Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/426b38c7-36d6-4796-a5e7-27ef58ca12ad.roa
File:                     426b38c7-36d6-4796-a5e7-27ef58ca12ad.roa (raw, json)
Hash identifier:          FV7ShcSvPXGyjajnhPUOjlZIsFykPDLE9KsjqvG4n5Y=
Subject key identifier:   49:C4:7A:69:92:F8:52:D8:C2:DE:8F:DB:F1:01:21:92:40:E8:FE:88
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1F434C4CDEA94E30DF821B656EB104593C70157E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/426b38c7-36d6-4796-a5e7-27ef58ca12ad.roa
Signing time:             Mon 21 Jul 2025 15:52:07 +0000
ROA not before:           Mon 21 Jul 2025 15:52:07 +0000
ROA not after:            Mon 25 Aug 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f69:8090::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:43:4c:4c:de:a9:4e:30:df:82:1b:65:6e:b1:04:59:3c:70:15:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 21 15:52:07 2025 GMT
            Not After : Aug 25 23:59:59 2025 GMT
        Subject: serialNumber=7b77cb614740111c772752fe27cad4564850590d3c3e877780a59f0e576ec895, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e8:1b:02:bd:d5:a9:bf:21:3e:bd:9b:ac:25:
                    d5:98:fc:a6:2c:52:d7:3b:c2:14:4a:21:43:d0:b1:
                    6d:89:aa:b8:9b:2f:83:c7:aa:6d:47:e3:71:d9:36:
                    89:f4:b5:a0:62:f5:30:d4:39:56:cd:ff:c1:20:d8:
                    ea:ef:27:4f:fd:ed:17:b6:33:87:f2:af:66:88:e8:
                    bc:44:ff:fc:fd:a1:a8:dc:f3:bc:76:95:1c:44:fa:
                    44:85:5c:d7:d5:63:48:4c:f2:9b:29:74:db:42:0b:
                    32:46:c3:d0:9b:81:65:b5:bc:4e:29:ca:dd:b8:0d:
                    8c:86:8d:c8:ab:e1:83:33:18:05:88:de:5f:88:40:
                    a0:07:cf:d8:6e:21:1c:c2:92:79:02:fb:bd:f6:4d:
                    db:3b:5c:62:49:7d:58:27:b8:80:0a:ae:c9:e8:a4:
                    2f:c8:28:ae:75:57:9d:94:99:e8:ac:e5:e1:b8:5e:
                    97:0e:f3:c3:c2:f8:27:2a:26:b3:31:2e:6a:0f:62:
                    15:48:81:e1:41:04:db:34:86:75:cc:e4:d4:22:2a:
                    41:1f:22:f7:9e:12:70:d4:f7:09:f1:04:f1:fe:a6:
                    e4:3a:96:ee:d6:4c:2f:9d:20:cd:a0:68:98:98:19:
                    7f:8a:f3:57:0b:45:02:71:9e:e1:ce:02:9c:4f:fb:
                    eb:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:C4:7A:69:92:F8:52:D8:C2:DE:8F:DB:F1:01:21:92:40:E8:FE:88
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/426b38c7-36d6-4796-a5e7-27ef58ca12ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f69:8090::/46

    Signature Algorithm: sha256WithRSAEncryption
         9b:b7:93:2b:c0:31:2a:a8:e5:66:05:b4:0a:24:88:9d:30:d2:
         0b:9e:d7:9a:88:c5:b9:a3:a3:4b:17:40:69:b5:93:18:85:79:
         d8:0c:5c:87:29:7f:65:3a:13:a8:c6:e2:d4:43:e2:6f:e1:ce:
         bf:c0:6f:c2:b7:23:18:ba:e6:d8:08:6a:e2:50:ce:e8:ee:be:
         53:ff:35:40:6e:9c:b0:10:5d:cb:b6:ac:13:dd:68:23:97:69:
         b8:8c:f2:4e:f1:c7:69:14:e1:4e:f1:a3:8c:69:e2:d6:28:ed:
         66:5b:36:42:b7:b0:da:0c:75:dc:50:5a:4b:97:e2:21:60:9c:
         eb:c6:45:14:fe:ac:4f:32:a0:7a:af:47:98:ea:a9:6d:14:dd:
         72:ad:02:16:00:a5:f0:6f:cb:c5:28:6b:79:01:2f:94:b7:ba:
         f5:32:e7:38:e8:f7:a2:9a:9f:26:55:68:26:01:66:58:cb:9e:
         0a:54:9f:15:e7:f1:54:5a:a7:21:65:27:e3:a7:66:8f:28:11:
         4e:9b:a3:2e:0a:8b:f9:d5:79:e9:4e:4c:74:5e:7a:67:7f:27:
         b4:1b:ea:86:80:09:70:ed:59:a2:30:03:c4:96:3c:3f:e6:61:
         5f:16:05:80:a8:ac:72:68:b3:c7:39:d0:77:99:b7:2e:03:b0:
         ef:95:68:f3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jul 21 18:09:49 2025 by rpki-client