Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e88e42d9-ad29-4555-92e9-c4375663ec2e.roa
File:                     e88e42d9-ad29-4555-92e9-c4375663ec2e.roa (raw, json)
Hash identifier:          C5pgGqVN3KT+4EfKqh40QCZH3GZ900uhNVyD1K1CagI=
Subject key identifier:   75:EC:7C:55:AE:36:C2:46:35:C5:7D:4B:9D:5E:1F:ED:15:54:00:9F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       37087F44AE00EA4096665D7F4D88A252041F3231
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e88e42d9-ad29-4555-92e9-c4375663ec2e.roa
Signing time:             Fri 18 Jul 2025 00:11:09 +0000
ROA not before:           Fri 18 Jul 2025 00:11:09 +0000
ROA not after:            Fri 22 Aug 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        2600:1ff1:5000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:08:7f:44:ae:00:ea:40:96:66:5d:7f:4d:88:a2:52:04:1f:32:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 18 00:11:09 2025 GMT
            Not After : Aug 22 23:59:59 2025 GMT
        Subject: serialNumber=de75961d8eea5cce9671262191fe4a021edc449ff117fac53b0cbc27f94725c7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f0:01:b2:a9:1c:57:3b:e1:69:1f:c2:c9:23:
                    1e:97:e2:07:15:ac:4e:f8:af:a9:84:06:66:d6:7d:
                    c5:9d:31:a0:a8:ae:a1:e0:a7:99:3f:16:76:f8:7c:
                    ff:ea:9c:6e:c8:77:ac:4a:64:0b:ba:88:ff:1a:60:
                    30:e4:8f:62:8d:bd:e4:7f:6e:dd:d8:5d:10:4e:a2:
                    9c:ac:7d:a0:70:89:59:94:fa:51:12:e7:0a:a3:40:
                    2b:df:9f:9a:f0:77:33:a0:a5:d4:0f:c9:68:d7:7b:
                    01:8b:b7:c3:88:a5:19:34:97:b6:91:f5:ed:00:00:
                    71:64:21:cb:14:a3:19:2c:b4:b7:cd:d1:84:33:e3:
                    4f:ba:ab:76:d6:1a:fc:11:17:99:27:02:d7:0f:81:
                    c6:a1:78:47:73:88:a7:eb:f7:ca:91:60:f3:76:05:
                    59:c0:e3:eb:eb:2d:bb:bf:35:94:b4:10:87:95:c8:
                    0f:fd:b5:22:fc:24:e5:5f:52:cd:db:76:3e:43:7f:
                    8f:a0:ca:98:31:da:97:5f:fd:45:aa:82:50:de:9d:
                    f7:06:d4:99:64:bd:84:1c:3a:5a:ce:6b:2d:87:c5:
                    06:b2:05:0d:15:43:78:99:2b:a8:d9:9f:b2:06:de:
                    1e:73:c7:20:cd:fc:8b:10:b8:b5:9e:93:9f:47:88:
                    47:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:EC:7C:55:AE:36:C2:46:35:C5:7D:4B:9D:5E:1F:ED:15:54:00:9F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e88e42d9-ad29-4555-92e9-c4375663ec2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff1:5000::/40

    Signature Algorithm: sha256WithRSAEncryption
         d4:7b:bb:da:b8:b4:88:01:d7:90:96:ca:bc:98:af:28:97:1f:
         d8:5a:91:ca:8c:18:15:65:e2:af:5b:b7:44:81:a1:70:aa:14:
         3f:dc:87:9f:17:61:4b:d5:40:a7:cb:9a:6b:5d:50:09:f8:ea:
         be:ae:15:42:cf:5a:a6:6a:ee:0c:49:2e:b7:a8:4a:e0:8d:2c:
         0a:ef:2d:e8:86:5f:5f:ab:b7:08:4c:ba:df:0d:52:7c:07:da:
         cc:3d:45:3c:0c:1b:22:9b:2b:44:b6:20:65:61:5c:48:8e:77:
         69:65:7c:bd:58:19:5f:cd:ec:dc:8d:3b:eb:e9:f3:2d:1f:12:
         1f:b6:7d:f1:e8:b7:7e:06:66:81:0a:fc:ad:61:16:79:54:2e:
         1d:05:f8:ea:6a:e3:7f:3b:26:7d:6b:1a:b0:8f:87:c8:55:77:
         0e:bf:15:09:3f:bf:78:38:03:70:93:d4:a6:e2:48:f9:86:18:
         07:66:d9:b5:87:40:85:6a:e8:eb:5e:86:33:f3:57:02:40:d4:
         ab:fe:3f:64:82:a8:18:2f:6f:71:4a:c6:08:25:b4:47:48:91:
         40:8b:62:69:17:d5:c7:b6:68:39:01:26:4f:ca:af:20:4d:2c:
         32:d5:e4:9f:09:d1:f9:3d:50:6c:e7:a6:e6:66:87:c0:b1:4a:
         b0:ac:c9:e7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jul 21 18:12:03 2025 by rpki-client