Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/380a04c2-9944-43d6-b6c2-05c0698486d4.roa
File:                     380a04c2-9944-43d6-b6c2-05c0698486d4.roa (raw, json)
Hash identifier:          /KYOaQ5N0WAR6xD9wHHlafKAQXTjwa+S9V1wQRKjSCc=
Subject key identifier:   31:5B:51:A9:37:F1:D7:12:63:51:65:48:BD:52:B1:6B:BD:6B:13:EE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0BAFFFA97AEB369D5FB32DFF7AC239050D09411B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/380a04c2-9944-43d6-b6c2-05c0698486d4.roa
Signing time:             Tue 08 Jul 2025 15:31:21 +0000
ROA not before:           Tue 08 Jul 2025 15:31:21 +0000
ROA not after:            Tue 12 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ffb:6040::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:af:ff:a9:7a:eb:36:9d:5f:b3:2d:ff:7a:c2:39:05:0d:09:41:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul  8 15:31:21 2025 GMT
            Not After : Aug 12 23:59:59 2025 GMT
        Subject: serialNumber=e0d24815115d30df6dee88f545c2b6d8627911c92da180fbafbf615988676a0e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ab:75:73:30:06:e6:d7:df:97:0b:46:16:94:
                    33:69:b8:00:83:77:6d:12:ce:ef:d0:a2:fe:57:5c:
                    a9:76:61:5c:0e:0c:99:f3:30:f8:a8:7f:23:cd:55:
                    10:e5:5c:17:21:28:d9:1d:5d:dd:2b:22:3d:3b:3a:
                    1d:32:9f:f1:4d:c1:56:3f:13:c5:5d:1a:49:f8:47:
                    cf:e5:07:69:28:78:79:55:fc:ba:8b:90:82:ae:fb:
                    c5:ca:e9:1d:8d:f3:4d:f5:ff:ea:95:9e:35:53:ff:
                    d1:d7:ec:bb:a4:eb:2f:4c:96:75:69:75:be:16:ac:
                    61:ac:b7:04:0d:26:d8:c6:6f:e5:08:c9:f9:94:0e:
                    d5:21:df:fa:16:37:2c:b6:1e:6e:86:4f:8a:e3:d0:
                    f8:2c:7d:32:41:73:e5:cf:52:0a:f0:e8:9b:c2:8f:
                    6b:e4:cf:26:5c:67:32:27:88:86:3a:81:88:99:6c:
                    16:46:39:16:6c:ab:28:59:68:6a:91:53:b1:9f:be:
                    fb:33:87:64:2c:d1:49:4b:c3:cb:0c:d1:51:e5:b2:
                    71:0b:b8:90:a4:93:d5:16:13:6e:b3:62:d3:4f:6c:
                    6f:3d:d6:4c:53:e2:3a:7b:73:76:06:27:36:aa:13:
                    ed:e1:d5:3c:20:c0:3a:ba:bb:16:7b:44:ad:fb:ae:
                    2d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:5B:51:A9:37:F1:D7:12:63:51:65:48:BD:52:B1:6B:BD:6B:13:EE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/380a04c2-9944-43d6-b6c2-05c0698486d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ffb:6040::/46

    Signature Algorithm: sha256WithRSAEncryption
         8b:84:72:77:38:09:2d:5f:fb:63:83:66:4b:34:ef:45:d0:7b:
         23:03:6d:d5:b8:93:89:75:fd:02:7f:9f:00:91:f6:37:97:98:
         47:f8:1e:79:b2:bb:d0:84:61:1b:7f:2c:0b:77:36:95:79:78:
         45:64:df:f8:01:08:62:41:cc:5a:f8:8b:0f:f9:85:c8:52:5f:
         6b:a6:01:39:25:2c:93:c1:fc:b2:ff:31:27:94:37:31:61:bb:
         d6:a3:63:79:c8:77:ba:9b:39:79:3c:19:8c:e9:71:b5:f3:99:
         b5:98:d9:8b:1e:01:7d:eb:72:eb:63:d4:31:e8:f3:64:69:cd:
         a7:c9:41:72:57:23:aa:fe:e5:cd:3e:88:94:7e:c2:16:56:6d:
         17:8a:3c:db:b1:a9:b4:cd:e9:fd:85:2d:c6:6b:9d:f3:d6:e7:
         e0:d5:97:07:00:25:bb:84:82:b5:27:79:58:7e:19:b9:48:cf:
         06:6b:be:48:58:a5:dc:6e:5a:74:6e:57:7d:7f:9f:ec:19:c0:
         12:c1:80:38:7e:4a:fd:97:36:d3:ac:5d:7e:7a:40:aa:e8:86:
         fc:f1:a7:a8:75:e2:f7:b4:2a:88:5a:7e:c6:11:72:d8:7a:81:
         1f:83:fb:2f:20:50:8c:4f:a2:e2:fe:1b:68:95:fe:78:60:e4:
         08:f2:e3:d1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 23 02:07:43 2025 by rpki-client