Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3179ea53-c6f4-43ee-ab46-9a09b3dcb2a2.roa
File:                     3179ea53-c6f4-43ee-ab46-9a09b3dcb2a2.roa (raw, json)
Hash identifier:          bxnZKUHwIcPjIoGRRiyjAZExZ3kJdipGBk6jgWV1QMY=
Subject key identifier:   16:42:4E:43:29:35:13:9A:80:4A:AF:8E:94:82:B0:27:F4:8D:D4:DD
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0E78B1446A3C0E0B1E291E1FE9A03108D7FFF8FE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3179ea53-c6f4-43ee-ab46-9a09b3dcb2a2.roa
Signing time:             Mon 07 Jul 2025 18:01:58 +0000
ROA not before:           Mon 07 Jul 2025 18:01:58 +0000
ROA not after:            Mon 11 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f61:4000::/39 maxlen: 39
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:78:b1:44:6a:3c:0e:0b:1e:29:1e:1f:e9:a0:31:08:d7:ff:f8:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul  7 18:01:58 2025 GMT
            Not After : Aug 11 23:59:59 2025 GMT
        Subject: serialNumber=6c67d3d83716ce6af93063ea7adf9c2ea143fd138606c294e5712e4f1c7165b6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:96:0b:fc:23:9c:58:3d:32:e4:ca:5d:d1:21:
                    be:48:26:2b:86:a3:83:3e:50:70:67:9b:81:6e:42:
                    7f:55:fb:6d:b5:a8:88:f2:55:d2:f9:22:9c:f7:8a:
                    e6:e1:e2:a1:34:fd:8d:4a:ea:b9:61:51:b5:d4:22:
                    7f:bb:c3:84:39:f2:d2:a1:c6:9c:65:c1:14:66:6a:
                    6c:42:5b:5b:ca:54:93:fd:6b:92:cf:78:f1:08:32:
                    e2:62:16:a2:71:f5:fb:71:e9:b7:67:78:8f:45:95:
                    27:e6:87:b6:c9:8b:82:6b:22:ed:9d:45:0c:b5:cb:
                    6b:ec:4d:4c:48:a5:95:67:b9:7f:11:28:f0:c8:f0:
                    9a:26:7a:b8:32:92:cf:d0:e1:e8:a1:31:13:d1:91:
                    ad:18:09:49:ac:67:5a:f7:a3:f3:ea:bb:7f:f3:e4:
                    37:53:ce:cb:99:f8:a0:6d:3f:b1:83:a7:ac:81:cc:
                    e2:75:a5:7b:29:d6:9d:dc:30:fa:dc:6a:cb:56:1e:
                    65:aa:a2:d7:55:ea:cc:4d:c3:17:55:95:5d:e6:5c:
                    95:1b:70:2c:83:2f:77:b6:ff:32:f2:b4:b8:88:36:
                    0b:23:ae:03:49:a6:3d:fd:3b:26:2b:b6:3f:f8:63:
                    33:c9:20:47:8c:f6:d0:25:1c:8e:40:25:b3:48:3a:
                    09:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:42:4E:43:29:35:13:9A:80:4A:AF:8E:94:82:B0:27:F4:8D:D4:DD
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3179ea53-c6f4-43ee-ab46-9a09b3dcb2a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f61:4000::/39

    Signature Algorithm: sha256WithRSAEncryption
         c0:9c:b1:22:96:b5:dd:e7:fc:9a:4d:46:77:82:ca:a4:b8:24:
         e8:37:f8:a8:12:21:11:79:9a:16:2f:15:48:2e:46:1d:00:48:
         ac:50:2e:59:5f:7f:15:67:a4:88:b1:95:36:3e:54:4c:29:de:
         49:46:f1:ab:6e:07:09:97:2f:66:2a:82:ab:7e:94:1f:cb:eb:
         66:31:d1:a0:a5:11:22:14:dc:3c:31:2e:fc:bc:e5:e6:03:af:
         e6:5a:bc:a8:32:1f:8a:64:9a:c1:5b:70:04:a6:9a:e6:d5:9f:
         16:2f:d9:4d:e4:c8:22:55:a0:2a:7a:28:e4:8d:47:05:ee:26:
         53:14:10:f5:dd:cb:05:ea:87:3b:44:69:e9:47:e5:e6:6f:7e:
         54:74:d1:ec:94:26:1f:dc:f7:a4:93:30:e4:bc:90:66:1a:70:
         cb:27:90:b5:59:dd:3f:fe:54:fd:5b:1c:e2:8b:33:ae:05:70:
         dd:34:6d:cd:84:05:e0:18:3f:cb:54:50:7a:b5:12:49:0e:bf:
         e1:56:22:5f:fb:21:16:66:b5:ba:be:e2:c4:7e:f9:fd:44:84:
         ed:ba:59:ea:2d:5e:6e:20:da:f8:22:15:50:af:53:51:6e:73:
         f2:4c:61:81:ac:71:7d:6e:b1:01:45:18:f1:98:1a:15:5a:c4:
         d4:5e:84:fb
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jul 21 18:11:24 2025 by rpki-client