Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6eaf9ab5-ec8b-42eb-ade9-781bf12212a4.roa
File:                     6eaf9ab5-ec8b-42eb-ade9-781bf12212a4.roa (raw, json)
Hash identifier:          Tn07MrDGZQ/axHIgUousFXr8SodtewnfLAh0dJpBdgg=
Subject key identifier:   77:48:F0:6A:4C:C6:E4:57:60:A9:62:45:9F:7C:F6:53:1B:FB:BF:5C
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       18D487409359E21BD5F7FAF01949DA0BED93BE62
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6eaf9ab5-ec8b-42eb-ade9-781bf12212a4.roa
Signing time:             Tue 19 Aug 2025 16:50:07 +0000
ROA not before:           Tue 19 Aug 2025 16:50:07 +0000
ROA not after:            Tue 23 Sep 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0f0:1100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:d4:87:40:93:59:e2:1b:d5:f7:fa:f0:19:49:da:0b:ed:93:be:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Aug 19 16:50:07 2025 GMT
            Not After : Sep 23 23:59:59 2025 GMT
        Subject: serialNumber=5d455fabbe639f5680f87421c97b6e1fca044c8e8547cdf0adb04aaa31eda63d, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:46:ea:32:05:08:78:c5:8f:4e:92:96:c2:05:
                    6e:6c:4a:87:64:b8:9d:bc:60:10:ff:a0:c2:47:66:
                    e0:86:15:b1:67:10:93:d5:80:75:11:3f:28:a7:ba:
                    26:86:5c:b7:4c:e6:e8:38:d3:ea:72:1c:d7:de:40:
                    38:8b:01:9a:31:7b:df:84:e5:bb:a8:fd:79:59:02:
                    44:1c:92:e0:1d:4b:91:e9:f7:af:17:22:bb:c9:af:
                    cd:fa:39:ad:f2:8c:bc:3c:34:84:f6:42:ed:21:8d:
                    41:19:bd:11:b1:a6:20:96:13:9d:fa:63:d1:6e:0f:
                    72:b1:2c:d3:69:09:8b:b1:0b:73:e7:a4:09:1a:a3:
                    2c:09:37:b2:da:fd:6e:08:d8:40:f8:67:e5:db:6d:
                    36:da:78:eb:e9:95:4d:a0:4e:8f:b1:3d:8a:70:f4:
                    60:43:81:70:54:9a:08:71:b5:e1:cb:2c:99:57:11:
                    91:fa:3b:9d:99:06:bb:25:a8:fd:a2:e5:2f:6a:67:
                    3c:2f:7e:12:bb:51:a4:5b:b8:2e:b7:45:50:a7:b0:
                    aa:d2:73:ea:0a:da:00:4e:a8:b0:c7:55:c5:7b:19:
                    48:33:ad:c2:b0:97:30:cb:6b:8b:eb:97:6f:d4:fb:
                    01:5e:2c:cb:17:63:39:2d:37:16:25:b3:69:bc:dc:
                    18:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:48:F0:6A:4C:C6:E4:57:60:A9:62:45:9F:7C:F6:53:1B:FB:BF:5C
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6eaf9ab5-ec8b-42eb-ade9-781bf12212a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:1100::/40

    Signature Algorithm: sha256WithRSAEncryption
         03:d8:e4:07:9b:e5:3c:d7:2a:a5:5b:ae:e8:fd:fb:0a:31:35:
         58:53:69:2f:b5:53:9c:43:28:16:de:8c:5a:43:46:cc:de:2b:
         80:39:27:1d:74:10:b6:24:bb:b6:b4:68:48:c5:90:75:2d:06:
         c0:5b:ac:58:7a:ff:95:96:bf:ab:ee:f2:d7:a6:cb:1b:79:14:
         c8:da:03:bc:97:f0:d2:33:60:8b:bd:99:c0:3b:41:be:b6:0f:
         26:30:4a:eb:1c:27:b9:d6:7f:68:6f:6b:f4:8a:a7:ea:7f:8e:
         01:24:8e:16:67:8e:cf:3b:04:5a:3f:58:69:d1:2d:60:cd:38:
         a2:cb:f8:99:c7:d8:72:77:9a:79:61:47:c5:77:9e:c2:87:fb:
         00:34:01:49:56:94:64:32:a7:17:16:fb:cf:61:df:ed:4f:38:
         02:bf:c2:0c:93:72:3f:35:69:40:5b:10:cd:e3:bd:f6:9c:4d:
         f7:fe:a1:8b:ea:82:38:34:b2:79:c2:7b:40:fb:92:9a:f1:fc:
         87:14:23:80:3a:fa:27:fb:bd:4a:67:04:63:d9:dd:61:11:e9:
         55:83:84:6c:ff:87:73:29:6d:6d:c7:ca:21:2c:8a:ad:bd:37:
         65:45:2e:78:bb:6a:4c:19:83:8f:db:78:5a:72:bb:67:98:52:
         91:63:b5:bd
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Aug 23 06:45:52 2025 by rpki-client