Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/943694fe-e278-4d76-b786-7df26f151dd9.roa
File:                     943694fe-e278-4d76-b786-7df26f151dd9.roa (raw, json)
Hash identifier:          +5Noq25ALVkBNhALrwy5byRQwHUnQyTOEdbJYu7fzsA=
Subject key identifier:   6E:1F:88:28:73:5B:40:E4:7E:4A:CD:16:FF:6F:8B:E1:4B:D9:AA:DA
Certificate issuer:       /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
Certificate serial:       0504772005646A0A03835EF19990AED48C809F01
Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/943694fe-e278-4d76-b786-7df26f151dd9.roa
Signing time:             Wed 25 Jun 2025 00:20:03 +0000
ROA not before:           Wed 25 Jun 2025 00:20:03 +0000
ROA not after:            Wed 30 Jul 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2606:f40:fffe::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:04:77:20:05:64:6a:0a:03:83:5e:f1:99:90:ae:d4:8c:80:9f:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
        Validity
            Not Before: Jun 25 00:20:03 2025 GMT
            Not After : Jul 30 23:59:59 2025 GMT
        Subject: serialNumber=4cff5c8107b7fd79870cc8d6e2a181685d86c7beee672c87ae3b399dee32a0dd, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0a:f3:90:8c:1b:9c:54:e0:61:dc:9b:46:e1:
                    22:84:3c:ca:a9:dd:f5:c6:de:9c:e9:81:d2:c1:4f:
                    18:d1:a0:34:01:43:31:4c:2e:97:b6:8a:0a:b3:8a:
                    bf:a0:d2:92:4c:a9:3a:f7:07:d0:85:b7:fd:16:fd:
                    cd:e6:b8:cf:f1:4b:bf:c2:03:59:bd:a5:78:19:41:
                    52:a3:aa:a4:34:3a:83:24:12:29:93:06:3e:f7:1b:
                    67:5c:bd:be:25:7a:f1:10:14:66:9b:93:9f:bf:2a:
                    da:38:de:a5:ee:e1:39:62:0f:01:a1:32:b1:94:4b:
                    6a:5f:3f:72:35:dc:f4:53:34:04:10:58:d7:1b:6e:
                    87:f1:67:2c:df:27:ed:11:fe:61:59:f5:03:45:9a:
                    dc:5e:9c:20:a1:a0:13:60:ed:6a:de:fc:b3:ef:e2:
                    59:52:06:1b:d8:ab:71:44:02:97:c0:c0:0d:24:0c:
                    d8:ae:e8:f7:d2:ac:77:4e:db:e8:bf:88:ba:cf:f3:
                    8c:3e:11:66:cc:6b:a5:e8:64:dc:a3:46:46:8d:47:
                    22:5c:e3:6c:39:c0:40:ed:38:87:bb:e2:f4:c6:71:
                    90:2c:17:af:98:e6:ad:d6:8f:74:e3:f4:d9:5d:d9:
                    99:b9:a8:e3:f1:9c:66:f0:10:1b:fa:25:7b:86:5c:
                    69:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:1F:88:28:73:5B:40:E4:7E:4A:CD:16:FF:6F:8B:E1:4B:D9:AA:DA
            X509v3 Authority Key Identifier:
                keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/943694fe-e278-4d76-b786-7df26f151dd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f40:fffe::/48

    Signature Algorithm: sha256WithRSAEncryption
         d8:3b:15:53:50:8c:ec:d4:ae:fe:af:b7:61:5c:5e:1c:41:96:
         b0:03:3f:98:2f:bb:31:ff:1a:af:8c:12:6f:a4:11:10:38:af:
         a7:39:41:4f:11:08:ca:92:45:2b:bd:df:a0:03:f9:4a:56:6c:
         e7:6a:ff:e0:98:c1:1b:12:c0:69:ad:9e:2e:32:46:5b:57:f2:
         e9:3e:c2:ac:5a:02:49:1f:56:54:99:73:5f:e0:df:4b:34:eb:
         11:5b:4f:ca:7e:fe:9a:b2:34:b5:93:5f:d8:dc:d9:a0:e9:0a:
         92:49:b7:85:63:af:3e:02:ee:f4:13:05:1e:01:12:00:6a:ca:
         61:d5:8b:36:00:3f:d0:d4:52:0d:3e:fc:87:5c:18:6a:b4:ac:
         51:d7:28:a0:22:c7:37:91:7a:3d:06:91:74:62:1c:8d:79:e4:
         de:0b:63:06:8f:ed:ab:4e:1a:1f:f6:2a:cd:58:fc:3f:28:d6:
         01:c0:c4:48:e1:8f:40:2e:5b:2b:a3:71:a0:05:45:78:a4:f6:
         3f:12:3f:8f:8c:ee:13:9c:79:7f:5d:e8:18:b2:02:02:03:1a:
         3c:8b:fc:9c:a4:70:ed:72:3c:86:ba:e6:2f:bc:d6:33:52:8a:
         45:a2:01:dc:11:3a:0a:fe:d0:22:7a:8a:7f:e0:e7:6a:50:03:
         00:80:59:1c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 29 01:25:50 2025 by rpki-client