Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c4e52abf-4d7e-4707-bd4e-1ceba64e18cd.roa
File:                     c4e52abf-4d7e-4707-bd4e-1ceba64e18cd.roa (raw, json)
Hash identifier:          6eOdR+nYgI9vhjJ45QMjxytXPBbRvoCYFqdeeuW8xh8=
Subject key identifier:   36:99:62:F0:2C:9C:59:4B:B8:52:DF:A3:50:3C:4F:EA:AD:6F:89:C7
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       68BB45385D6E7272FB1543821AA27652B82A148E
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c4e52abf-4d7e-4707-bd4e-1ceba64e18cd.roa
Signing time:             Mon 16 Jun 2025 19:30:09 +0000
ROA not before:           Mon 16 Jun 2025 19:30:09 +0000
ROA not after:            Mon 21 Jul 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0fb:e600::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:bb:45:38:5d:6e:72:72:fb:15:43:82:1a:a2:76:52:b8:2a:14:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Jun 16 19:30:09 2025 GMT
            Not After : Jul 21 23:59:59 2025 GMT
        Subject: serialNumber=d2e4172f2e614ee6b035896687d83b0e179cdb474ec6b265eb7775235e58ecb6, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:e6:2b:dc:6f:cd:d3:80:b3:df:1c:e3:f5:dc:
                    32:38:93:8a:aa:7b:66:a2:2f:c4:a6:e6:36:ac:d4:
                    d9:b0:0f:82:b4:21:c4:54:e5:9f:4b:d5:b9:ae:04:
                    79:8f:d1:f0:e0:7f:ff:38:b7:ec:bc:64:39:a8:48:
                    01:25:18:53:b7:49:49:e3:78:38:c4:95:ed:61:c8:
                    54:10:2a:37:96:b7:83:94:96:1e:79:99:da:56:a0:
                    c7:29:4c:55:29:26:dc:23:c4:4a:cc:3a:7f:40:91:
                    2c:5d:c5:f6:97:2b:0a:5a:b6:36:e4:ed:5b:19:00:
                    46:e6:1d:9b:6a:1d:51:a7:24:b9:2f:2c:d5:ff:81:
                    c3:b6:b0:93:00:54:08:56:ba:13:a7:8f:65:11:62:
                    61:9a:a6:bb:e1:1b:d4:23:05:43:d8:9c:81:66:94:
                    b9:82:1f:d9:83:14:33:6d:e8:6f:43:01:ea:ed:60:
                    be:b8:01:84:02:a0:0f:03:86:a8:13:bc:95:c4:86:
                    4d:37:4c:ac:49:68:21:05:cf:9a:10:19:16:a9:08:
                    2b:a1:07:70:7d:c8:92:bf:45:fb:d6:ab:39:9b:b0:
                    01:50:19:d4:ff:93:73:30:9e:bf:e1:e2:a2:a0:bd:
                    75:1e:4b:72:9e:f0:4b:1b:1c:22:42:15:51:47:75:
                    f3:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:99:62:F0:2C:9C:59:4B:B8:52:DF:A3:50:3C:4F:EA:AD:6F:89:C7
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c4e52abf-4d7e-4707-bd4e-1ceba64e18cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:e600::/42

    Signature Algorithm: sha256WithRSAEncryption
         a4:56:8f:a3:da:58:82:fe:9d:22:37:94:0a:d3:01:74:20:09:
         30:a8:df:95:d1:c8:1c:ba:38:78:60:a0:0c:f0:b7:71:2c:94:
         c2:e2:5e:39:f4:63:1d:b8:61:e8:28:39:7a:a0:53:1c:2c:13:
         9a:9d:33:f1:d8:6c:dc:4c:a6:c7:24:17:66:e4:a8:46:e5:e7:
         d0:dc:7e:b7:9e:07:a3:7e:84:2a:da:04:92:99:73:20:f9:8d:
         27:55:26:c8:47:44:82:4e:fa:b1:76:4f:68:9e:39:26:53:e5:
         10:6a:74:9f:ad:66:31:01:f6:b6:3d:53:37:4b:ad:6a:8e:fb:
         ca:18:e6:68:d0:3f:c6:1b:09:4c:f3:b5:b5:13:5a:d7:80:ed:
         56:4b:88:50:31:bf:9f:5a:1b:9a:ec:77:65:18:e8:8f:92:5f:
         15:c5:a6:39:95:d6:66:17:86:36:5e:e7:77:75:1f:64:3e:c1:
         0f:35:ba:80:4c:b0:29:c5:49:93:12:d9:a5:fb:55:e9:43:8e:
         c7:43:dc:a9:07:22:a9:b5:86:63:6d:f8:c4:06:ef:d8:db:45:
         9f:9c:19:79:5a:fe:66:e2:b7:b9:87:2d:2b:27:ab:f6:6d:18:
         2b:81:f9:ac:d2:19:ce:a7:cb:bd:0f:21:f7:03:44:90:8f:a9:
         ae:68:31:3a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 29 01:31:10 2025 by rpki-client