Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6d25e66a-a6b8-490a-88cd-3fd72ce77ff6.roa
File:                     6d25e66a-a6b8-490a-88cd-3fd72ce77ff6.roa (raw, json)
Hash identifier:          nKORhZWgORNTFEZ2XYxyV/3FaLxiXV1FOMO8IQ0sjsU=
Subject key identifier:   D7:F2:DE:DF:17:6F:C8:46:02:50:9B:16:FD:1F:BD:2B:FF:85:A8:AA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0636CA7CAB2F1674F86905E6E754A9DA99A21E7F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6d25e66a-a6b8-490a-88cd-3fd72ce77ff6.roa
Signing time:             Mon 07 Jul 2025 17:21:34 +0000
ROA not before:           Mon 07 Jul 2025 17:21:34 +0000
ROA not after:            Mon 11 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f61:a4c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:36:ca:7c:ab:2f:16:74:f8:69:05:e6:e7:54:a9:da:99:a2:1e:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul  7 17:21:34 2025 GMT
            Not After : Aug 11 23:59:59 2025 GMT
        Subject: serialNumber=1c121296973c732f7ae6ec5824215511386f6f701f205dce4e0bf8369edba7dd, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2a:bd:c0:f2:46:9c:da:4b:f0:f7:a8:4a:56:
                    bc:10:19:fb:3d:2a:d0:90:9b:50:ec:73:96:96:a7:
                    37:54:21:74:a9:93:fd:2c:8b:35:4e:0c:85:c1:6b:
                    85:f0:0d:3e:e7:f2:c1:14:a1:45:20:25:47:ef:b5:
                    de:4d:4c:d8:e7:06:b2:b1:27:86:2e:07:a2:1c:ba:
                    59:9d:8a:7d:ff:3a:41:55:cb:51:3c:f5:5c:33:04:
                    78:bf:1b:35:0f:24:e5:1e:1b:ed:3f:95:dd:94:9e:
                    f1:5f:c2:98:00:ec:3a:e3:e0:29:e1:d0:f8:0a:09:
                    99:5b:9f:d6:8f:4d:6e:a6:8f:ed:19:ad:4a:62:ec:
                    13:74:11:31:7d:d8:07:a2:36:69:99:6f:ab:ae:c4:
                    00:9c:73:6a:87:8e:ee:be:bc:c5:a1:24:f4:b3:6c:
                    02:31:1d:2d:aa:4f:1c:53:60:52:d5:2f:ff:d5:5a:
                    23:7f:cd:11:97:93:95:ad:e5:e4:eb:97:07:9b:00:
                    77:d9:fb:3c:4d:f9:f4:7f:27:d3:48:7a:06:43:fc:
                    80:9f:c1:23:31:8c:92:4b:53:74:76:e4:f6:c8:5d:
                    99:80:7e:56:1e:7f:61:be:76:e3:a1:78:d2:c2:4a:
                    7e:16:44:59:1a:9f:07:0c:d1:f2:95:5a:d4:42:50:
                    4f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:F2:DE:DF:17:6F:C8:46:02:50:9B:16:FD:1F:BD:2B:FF:85:A8:AA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6d25e66a-a6b8-490a-88cd-3fd72ce77ff6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f61:a4c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:3b:62:0c:34:19:82:0d:a2:b8:12:1e:06:0a:26:fe:1b:46:
         75:19:cb:8d:3e:63:98:54:c5:78:0a:7e:7a:67:e9:50:09:4a:
         a2:3a:a7:3a:87:87:d7:5d:7b:3b:78:e0:b7:47:9f:e3:cc:bc:
         8f:3a:3f:25:0f:fe:50:4f:5c:8e:bb:a3:74:f4:86:1d:d1:6a:
         5d:92:fb:63:90:ee:5a:55:3d:c9:fd:f5:11:12:af:3c:79:0b:
         9a:16:df:32:45:3e:fc:7e:34:ef:75:66:ff:18:ef:95:fe:a3:
         b9:83:b8:b2:1d:98:76:d2:8a:8b:17:56:c7:63:25:7b:c4:2a:
         e2:ec:f7:24:d8:8c:c5:6f:a7:3f:85:b5:f4:1c:42:c7:92:92:
         99:9d:d6:72:dc:b2:05:b0:60:c9:0c:8e:1e:c9:77:e6:82:7d:
         b7:ba:60:17:37:0c:25:2d:98:1a:ca:37:ba:4a:d2:bb:27:d7:
         63:ff:75:40:c7:44:be:41:bd:26:f9:68:d6:b1:58:93:97:ad:
         90:39:ce:1f:44:4c:46:28:61:0f:5c:14:d5:eb:56:14:40:bb:
         e6:0e:2b:59:f5:11:1a:f9:82:9d:28:0a:35:73:3c:77:87:a0:
         be:5e:15:a3:f2:ff:0d:7b:ff:cd:5a:e4:00:45:ae:c7:74:4f:
         56:f8:b9:9d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jul 21 18:04:15 2025 by rpki-client