Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f05fd9d4-e679-4967-86f9-5a8fd1328c4b.roa
File:                     f05fd9d4-e679-4967-86f9-5a8fd1328c4b.roa (raw, json)
Hash identifier:          9V8tUQ3pEWlOGZOC2HZBA19iUZTjq176iEk615hzazE=
Subject key identifier:   07:5D:95:B2:13:F5:9E:1D:C7:82:80:14:87:BE:D9:B7:DB:CD:CE:3A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2B9154E14A0F0917FBECD4EF01685165AE6000BD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f05fd9d4-e679-4967-86f9-5a8fd1328c4b.roa
Signing time:             Thu 26 Jun 2025 19:22:38 +0000
ROA not before:           Thu 26 Jun 2025 19:22:38 +0000
ROA not after:            Thu 31 Jul 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f61:8090::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:91:54:e1:4a:0f:09:17:fb:ec:d4:ef:01:68:51:65:ae:60:00:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 26 19:22:38 2025 GMT
            Not After : Jul 31 23:59:59 2025 GMT
        Subject: serialNumber=f1099d392f5977699e90e03a1eb1ff8cbb814b5658b7eaa99ffb9288bdf38708, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:dc:4e:b7:d2:33:fb:d4:ab:18:36:d3:35:6c:
                    5b:ba:79:5b:aa:c8:5e:b3:fd:dd:69:80:2f:e8:60:
                    c4:a1:ae:25:3b:79:d8:97:ae:86:45:a6:8d:e6:fa:
                    ea:6e:31:33:85:41:99:d1:8d:34:0d:bd:bb:dc:54:
                    c1:0a:b5:64:9c:6e:e3:6d:0b:c4:00:3a:ec:cf:3e:
                    47:73:08:bb:ac:23:df:6f:20:98:e0:35:2f:68:90:
                    08:cc:a4:05:f3:d1:d7:db:37:46:56:87:a3:9a:26:
                    3a:82:03:56:75:7d:ab:73:cd:f4:6e:1a:b2:43:73:
                    9e:48:14:2c:c6:df:fc:b5:03:80:5a:3e:d3:1f:0e:
                    a9:21:ed:d7:e6:bb:18:0f:e3:6a:2a:6f:21:85:6a:
                    c1:27:f1:d5:77:e1:6f:0d:87:2b:3d:1d:01:a4:3c:
                    60:73:17:cc:f5:af:5a:15:f6:b0:57:2c:dc:d5:be:
                    a7:62:03:58:44:f8:82:5f:4c:31:7d:c3:0b:45:ef:
                    7a:fa:86:fa:f1:73:06:ea:0a:23:66:55:1b:90:de:
                    08:1c:7c:82:ed:82:ea:4f:43:e0:26:d1:ee:26:5a:
                    f5:d5:08:60:35:86:50:bf:cc:86:07:af:82:da:38:
                    56:5e:49:8b:91:4b:16:92:7e:e0:0f:25:9c:96:4a:
                    ea:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:5D:95:B2:13:F5:9E:1D:C7:82:80:14:87:BE:D9:B7:DB:CD:CE:3A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f05fd9d4-e679-4967-86f9-5a8fd1328c4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f61:8090::/48

    Signature Algorithm: sha256WithRSAEncryption
         51:44:88:02:3a:69:26:6e:dd:16:01:2b:66:9b:49:63:fe:27:
         4c:93:8a:b2:93:cc:b4:81:61:39:86:6b:7c:e7:c7:f6:96:4b:
         5a:8d:35:6e:45:58:c7:3c:c8:bb:ff:f5:27:71:59:ab:66:6a:
         0b:3f:19:74:9c:a9:c0:a2:e1:62:a7:2b:b0:a6:34:5f:c9:d9:
         64:28:0a:12:64:b8:23:f9:40:fa:f4:9d:19:7c:14:de:7c:22:
         e1:67:d9:da:1f:71:31:41:b2:45:d0:98:61:a0:e3:6b:79:d7:
         e1:b5:ab:c6:ff:13:eb:6c:b4:67:77:73:f5:55:94:2f:15:4c:
         d3:15:df:43:dc:23:41:25:ed:75:69:8b:fb:56:bb:29:9e:aa:
         ae:f8:d0:5e:9a:e6:05:7e:99:0a:00:33:f5:57:bb:75:3b:87:
         6a:3c:37:80:9c:64:7d:61:87:77:2f:76:08:a8:a9:fb:7e:b8:
         72:3b:be:89:fc:1e:ba:38:90:f8:b8:10:1e:d9:50:69:8d:7d:
         84:1d:86:71:58:40:e3:ff:34:a5:60:0a:6f:d8:1a:3b:06:89:
         b8:6f:36:ee:b2:17:ec:c9:5f:c5:76:3b:3f:88:2b:69:48:aa:
         5f:b7:2d:b4:0e:7e:e8:20:43:ef:77:11:8d:a3:9a:03:f7:8f:
         9d:03:ab:fd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 29 02:13:52 2025 by rpki-client