Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dbb6c5b9-2a52-43c9-bd53-21f2e6de0266.roa
File:                     dbb6c5b9-2a52-43c9-bd53-21f2e6de0266.roa (raw, json)
Hash identifier:          OmjqAs1AiwYvs8cHEMan7W9/wINp98Yihj9b9GwDt4k=
Subject key identifier:   A8:3F:F3:5A:BC:AF:9A:A0:F7:DC:D6:C3:67:CE:3E:81:E7:68:2C:8B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       734B6E800704FE04538C5655D1AD311E3C0BA616
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dbb6c5b9-2a52-43c9-bd53-21f2e6de0266.roa
Signing time:             Fri 18 Jul 2025 00:11:04 +0000
ROA not before:           Fri 18 Jul 2025 00:11:04 +0000
ROA not after:            Fri 22 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff8:e000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:4b:6e:80:07:04:fe:04:53:8c:56:55:d1:ad:31:1e:3c:0b:a6:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 18 00:11:04 2025 GMT
            Not After : Aug 22 23:59:59 2025 GMT
        Subject: serialNumber=513fdd9d95e831e9723a1a4dac96b808545d3dff49f8b0629256573ebab01408, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:22:77:e3:15:cb:ef:b6:4e:35:80:fe:16:db:
                    1f:fa:61:29:b7:63:26:3c:78:82:53:52:53:fb:60:
                    09:9f:26:69:76:ec:a7:ec:15:d5:5d:de:bb:e6:b9:
                    54:21:cb:2d:d0:1a:46:c2:1a:c9:45:d3:33:86:48:
                    6f:d6:a6:2e:6c:c1:a8:96:29:1e:f9:22:39:43:84:
                    39:43:05:83:b5:35:88:50:df:d0:77:c2:79:e9:17:
                    d8:ac:32:2d:27:0c:1f:f0:be:3a:0d:2e:56:3d:eb:
                    b9:64:20:d5:72:38:0a:4d:b5:98:fe:fa:2d:ed:46:
                    ba:d0:2b:e2:19:b4:1d:e2:a4:30:99:a7:10:5a:82:
                    e0:fc:bc:89:cf:bc:39:62:64:52:4c:ec:68:17:f2:
                    80:ab:81:0d:15:1b:3e:f1:e0:3b:38:7e:71:aa:d7:
                    d6:34:d7:3a:79:9d:d3:b6:cd:79:a0:33:34:84:68:
                    2f:cb:8c:89:30:0c:26:15:1b:f1:b3:44:45:db:2b:
                    42:f3:39:0e:e6:4e:ee:b5:ef:6d:2d:62:e4:e5:bf:
                    c9:13:e6:7f:d7:06:c4:f0:a3:f0:63:2f:10:1b:81:
                    40:2c:82:84:4a:32:ab:30:7a:f5:44:19:15:89:6d:
                    c9:3b:88:c0:34:60:e6:65:4e:52:ed:5f:69:22:ce:
                    ca:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:3F:F3:5A:BC:AF:9A:A0:F7:DC:D6:C3:67:CE:3E:81:E7:68:2C:8B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dbb6c5b9-2a52-43c9-bd53-21f2e6de0266.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff8:e000::/40

    Signature Algorithm: sha256WithRSAEncryption
         4d:f6:29:0a:cd:9e:a6:90:f1:bc:32:ce:80:7f:ee:8e:c6:f1:
         ce:f1:92:3d:70:d2:68:27:b6:a3:c9:c7:d0:c0:f3:94:f4:79:
         34:3a:5d:5e:15:e9:7e:d3:b7:e2:c9:86:5d:a3:94:25:30:14:
         e7:f1:6f:73:b2:ff:08:d8:04:76:5a:45:b0:9f:c0:0e:8e:4d:
         90:a0:45:15:6e:49:15:14:7b:f9:bf:94:92:88:4b:0d:0f:80:
         fc:8f:77:cd:04:f0:66:6e:ca:e1:0f:f8:cd:b0:d0:4c:8b:59:
         eb:a9:ee:3c:99:57:9a:29:ed:70:21:94:5a:8b:bd:e1:ba:70:
         af:11:9f:87:b7:45:94:93:ac:5c:32:bb:e8:54:5e:46:da:71:
         9e:96:09:8e:bb:27:b5:e0:e7:a4:b4:dd:bf:d0:6f:12:39:76:
         29:10:47:18:6e:ed:7b:be:b0:c6:be:e6:ec:00:f3:0a:d9:46:
         17:6a:cb:7c:17:2c:09:3d:a1:db:31:fb:5d:30:ae:9a:fc:81:
         43:fd:ce:59:5a:04:f1:48:16:21:cb:5a:dd:38:92:b3:f8:bd:
         b4:57:59:47:2c:7d:17:a1:1b:1d:a2:23:a6:48:6c:0d:c4:2b:
         aa:8c:69:80:04:d1:e3:5b:52:ae:61:0c:c5:5b:4f:0d:ba:b9:
         ef:47:2d:ef
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jul 22 04:17:55 2025 by rpki-client