Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c921a1b-c5be-4c53-9918-5f35190b51a3.roa
File:                     6c921a1b-c5be-4c53-9918-5f35190b51a3.roa (raw, json)
Hash identifier:          i+YonV4bFcpK+NTgrLbgIxFN9hGtoO+n8AD16EF63qA=
Subject key identifier:   02:8C:F0:41:33:83:33:77:B4:EB:F1:22:C3:77:B5:8F:DE:BB:84:29
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3289F17E758F72F6E8078421617C458A641B41EA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c921a1b-c5be-4c53-9918-5f35190b51a3.roa
Signing time:             Tue 08 Jul 2025 15:20:32 +0000
ROA not before:           Tue 08 Jul 2025 15:20:32 +0000
ROA not after:            Tue 12 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f00:3400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:89:f1:7e:75:8f:72:f6:e8:07:84:21:61:7c:45:8a:64:1b:41:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul  8 15:20:32 2025 GMT
            Not After : Aug 12 23:59:59 2025 GMT
        Subject: serialNumber=9f9cdfc38723f84f16998d1aa0cf5513859262cb55c5a13a184acad704d47e54, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a8:46:b1:30:e8:bf:0e:bf:3d:ed:22:3d:a1:
                    31:86:fb:81:3b:41:79:f7:17:3f:b9:a2:30:fb:9d:
                    00:1e:d8:53:7d:e7:e3:3c:85:d8:f0:25:8f:1e:9f:
                    09:bb:db:27:e8:dd:bb:8b:f3:95:7a:9c:f5:59:30:
                    8f:7c:9c:20:b1:94:8d:27:56:56:83:51:74:13:aa:
                    47:5f:89:ea:25:e3:1d:17:9c:10:12:30:d0:39:50:
                    69:03:b0:0d:3a:bb:00:49:33:8e:25:80:02:8d:27:
                    1f:84:d9:9a:75:d1:5c:c6:a5:7d:bc:60:b9:f8:ba:
                    46:98:f9:87:d3:03:d6:10:37:be:43:9f:16:88:26:
                    77:19:0a:cf:9b:74:5d:24:15:e4:84:f2:75:96:cb:
                    e8:94:f4:14:55:c5:f4:41:49:b4:1b:08:13:5c:f6:
                    45:11:be:d8:d6:05:ec:5b:6e:b3:71:67:4d:09:60:
                    a9:18:b5:41:0f:8b:8e:be:d6:f8:1c:c2:f2:6c:41:
                    a6:e7:72:15:75:df:a9:60:39:87:95:fa:70:5d:31:
                    cf:02:fc:19:8d:00:d1:e6:0c:37:64:ee:c7:c0:02:
                    5f:61:1a:2b:3a:7d:c7:3d:ec:31:8d:5d:85:31:12:
                    63:d9:47:9a:7e:7f:ee:66:3a:71:9b:7c:46:5f:7d:
                    b3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:8C:F0:41:33:83:33:77:B4:EB:F1:22:C3:77:B5:8F:DE:BB:84:29
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c921a1b-c5be-4c53-9918-5f35190b51a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f00:3400::/40

    Signature Algorithm: sha256WithRSAEncryption
         76:69:ad:ad:c6:b6:4f:9d:94:b3:af:37:ea:93:01:a9:a1:9d:
         55:df:8d:78:f0:d4:2c:f8:fb:bb:d5:ff:6b:0b:a8:67:63:42:
         80:9d:b4:24:fe:d2:e6:1e:ea:b2:95:4d:8c:2e:de:f9:ad:35:
         1b:d3:98:28:1a:78:ab:2a:2b:e3:ca:92:75:62:fa:d1:93:b4:
         1e:d2:e9:02:48:10:d0:5b:38:3f:68:bd:47:bc:0f:e0:c0:52:
         03:84:42:45:54:29:78:a8:b9:35:17:64:53:74:7a:c2:e7:ea:
         ca:41:93:22:14:0d:78:a1:2d:7a:fd:be:57:2a:55:42:86:c7:
         19:b4:63:03:79:e0:b9:7c:a5:27:07:d0:e1:6d:0f:a0:07:a5:
         14:4b:e5:42:91:a0:6b:c2:48:c0:ba:20:c3:ff:45:87:e1:3a:
         2c:7b:25:1b:f2:56:15:49:91:d2:d8:70:79:d1:f1:2c:33:14:
         bb:d7:e6:2e:56:c4:f8:85:91:ea:7d:0e:03:60:87:04:e0:77:
         50:30:b0:84:e1:65:d7:f3:da:51:62:1e:e1:2f:c6:dc:6a:b5:
         fe:e7:83:11:eb:19:e5:2b:16:0b:1f:ef:ca:6e:b5:f4:e2:78:
         9a:c5:f2:51:a4:10:3a:90:f8:ca:c3:06:a3:8a:bd:2a:ab:64:
         49:a5:30:e9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jul 22 11:45:23 2025 by rpki-client