Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7c0c4811-7db0-4cc0-8fa1-6dbda4055b97.roa
File:                     7c0c4811-7db0-4cc0-8fa1-6dbda4055b97.roa (raw, json)
Hash identifier:          a7sEn1YUBumpraTcvY1rUUpoOVemTKIv0+b3O2VFj+E=
Subject key identifier:   5F:9C:88:30:CA:F3:16:82:33:33:19:ED:47:9C:80:B4:CE:24:47:2A
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       5E12F0A54ABEE4527394C5C8A79A96B56D5A73FC
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7c0c4811-7db0-4cc0-8fa1-6dbda4055b97.roa
Signing time:             Mon 16 Jun 2025 19:31:10 +0000
ROA not before:           Mon 16 Jun 2025 19:31:10 +0000
ROA not after:            Mon 21 Jul 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0fb:eb00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:12:f0:a5:4a:be:e4:52:73:94:c5:c8:a7:9a:96:b5:6d:5a:73:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Jun 16 19:31:10 2025 GMT
            Not After : Jul 21 23:59:59 2025 GMT
        Subject: serialNumber=2732c55d0f4ab1ee07e7eac0994752bfa6a8c618958c7a014cbc69aefe2e5cf4, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:19:7d:12:fa:d0:0a:f6:0f:59:fb:07:4b:7a:
                    55:57:3a:bc:b8:a7:b3:3b:50:b2:a6:1f:3f:02:04:
                    5d:48:fe:4f:19:b8:ce:bc:83:63:66:1c:3e:e5:9f:
                    5c:c0:cb:d7:7b:2d:16:8e:55:c9:3f:84:90:64:5b:
                    54:da:6a:85:d8:9f:4b:fe:38:a9:b8:97:b7:a0:38:
                    7f:20:0a:e5:39:d8:7b:0b:75:66:bb:60:f3:31:29:
                    ce:8d:3a:ef:f9:4e:ba:61:9a:61:39:25:c9:dc:a1:
                    35:cf:22:3a:72:00:c4:27:90:1e:d2:ce:91:05:84:
                    8f:df:43:c9:c2:e4:b5:25:31:ac:36:0d:dd:25:d5:
                    95:ee:53:2b:6d:27:ae:e6:9b:fb:82:3a:54:f8:97:
                    0a:54:ee:d8:58:25:19:9c:cc:c7:90:3f:16:eb:19:
                    0d:3f:fc:d2:7a:e0:23:63:69:d0:aa:dd:8f:d5:d1:
                    ce:1f:91:1c:6f:ab:15:6a:4d:02:be:b7:b6:68:d5:
                    8d:19:9e:0d:64:d8:85:e5:8c:bc:8a:d4:76:ef:af:
                    9d:54:b8:11:46:10:73:99:e1:a5:de:ce:1a:cc:c6:
                    8c:06:9f:8e:32:6e:84:d4:c7:6a:a4:fd:ea:ba:e3:
                    9f:44:72:bb:d3:74:20:59:60:a0:89:80:6f:b3:0a:
                    ff:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:9C:88:30:CA:F3:16:82:33:33:19:ED:47:9C:80:B4:CE:24:47:2A
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7c0c4811-7db0-4cc0-8fa1-6dbda4055b97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:eb00::/40

    Signature Algorithm: sha256WithRSAEncryption
         4e:41:5f:20:a7:f3:ad:59:ab:08:0a:d3:26:5c:91:a3:01:6f:
         73:07:01:20:66:b9:fd:34:cc:72:65:61:60:4b:a5:ae:30:6b:
         ce:47:52:bf:2f:0f:59:7c:1f:d2:66:36:af:b9:b7:6d:ca:88:
         aa:61:41:f7:46:8b:d4:59:2f:8c:2d:7c:23:db:08:33:83:6d:
         88:50:87:a9:36:f8:03:66:3a:7a:42:cb:e4:6d:4d:71:67:e9:
         9b:0c:36:33:53:b7:08:db:fb:49:a4:c0:d4:bf:64:87:c5:56:
         57:8a:d9:11:fb:84:4b:92:68:7a:39:bc:8f:06:a0:2d:29:33:
         eb:be:e8:ed:7e:d9:91:e9:35:5c:f4:ed:0b:97:40:c5:79:7e:
         6e:87:3a:20:95:cb:e4:fa:10:3e:19:8b:3b:aa:5c:47:81:17:
         62:b9:db:22:1a:b0:5b:40:e0:f7:4d:96:02:04:2a:04:8e:9d:
         85:99:9b:48:90:08:e5:9d:98:71:8a:75:c4:07:a1:8a:69:a4:
         4d:5d:e9:54:39:fd:7d:6a:bc:09:8e:fb:5f:a3:81:05:e9:fe:
         56:c5:14:45:eb:35:c8:97:5b:1a:a7:6b:01:1a:91:15:d7:df:
         fb:ff:17:8c:c0:85:40:bc:7f:84:61:2d:7b:15:c7:43:15:38:
         2c:4d:c4:04
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 29 09:04:33 2025 by rpki-client