Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e36a6494-8d6f-444b-be50-cb1d5787daa7.roa
File:                     e36a6494-8d6f-444b-be50-cb1d5787daa7.roa (raw, json)
Hash identifier:          55LmUH1aX6/OpMShRcY5XnBM8p6M/QYrQfDm/c/05KU=
Subject key identifier:   63:A4:8B:7B:80:2D:DF:31:53:13:92:E0:92:66:C6:7C:F7:80:1E:5E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0C6D38D52443ED4BD847910751D9877DEC2DF7DA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e36a6494-8d6f-444b-be50-cb1d5787daa7.roa
Signing time:             Thu 26 Jun 2025 19:22:26 +0000
ROA not before:           Thu 26 Jun 2025 19:22:26 +0000
ROA not after:            Thu 31 Jul 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f38:8050::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:6d:38:d5:24:43:ed:4b:d8:47:91:07:51:d9:87:7d:ec:2d:f7:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 26 19:22:26 2025 GMT
            Not After : Jul 31 23:59:59 2025 GMT
        Subject: serialNumber=1f9007584b2ab23f7d5e61eb6cf9d2bc6bacb962481ccd2e8a8e1c927cef36b2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f5:e1:7b:a9:6f:1d:6a:06:7f:49:c9:19:0f:
                    c6:ff:d1:c6:a6:7c:e8:cc:71:f7:31:6d:8d:7e:7c:
                    3a:a6:53:b4:73:87:c7:02:b9:d5:dd:93:a9:4a:23:
                    80:6f:6e:f2:94:4a:cd:e5:d4:96:95:b7:97:50:b6:
                    ff:66:88:15:5c:42:88:00:32:b2:6b:63:ba:35:ab:
                    42:ab:03:8e:8d:75:88:91:17:f9:3c:19:a5:4f:69:
                    20:0e:6f:65:8d:19:9d:b3:ef:10:bc:a6:2e:39:e2:
                    c3:c0:c0:88:e0:65:8a:1a:10:6d:e3:ee:ca:cd:6e:
                    88:6d:5a:1a:a6:11:eb:2e:85:e4:85:f6:59:24:2c:
                    f7:03:d0:98:e1:f9:f1:c5:04:dd:95:07:fb:d5:e0:
                    29:95:4f:b7:f0:e6:e8:41:e1:8e:29:7d:83:5f:89:
                    fd:86:1c:f6:3f:e0:53:d7:ee:d1:26:b6:e8:3c:1e:
                    3f:37:81:41:a9:18:5d:4f:4c:b6:61:17:15:b0:3a:
                    8d:5d:39:8a:c2:e9:2f:17:62:82:5f:58:e4:94:b7:
                    5b:ec:fd:9b:be:4e:4a:e7:40:84:89:c5:51:2d:18:
                    70:0a:dc:bd:25:65:fe:76:52:92:22:2b:b4:66:55:
                    2c:4f:09:01:3d:e0:2d:75:e8:3f:a6:81:68:ab:46:
                    7a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:A4:8B:7B:80:2D:DF:31:53:13:92:E0:92:66:C6:7C:F7:80:1E:5E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e36a6494-8d6f-444b-be50-cb1d5787daa7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f38:8050::/48

    Signature Algorithm: sha256WithRSAEncryption
         1d:40:91:37:b4:3d:58:0f:2b:7d:ca:a7:9d:11:54:8e:77:6c:
         69:6b:ec:a3:3a:11:ac:1e:a7:d0:e2:ec:aa:d2:08:05:67:d7:
         55:57:6e:29:72:78:1f:b2:15:bd:aa:a4:35:24:6c:32:1d:35:
         ea:dc:33:6e:20:19:53:eb:a8:dc:7f:54:63:4a:7a:7b:a8:3b:
         96:c6:c0:85:a6:15:7f:3a:2a:81:40:6e:d8:32:5f:04:a3:77:
         54:fb:ae:0e:6f:98:ac:2a:61:bf:a7:b0:e0:88:9a:48:be:19:
         0d:d6:89:02:5d:aa:28:69:65:d0:6f:9c:e2:0a:aa:25:db:99:
         98:cd:a2:72:81:c4:be:d6:3b:37:ed:35:c9:9a:ab:a0:d6:8f:
         97:5a:df:5c:56:58:c4:a4:f0:40:85:a3:e1:3d:47:2f:94:bb:
         08:96:ad:d9:79:a8:f3:79:42:c9:72:a5:f6:fb:a1:0c:37:0a:
         73:06:15:56:bf:c9:25:04:ad:f1:25:b0:04:05:98:dd:4d:23:
         85:ce:7d:5a:5b:c5:2f:c2:88:f4:3d:9a:90:ae:0b:38:35:ce:
         6e:98:ca:bb:0f:6e:8d:ed:63:e1:e2:26:3a:08:8b:70:95:3c:
         10:c1:a3:04:52:7b:54:78:3e:25:25:2c:e6:13:bd:d0:cb:fa:
         4c:10:b0:70
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 29 21:06:59 2025 by rpki-client