Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5211bbfa-c26c-44f8-96b2-a9282cfd61a1.roa
File:                     5211bbfa-c26c-44f8-96b2-a9282cfd61a1.roa (raw, json)
Hash identifier:          xeH0snvXHfSbKOZX7sYT+g52ae3ao1hfRRULxTyQdFk=
Subject key identifier:   0E:8A:86:42:4C:8C:A7:CC:09:3C:AE:93:01:53:DE:68:13:3F:8E:16
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       6E2D51BF7D2B1152D07965301B33774CE09D6D84
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5211bbfa-c26c-44f8-96b2-a9282cfd61a1.roa
Signing time:             Mon 16 Jun 2025 19:31:05 +0000
ROA not before:           Mon 16 Jun 2025 19:31:05 +0000
ROA not after:            Mon 21 Jul 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0fb:e100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:2d:51:bf:7d:2b:11:52:d0:79:65:30:1b:33:77:4c:e0:9d:6d:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Jun 16 19:31:05 2025 GMT
            Not After : Jul 21 23:59:59 2025 GMT
        Subject: serialNumber=ae9cd9c434083a86d9ab8851201ca4088673247f063e0376e48f4f42257c4b9c, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9d:0f:da:11:bb:b0:a3:df:aa:b6:c2:5f:d0:
                    1c:2f:e0:6a:7b:fb:e0:f5:26:40:b7:ff:97:06:0c:
                    85:d2:4b:9c:16:f2:ee:cf:d8:e4:34:1f:17:77:9c:
                    b0:02:ad:0a:57:47:72:87:c1:32:36:d5:b0:d2:68:
                    1e:5c:07:2e:c8:08:87:80:b4:cb:a5:1f:37:ae:89:
                    2b:b9:3b:74:cf:b7:b3:dc:c5:63:b2:0c:75:76:74:
                    f2:92:4e:96:2e:22:23:01:46:91:ca:8f:a6:d5:84:
                    35:45:32:bd:b6:4b:5d:6a:48:a7:63:76:25:32:ec:
                    73:e6:76:f1:57:33:f9:b5:1c:fc:08:1c:59:e7:5e:
                    7c:26:16:34:6a:72:7f:af:64:e5:93:f8:82:ca:e5:
                    f4:b6:26:38:70:43:46:e3:76:ea:87:63:41:c9:06:
                    da:77:a7:21:ca:fe:16:4a:62:af:dc:7a:5a:99:52:
                    5c:58:c7:5e:9e:49:8f:b0:f4:1c:01:eb:d7:86:7d:
                    1b:b9:f7:24:09:26:4c:50:26:1f:f7:f4:75:79:67:
                    5e:68:9d:ce:f7:0e:44:af:d6:43:ea:e2:1f:37:da:
                    a1:10:e0:c0:1a:2e:0f:f9:37:2c:ae:ad:85:e7:29:
                    fd:2d:ab:6a:85:1d:71:bd:a0:39:a3:53:30:62:e4:
                    62:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:8A:86:42:4C:8C:A7:CC:09:3C:AE:93:01:53:DE:68:13:3F:8E:16
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5211bbfa-c26c-44f8-96b2-a9282cfd61a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:e100::/40

    Signature Algorithm: sha256WithRSAEncryption
         27:39:d7:c9:03:26:7b:5b:71:56:9d:af:27:4c:52:28:a4:04:
         27:4d:bd:f5:99:b4:9f:f0:57:31:b9:59:ed:dd:a8:2d:e9:8c:
         21:34:de:81:36:9e:4c:0c:fc:e7:f0:41:4a:20:f2:84:b7:17:
         d4:e6:3a:a1:9d:56:d0:8f:ab:4f:c3:53:29:03:ad:9c:99:47:
         32:34:1e:b9:35:71:48:8e:0c:a7:dd:2f:78:9e:87:c3:76:79:
         1a:2d:d9:79:b1:f5:a2:cb:cb:ff:08:cc:c0:1c:76:24:bd:85:
         aa:ac:87:af:68:d7:21:22:97:f5:3c:1d:96:05:4d:27:71:ca:
         65:ff:49:a3:44:0e:72:85:da:6f:9d:5a:8f:4e:de:fa:05:89:
         27:bc:82:4a:aa:ff:e6:66:c0:fa:8f:02:6c:3f:42:98:2a:7a:
         8d:fc:6c:0e:88:bc:12:a8:3d:f7:a8:f2:77:a0:23:a9:4a:93:
         d4:84:c4:fc:9a:59:2c:b3:bd:9b:50:3b:91:78:03:a0:62:fc:
         8a:a8:a0:1c:1b:82:ac:27:ab:6b:57:74:4f:63:02:49:5f:f3:
         4d:66:82:4a:33:b6:31:b1:1e:c1:07:9d:c7:39:45:b5:86:7d:
         06:fe:3c:ab:54:2f:21:27:6a:0c:d1:57:8d:6b:9e:17:99:6d:
         64:c1:b2:3c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 29 06:05:38 2025 by rpki-client