Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c4e52abf-4d7e-4707-bd4e-1ceba64e18cd.roa
File:                     c4e52abf-4d7e-4707-bd4e-1ceba64e18cd.roa (raw, json)
Hash identifier:          NPoV3kh58agLCb33sgmKHMhqPTbqAvDDBL5vzNL3mxI=
Subject key identifier:   49:6D:40:24:09:35:E3:23:F7:F4:D8:DC:7F:AE:76:BB:4A:D7:5B:C8
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       7C83570A4F82DC16059C92C1E235751ED8D6ABA6
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c4e52abf-4d7e-4707-bd4e-1ceba64e18cd.roa
Signing time:             Tue 05 Aug 2025 18:31:15 +0000
ROA not before:           Tue 05 Aug 2025 18:31:15 +0000
ROA not after:            Tue 09 Sep 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0fb:e600::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:83:57:0a:4f:82:dc:16:05:9c:92:c1:e2:35:75:1e:d8:d6:ab:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Aug  5 18:31:15 2025 GMT
            Not After : Sep  9 23:59:59 2025 GMT
        Subject: serialNumber=5fdab3bca341e27958d9eed469189ad79aad28cea71d7f2d2603dd953dfc615e, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3c:d0:34:b7:1d:65:1f:f5:88:60:7c:d3:b5:
                    47:2b:fd:9e:25:9d:8f:c7:3c:b0:65:44:b4:22:52:
                    44:aa:15:6c:af:c5:c9:b9:53:e4:6f:60:e2:67:ff:
                    da:ae:0b:1c:77:66:d0:1e:61:cd:0b:69:89:c1:2b:
                    e9:3c:8d:b5:11:b4:a7:43:80:48:27:88:f3:00:72:
                    8d:1c:71:8a:af:a5:19:db:e7:13:a2:40:1b:7b:a0:
                    a9:21:b1:51:e0:e0:76:71:a4:af:c1:b9:64:0d:8a:
                    fb:54:32:e5:9f:36:e1:af:ef:db:5e:ec:19:f1:5b:
                    c8:52:f2:c6:58:4e:d9:a5:3f:49:71:c2:54:92:a5:
                    65:97:1f:f7:5e:b7:2c:01:5a:f3:4c:38:1f:a6:c0:
                    43:1b:c5:19:c6:8b:cf:f3:6d:3c:70:9f:9d:52:6c:
                    53:98:a1:a6:f8:d4:2a:29:07:12:7d:3e:15:fd:6e:
                    08:35:20:91:6d:3f:49:5c:12:2a:64:be:96:df:c4:
                    cb:9b:99:43:13:6e:36:a5:71:c4:ca:67:04:9b:91:
                    5c:28:69:9d:a1:7a:7a:00:c7:9a:f4:eb:19:95:29:
                    83:91:cf:0c:36:4f:57:87:e6:9b:63:62:c6:80:1b:
                    b4:20:56:a2:85:ec:df:e8:b8:1a:58:b9:bd:a9:b5:
                    eb:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:6D:40:24:09:35:E3:23:F7:F4:D8:DC:7F:AE:76:BB:4A:D7:5B:C8
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c4e52abf-4d7e-4707-bd4e-1ceba64e18cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:e600::/42

    Signature Algorithm: sha256WithRSAEncryption
         7a:3b:ca:b4:3d:d1:c1:22:25:30:55:f1:26:fc:c4:a1:f1:d5:
         d1:c7:56:c9:dd:5d:a8:ed:56:05:09:cb:dc:fa:a6:ae:bf:d0:
         7c:91:f5:10:cf:ae:5e:80:9c:be:7e:93:98:7f:0b:35:fe:8e:
         eb:62:2a:2e:84:66:06:3e:75:99:1d:7a:aa:57:6c:11:59:6e:
         fd:0c:31:37:43:e4:ec:9a:26:80:20:2e:43:34:9f:1d:85:16:
         73:1c:09:23:41:39:62:07:8d:73:d9:0f:03:f7:ad:e4:e9:52:
         6c:f5:3d:13:ea:db:aa:99:b9:18:2b:48:50:8f:93:e3:d6:44:
         d6:e0:c8:d1:ec:98:98:5c:6a:72:ce:ef:f8:41:17:ad:2f:79:
         18:59:de:d4:cc:5f:fb:6d:ec:ab:c4:19:9d:46:50:cb:43:80:
         29:7c:5c:38:47:7e:62:7a:74:4d:2e:34:95:0c:5f:d2:ea:f6:
         bd:21:ca:b2:fc:dd:81:99:78:f7:dc:3a:37:24:99:c4:e7:c7:
         a9:59:f7:46:9a:e3:94:f1:91:18:e0:90:fb:95:78:ae:73:c2:
         ec:32:e9:fd:ce:cf:72:dc:3a:aa:ed:e7:7f:44:4d:ec:ab:57:
         34:23:3f:b4:33:b8:10:5c:08:9a:6f:40:68:07:3f:bc:b0:3e:
         f8:42:5b:ea
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Aug 23 08:09:22 2025 by rpki-client