:1d:da:5e:41:f5:d8:b2:9f:37:
                    59:37:22:f8:e4:c0:64:e5:e0:63:51:21:67:f5:2a:
                    ab:07:82:b1:62:04:1f:e3:44:40:76:08:b8:06:6b:
                    e4:41:1a:8a:e8:dc:85:0b:ae:6b:70:df:25:99:a8:
                    64:db:94:10:70:39:f4:db:a3:d7:11:80:94:9c:0e:
                    4a:ba:6f:04:42:18:43:a6:fe:7d:f9:74:a7:04:39:
                    b0:9f:82:e3:d8:21:6c:be:b6:3a:3d:60:88:9c:d0:
                    5f:05:fb:c2:1d:89:24:bc:9a:06:f2:2e:66:c6:50:
                    5a:62:b2:f4:e0:44:d3:d9:00:ea:19:5b:3d:c6:d6:
                    3c:b3:55:8f:d0:cd:7b:09:e3:a5:d5:63:87:87:86:
                    e8:52:dd:ec:c1:b1:f7:73:a0:0a:08:c3:fb:cf:81:
                    54:de:de:c4:e3:74:f6:b4:eb:04:47:88:e3:a0:db:
                    1f:97:ef:e7:d2:d3:f6:98:00:da:af:3a:eb:a2:a0:
                    40:90:99:41:f6:ca:e4:ff:45:d1:40:17:22:43:54:
                    a9:68:5f:d3:3d:1f:dc:e3:30:91:d6:cb:fe:88:67:
                    c8:1c:da:44:d4:f4:ab:a4:dc:26:df:e1:31:07:65:
                    20:3b:ed:53:ae:33:34:95:0c:17:04:02:ac:52:d3:
                    05:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:F0:58:02:FC:64:60:17:FA:FB:2D:78:41:6E:D0:3B:E4:B7:48:71
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ad7f6d19-fa41-466c-b2f1-2e0a3dbfea13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fef:8000::/39

    Signature Algorithm: sha256WithRSAEncryption
         37:94:f1:d9:35:f4:7d:98:fc:b5:dd:c4:f5:d9:c2:36:03:bb:
         c6:36:53:8f:ca:8a:c7:7b:c7:dc:6f:8f:15:d2:28:a2:b1:d2:
         86:c8:8b:26:67:a8:0b:2c:a4:89:4e:6c:1b:bd:ef:44:84:59:
         ea:68:8d:1e:10:9c:c1:c0:8b:c1:cb:cd:b1:e5:51:55:d5:ff:
         05:7a:78:e2:c0:3b:be:8f:06:8d:ab:c5:93:1b:f8:63:9f:11:
         8c:7d:f7:b1:a2:c5:23:b2:55:64:11:5d:8c:0b:8c:c5:89:e7:
         68:c4:c6:ea:53:11:d2:e3:14:b6:77:ff:3b:7e:5b:8d:7c:26:
         cb:85:d8:c1:9f:b7:65:ca:9d:9c:ae:fb:88:1f:1f:44:b4:2a:
         4c:59:3f:b1:1c:5c:05:0e:15:bc:63:8f:fd:79:36:a6:48:58:
         7b:c6:9f:f1:f3:3b:d3:38:41:2c:07:88:58:1c:6e:1b:86:53:
         e3:d2:82:c3:5e:a3:37:ba:63:bf:05:2f:e8:af:d7:1a:8d:98:
         1b:cd:51:db:c4:33:40:51:df:a0:9b:94:c0:24:b0:62:d1:ca:
         71:8f:8d:08:b1:a3:1a:89:eb:f3:5c:50:ad:e4:c0:aa:3f:f6:
         f6:3d:27:ec:9a:27:72:5c:c8:43:50:ba:16:a4:55:32:be:93:
         3d:c4:42:b1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Aug 23 08:10:49 2025 by rpki-client