Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c02819a0-8325-4e9d-9883-bcb4e7cb7da5.roa
File:                     c02819a0-8325-4e9d-9883-bcb4e7cb7da5.roa (raw, json)
Hash identifier:          bSf0nD/WsynzQeJ1sM+EJtnTpMnslgV9j4AnIxcopHo=
Subject key identifier:   62:D9:A6:32:5A:F1:82:27:BB:B8:1F:A7:01:82:6F:A5:9A:93:0A:6F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       77ADA3B17310F95F28B757C8E6800D1AD79101F5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c02819a0-8325-4e9d-9883-bcb4e7cb7da5.roa
Signing time:             Tue 08 Jul 2025 16:11:15 +0000
ROA not before:           Tue 08 Jul 2025 16:11:15 +0000
ROA not after:            Tue 12 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f69:e080::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:ad:a3:b1:73:10:f9:5f:28:b7:57:c8:e6:80:0d:1a:d7:91:01:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul  8 16:11:15 2025 GMT
            Not After : Aug 12 23:59:59 2025 GMT
        Subject: serialNumber=0e76deb11293cfb410a32cc28b6e09d97e3b7722f3b637522d0c348bc40831f3, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f9:f1:62:11:0a:3c:8e:2c:31:88:b7:4c:44:
                    3e:ce:40:5f:0b:59:3e:1d:e8:2e:12:14:64:c2:14:
                    90:ae:0d:b8:ee:27:24:13:09:5c:f8:98:ca:47:3c:
                    28:f1:53:13:23:2e:6c:ed:7e:95:cc:07:6d:35:e7:
                    84:66:9a:8c:42:27:03:68:86:91:39:5c:eb:bb:00:
                    4b:d5:66:37:4f:78:68:31:b1:6e:ce:b0:65:5e:df:
                    04:4f:20:e5:ad:cf:5e:f7:95:b3:3d:39:11:03:ca:
                    d7:1e:da:b5:93:8c:47:f0:ed:ac:61:26:77:33:22:
                    0c:fd:ff:db:4c:3d:6e:4e:5b:ab:e9:28:65:ad:ec:
                    18:63:13:b2:74:df:d8:5e:6c:65:0f:c6:06:d2:61:
                    ec:51:f6:22:41:f6:84:f2:bb:a8:d4:5b:b9:84:02:
                    86:5d:45:1d:5e:de:8d:48:77:c1:7c:f8:b8:fe:ee:
                    74:3a:79:b2:68:00:46:fa:b3:e3:b4:6c:a0:9d:9b:
                    68:f7:68:37:97:52:6f:9d:f3:df:89:14:59:8a:de:
                    4a:4a:d2:80:39:0e:4a:4b:6c:ea:69:1c:cf:29:ff:
                    e7:f7:00:7d:97:7e:09:cb:4b:56:28:ba:ff:e2:09:
                    2d:a8:b8:49:5b:cb:16:28:93:7b:df:56:32:1a:27:
                    ed:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:D9:A6:32:5A:F1:82:27:BB:B8:1F:A7:01:82:6F:A5:9A:93:0A:6F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c02819a0-8325-4e9d-9883-bcb4e7cb7da5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f69:e080::/46

    Signature Algorithm: sha256WithRSAEncryption
         d0:c5:f7:32:31:46:ff:b2:6b:6b:59:1c:1d:56:fb:29:c5:32:
         92:bc:78:5a:d2:18:81:e0:bf:b3:c2:73:56:a4:a7:2f:c9:97:
         21:31:c4:42:51:79:42:cc:c5:fa:42:30:3e:3c:b2:a4:84:12:
         42:c5:a6:1b:36:76:74:01:eb:3e:28:3f:4d:7a:d8:d0:70:1d:
         0d:79:3b:5f:08:2b:b8:37:1f:88:cf:13:33:52:26:7d:a2:83:
         d1:e0:5c:d7:cb:05:f2:73:e6:a2:77:2f:6a:b8:69:74:12:27:
         cf:70:55:ab:20:c8:27:86:58:46:85:bb:91:b9:74:48:75:99:
         7e:29:27:4a:c5:44:c8:6e:29:96:36:b0:f9:94:f9:61:4c:ae:
         b1:b1:af:47:93:81:12:d1:4c:bd:f5:12:ba:d1:84:44:7e:14:
         e0:fd:37:cd:f5:73:7a:9f:0a:9a:a1:1f:5a:31:28:82:e4:9e:
         ef:8a:dc:9e:09:00:66:6a:eb:66:62:4e:ce:cd:82:de:4f:d2:
         cd:e3:c1:f2:55:89:68:e0:52:89:3a:9e:29:3b:12:94:c6:bc:
         24:dc:f8:9d:cd:9a:aa:41:c4:ff:a1:02:4a:b2:20:12:92:a9:
         e5:1f:8c:4b:6b:0d:3b:e8:1c:29:4b:da:73:7e:9c:4d:05:15:
         a7:4c:29:56
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jul 21 18:10:49 2025 by rpki-client