Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/6ba0c1f3-2b2e-4d8a-bef1-52e07a4a5a4e.roa
File:                     6ba0c1f3-2b2e-4d8a-bef1-52e07a4a5a4e.roa (raw, json)
Hash identifier:          w3QyzTY/efixUGZKuk3Nw76oTGXIXTu2G1aGNB3vjdk=
Subject key identifier:   74:D6:6E:B7:CC:00:2C:FB:44:19:0D:8F:05:A1:B0:E4:CD:BC:4E:7F
Certificate issuer:       /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
Certificate serial:       16AF30853A71B50ECBD5335A72E5C775838A65B5
Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/6ba0c1f3-2b2e-4d8a-bef1-52e07a4a5a4e.roa
Signing time:             Fri 15 Aug 2025 00:50:16 +0000
ROA not before:           Fri 15 Aug 2025 00:50:16 +0000
ROA not after:            Fri 19 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2606:f40:fffe::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:af:30:85:3a:71:b5:0e:cb:d5:33:5a:72:e5:c7:75:83:8a:65:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
        Validity
            Not Before: Aug 15 00:50:16 2025 GMT
            Not After : Sep 19 23:59:59 2025 GMT
        Subject: serialNumber=566d9b84984de8244c85a65695113f9f1ec508ffcd1e5d48a26700887ebba47c, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:40:16:3b:71:64:37:b9:1a:53:bf:84:8c:42:
                    d9:2a:94:bb:ce:d4:57:dc:2a:20:3a:14:7c:0e:2c:
                    c5:0f:1e:b5:af:e9:70:c0:d3:bd:be:42:d8:e9:4e:
                    31:2d:07:8f:b5:be:ac:35:fe:ec:52:05:b2:51:d6:
                    7d:ff:0b:81:e4:e3:50:97:d5:ad:e8:6a:44:ff:e2:
                    ec:73:5f:b1:f0:bb:f9:3d:b2:01:0b:fd:32:73:04:
                    bb:63:67:93:03:58:cb:da:dd:19:47:97:4c:07:a1:
                    50:87:90:71:26:f6:9e:8c:73:32:05:bc:44:59:60:
                    10:54:60:4a:69:45:15:a2:f3:eb:66:e1:e8:5b:d3:
                    b4:3a:41:45:12:16:45:79:da:8c:c4:93:fa:d8:9a:
                    54:b3:11:0d:4e:7b:43:0b:de:b4:6f:a3:13:7f:6f:
                    a4:fb:5a:b0:ad:25:dc:a9:3d:db:3e:25:d5:ca:1d:
                    71:f4:ef:cf:7b:0b:31:1b:27:c0:c8:fb:5a:36:9f:
                    13:3b:cb:3f:30:77:e5:4c:35:09:45:47:3c:56:eb:
                    4d:f0:2d:e7:75:b4:d1:75:b6:ee:0a:4a:45:36:36:
                    6d:1a:58:49:59:63:df:16:13:fa:65:64:88:e2:a3:
                    70:62:0d:a5:36:da:4b:be:d9:67:82:69:cb:45:65:
                    9c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:D6:6E:B7:CC:00:2C:FB:44:19:0D:8F:05:A1:B0:E4:CD:BC:4E:7F
            X509v3 Authority Key Identifier:
                keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/6ba0c1f3-2b2e-4d8a-bef1-52e07a4a5a4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f40:fffe::/48

    Signature Algorithm: sha256WithRSAEncryption
         38:21:04:8e:52:ae:e9:bf:6a:44:20:bf:a7:a7:48:a3:33:f8:
         08:bd:2c:e3:84:ab:33:34:b0:f3:14:40:1a:c6:44:b2:2d:06:
         78:39:c2:f4:ec:47:14:bf:3f:a0:63:07:84:e0:be:d8:e6:f6:
         e2:f6:39:64:48:85:32:93:31:58:71:a5:63:9d:08:eb:a6:24:
         fa:4b:df:27:2c:f9:f7:63:3f:f1:ab:bc:07:26:32:16:91:3a:
         fc:a1:d5:f5:51:d5:fc:fb:51:94:32:7d:5f:39:ec:84:f4:98:
         24:4c:c7:98:4d:17:37:c6:1e:c0:92:fd:35:45:5c:ff:94:1c:
         4b:58:2b:8e:c9:e0:5a:51:c1:43:69:36:e4:db:c5:4c:23:bf:
         ac:53:f8:8c:47:43:61:6e:4e:62:6d:b6:9a:ec:2e:ee:c3:db:
         8e:20:95:61:7c:08:0f:a6:0b:aa:87:6a:b0:14:b1:0e:ca:f0:
         3d:07:e6:e2:52:a0:be:87:b4:fe:3d:95:6c:e1:20:25:81:93:
         7f:00:6c:2d:85:b9:59:d5:d1:c3:bd:42:2a:31:e0:d9:65:4e:
         03:9c:ab:f6:d3:fe:0d:76:e6:66:27:2e:47:18:10:b8:48:b9:
         df:5a:e5:cd:9a:13:8c:9a:9c:8c:de:c4:59:88:14:16:f7:57:
         22:5d:3e:b8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:15:20 2025 by rpki-client