Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e5f18579-4226-47e9-b74a-e5c188798d56.roa
File:                     e5f18579-4226-47e9-b74a-e5c188798d56.roa (raw, json)
Hash identifier:          vBpAARk9O4I6lkuyl3JYirfiwpGCBSrk8nVxF5ZzP0k=
Subject key identifier:   19:E8:28:9C:70:48:7F:8A:60:7A:5F:AA:F0:E6:72:43:3B:45:B3:3D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       472DCE81CC3B00E7F9CFCF077E2D1F4F01A87E67
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e5f18579-4226-47e9-b74a-e5c188798d56.roa
Signing time:             Mon 18 Aug 2025 15:41:37 +0000
ROA not before:           Mon 18 Aug 2025 15:41:37 +0000
ROA not after:            Mon 22 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fff:4000::/39 maxlen: 39
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:2d:ce:81:cc:3b:00:e7:f9:cf:cf:07:7e:2d:1f:4f:01:a8:7e:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 18 15:41:37 2025 GMT
            Not After : Sep 22 23:59:59 2025 GMT
        Subject: serialNumber=3c84c028318ac350272f229456134b4fd7e5324a179c86a96aff2ab84a4c3e5f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1d:03:d9:06:c0:e3:e0:e7:1e:d4:5b:dc:ee:
                    82:e5:bc:f9:a5:58:68:8e:28:26:8c:a4:32:da:cd:
                    5e:34:a8:a3:8e:8d:e9:bb:93:2c:90:1a:a6:fd:9e:
                    ac:2a:6c:38:2a:cd:de:1b:f9:e6:36:3c:21:49:8f:
                    ca:e5:02:23:0c:9a:5d:3b:cb:ec:a2:aa:86:85:bb:
                    4c:d7:66:8b:f4:a4:c4:ef:e0:d4:b2:99:ae:d2:73:
                    25:11:5d:45:49:75:23:c2:f7:5a:f7:d4:12:1a:b4:
                    64:34:a5:a9:7a:69:30:a6:6e:6b:9f:43:15:c6:b5:
                    97:39:f5:a8:22:11:3a:6a:61:7c:cb:dc:da:03:a5:
                    ed:e5:9b:e2:41:bf:df:f3:f4:11:4e:24:2d:66:29:
                    eb:c4:3f:af:ab:85:8e:20:a4:b0:90:a4:c2:86:a3:
                    d2:1a:dc:92:4e:56:ab:c1:fb:5e:fc:cc:2f:c1:84:
                    a5:df:f2:3b:53:1d:8b:ba:f2:14:86:ae:2e:32:59:
                    6d:80:3f:4a:b7:0c:97:68:74:fd:ba:2b:1b:8c:b8:
                    24:4d:5d:92:ff:0e:06:fa:7e:64:93:69:db:73:a9:
                    71:df:e9:ce:9f:04:24:21:8f:7f:97:56:f4:cd:76:
                    60:25:14:0d:3d:e4:2c:63:b5:e4:23:94:8f:b7:9e:
                    e7:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:E8:28:9C:70:48:7F:8A:60:7A:5F:AA:F0:E6:72:43:3B:45:B3:3D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e5f18579-4226-47e9-b74a-e5c188798d56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fff:4000::/39

    Signature Algorithm: sha256WithRSAEncryption
         47:25:59:41:d5:f4:a5:ed:ad:43:a5:05:83:e6:c2:f4:a6:ea:
         72:23:db:92:ec:b9:9c:95:b1:4a:2e:e0:be:e0:cd:a1:7c:0a:
         30:68:c8:81:76:25:86:0f:c4:0f:a4:3e:02:5d:59:92:93:c2:
         08:94:71:1d:8e:64:d8:44:91:b5:c4:89:77:70:fa:84:9c:73:
         e1:25:f0:70:34:89:ae:12:ec:c9:06:09:6b:7c:fc:29:c8:1c:
         b1:a6:10:91:f9:4f:ff:f3:1a:43:9a:f9:ca:94:3f:23:03:05:
         22:d4:b2:af:ca:71:47:cf:95:af:1f:36:51:7c:b1:48:45:88:
         81:6b:30:17:62:ab:19:6d:7f:ac:5f:a7:53:f7:60:98:c6:8e:
         fa:13:43:e4:31:dc:6c:f5:e8:3c:5b:a4:24:e6:78:4a:23:e4:
         f3:fc:36:d2:85:ce:93:f0:51:e9:9b:3f:07:16:b6:19:19:b3:
         80:4a:e9:de:13:5e:d9:ce:bb:69:a7:a6:24:4d:a4:ba:38:4b:
         3f:4e:7e:26:e3:37:98:7b:06:40:d0:4d:a1:fc:f8:51:91:63:
         68:bb:23:a2:f3:16:33:5e:1b:8c:4d:fc:eb:36:b8:4a:30:9b:
         50:3a:d9:fc:40:e4:3d:0b:30:05:ff:e0:87:bb:7a:4d:f1:8b:
         8d:45:10:17
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Aug 23 07:02:26 2025 by rpki-client