Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8f9293e-37bd-4349-9471-6d924ee7e8d7.roa
File:                     c8f9293e-37bd-4349-9471-6d924ee7e8d7.roa (raw, json)
Hash identifier:          ZxJ9eGWiAXf7hHrzHXOCqUfde+CUKk4LEclbTi+/eCw=
Subject key identifier:   74:D0:8A:0D:A5:5D:76:BA:C0:0B:A7:8F:01:00:45:C6:6D:6A:A4:B1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5E7B75F13AB7ECB8CBD14892E7843614C8244075
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8f9293e-37bd-4349-9471-6d924ee7e8d7.roa
Signing time:             Tue 08 Jul 2025 16:00:19 +0000
ROA not before:           Tue 08 Jul 2025 16:00:19 +0000
ROA not after:            Tue 12 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f61:7400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:7b:75:f1:3a:b7:ec:b8:cb:d1:48:92:e7:84:36:14:c8:24:40:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul  8 16:00:19 2025 GMT
            Not After : Aug 12 23:59:59 2025 GMT
        Subject: serialNumber=12a2628b3347bbedbf88fc24ae11e2c054fc249f5c977d48d94b26e4cb19efe6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:da:19:3c:fb:6b:c0:1c:20:6f:9c:28:78:fe:
                    a8:65:3e:70:3f:e0:98:84:fa:ba:32:48:af:44:26:
                    ed:02:92:07:9f:9f:d4:d3:c7:8f:30:af:2a:ac:60:
                    25:9c:83:d7:39:6a:f8:6a:85:3e:99:55:9c:65:9f:
                    d3:5d:60:4c:9e:db:e0:85:60:b6:54:d3:81:24:ce:
                    e0:88:ca:53:15:e6:12:8e:c4:5d:e0:9d:5f:6c:7a:
                    95:5a:ab:f9:b6:f9:45:ea:df:b3:b2:b2:70:34:fb:
                    3c:71:e5:be:d8:ef:d8:cc:c4:89:9b:9a:77:47:e8:
                    0e:7f:97:0a:e4:8d:9f:60:9f:32:42:a8:cf:1b:87:
                    1e:8c:68:0a:ae:22:2e:7a:d5:be:1b:4e:6a:3e:62:
                    ea:e5:75:a6:71:13:a1:aa:91:49:c9:7e:08:66:4b:
                    5b:f2:4f:ae:37:8f:fe:f9:35:72:4a:aa:88:74:96:
                    c6:7e:2f:1f:4d:65:52:29:f7:24:a9:b2:e9:30:b7:
                    5f:c7:73:e1:ec:80:f8:32:a1:20:c3:a3:13:ab:48:
                    f1:58:c2:3b:32:8c:94:33:c5:69:41:4e:41:90:71:
                    75:a4:06:a0:ce:04:48:9e:80:83:62:3f:e3:9c:56:
                    fb:62:c0:2e:1a:6f:1d:38:df:a7:e5:f2:8f:83:b5:
                    2d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:D0:8A:0D:A5:5D:76:BA:C0:0B:A7:8F:01:00:45:C6:6D:6A:A4:B1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8f9293e-37bd-4349-9471-6d924ee7e8d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f61:7400::/40

    Signature Algorithm: sha256WithRSAEncryption
         d2:2f:d3:7d:dd:f9:27:ee:45:aa:e2:e5:e7:70:99:dc:ee:7b:
         56:ec:78:36:a7:53:d2:c3:95:81:35:e7:d3:26:c4:bb:16:d0:
         e2:12:a2:c4:33:42:fa:d8:d7:85:f4:c5:31:b8:59:62:48:39:
         52:f5:37:03:6c:67:df:0a:a2:24:84:8c:25:cf:14:82:89:b7:
         e0:4a:f5:93:39:46:17:ee:f7:11:f5:71:ef:28:9b:60:00:c7:
         a8:31:ca:61:dd:d3:c1:84:68:ce:b9:a7:76:78:73:3d:93:81:
         eb:85:d1:bc:2c:11:e2:f0:34:68:b0:61:4f:4c:60:6f:f2:70:
         90:30:6a:c1:8e:d6:d0:60:06:d8:14:9a:50:ef:e7:f8:39:0e:
         04:59:44:8b:be:a7:85:98:e7:8d:94:27:6e:60:28:9b:97:72:
         7c:5d:c1:25:22:0f:2c:58:70:83:ad:eb:6d:61:f4:f6:fb:3f:
         8b:48:31:6b:62:8d:a4:8c:7e:6e:41:d5:93:5e:04:eb:d6:53:
         e6:dd:26:10:82:cd:7b:02:41:34:9b:fa:28:70:7e:04:db:a6:
         11:b7:c0:10:54:6d:57:94:c1:bd:17:ec:46:fc:73:ff:94:05:
         88:bf:ed:e3:99:f2:5f:25:31:9c:e7:91:d0:29:a1:c1:14:f3:
         ef:af:ed:2b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jul 23 02:11:09 2025 by rpki-client