Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/c518c762-ddbf-4352-b9b9-1484318adaa8.roa
File:                     c518c762-ddbf-4352-b9b9-1484318adaa8.roa (raw, json)
Hash identifier:          3xw0HLqYnhw8nlGCY46G2OOB3Vvab+9E1+ZtO3U7q7s=
Subject key identifier:   C8:7F:44:07:A4:98:0B:A1:12:97:9D:E7:F0:AF:4C:D2:B8:AA:9B:F6
Certificate issuer:       /CN=6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267
Certificate serial:       38D3A42547C5C6E83B134632704D9E1E26262703
Authority key identifier: 6D:CA:65:D0:71:4D:7E:F2:56:90:BC:09:13:D3:54:DB:AC:89:2A:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/c518c762-ddbf-4352-b9b9-1484318adaa8.roa
Signing time:             Fri 26 Sep 2025 18:00:00 +0000
ROA not before:           Fri 26 Sep 2025 18:00:00 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2605:c940::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/7276b2fa-548d-4970-8314-8d73945c34d8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/7276b2fa-548d-4970-8314-8d73945c34d8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:d3:a4:25:47:c5:c6:e8:3b:13:46:32:70:4d:9e:1e:26:26:27:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267
        Validity
            Not Before: Sep 26 18:00:00 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=47b55d9bd719f00af8e46fcb7ddc83f564ebc23fe78022a49adf55722467abcc, CN=15f1683a-c0c2-4266-9a96-ecf9eba3239c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f1:76:9e:f8:b8:d3:5f:7e:08:bd:0d:42:5d:
                    c7:0d:3e:e3:14:a2:ac:4f:4b:50:1d:b9:32:51:e9:
                    8c:13:95:9c:c0:c6:56:b0:aa:c7:bb:6f:94:64:c3:
                    ac:fe:19:6b:7c:ef:b3:27:bb:5c:10:33:3a:66:81:
                    14:8f:3d:95:f8:c0:0a:94:33:2f:d1:16:b8:5f:ee:
                    9a:e5:e5:7f:59:c1:e0:d4:ce:f6:ad:b0:78:b4:e7:
                    bc:28:91:36:96:77:bf:48:08:50:b0:a6:26:56:68:
                    30:04:c6:84:be:6e:bd:ca:0a:4d:0f:5a:e0:99:6b:
                    69:10:15:0e:2e:26:54:28:20:8a:00:9c:e1:94:23:
                    d9:f7:d3:54:5d:75:a5:8d:d1:6d:8f:ab:ea:2e:32:
                    3f:7f:08:2e:9b:be:41:7c:75:b9:63:74:86:39:b1:
                    fb:93:29:37:f1:82:cb:40:1d:fc:86:64:9b:a8:f7:
                    73:b6:86:43:17:51:67:64:d0:30:f7:b8:da:0a:40:
                    b0:7e:81:ea:fe:41:ac:2f:d0:7e:9b:ea:80:74:ce:
                    07:59:b5:e8:8b:4a:ea:07:98:d4:41:e3:e3:1a:55:
                    c6:e1:70:b9:5e:8d:0a:21:04:0a:0c:b9:ad:bc:4b:
                    1e:d7:97:bc:62:f8:44:9a:9b:d8:c4:15:d1:5d:92:
                    30:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:7F:44:07:A4:98:0B:A1:12:97:9D:E7:F0:AF:4C:D2:B8:AA:9B:F6
            X509v3 Authority Key Identifier:
                keyid:6D:CA:65:D0:71:4D:7E:F2:56:90:BC:09:13:D3:54:DB:AC:89:2A:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/c518c762-ddbf-4352-b9b9-1484318adaa8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:c940::/32

    Signature Algorithm: sha256WithRSAEncryption
         bd:19:79:66:64:15:f2:12:3f:26:ad:f3:4c:96:3a:e8:15:91:
         f0:70:1c:57:1b:c4:66:89:fd:1d:83:d4:91:9a:eb:ba:57:6b:
         76:89:ed:b6:33:af:5d:39:b0:26:b7:7b:64:b0:44:e1:7b:a4:
         38:01:e3:21:62:9a:3d:b9:49:79:ac:e5:ee:6b:7b:19:21:7b:
         d8:fe:2f:6a:0d:0f:44:23:39:8e:b7:8d:60:ae:90:99:e7:05:
         c7:8b:dd:d5:ae:61:7e:78:ce:18:91:10:f3:67:fb:a6:67:5b:
         22:97:c8:85:bf:b5:35:f9:9b:82:2d:a5:e2:53:8d:48:b1:b0:
         1c:b2:2a:1f:c0:23:d1:d3:e5:d9:ef:8c:6c:0a:1c:9b:ab:a4:
         9c:6d:09:9e:92:79:15:e7:7b:ef:19:72:8b:98:d8:e2:56:93:
         d9:12:9f:ac:f5:00:90:1f:eb:74:f0:16:0d:53:0f:e6:42:2c:
         f2:59:d9:24:ec:b5:7f:44:07:21:79:ed:e9:fb:03:71:e6:31:
         cd:bc:ba:fb:42:c6:0d:49:c7:01:84:76:96:94:85:27:2c:f6:
         b6:86:bf:03:0c:fd:52:04:76:82:16:cf:04:82:1a:9b:cc:b7:
         68:bb:c2:e8:a5:aa:2f:d8:9b:6b:48:9f:ef:91:11:59:ae:03:
         7d:85:d5:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:50:59 2025 by rpki-client