Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/a86c8ffa-34ab-4a01-8f63-86207fe44159.roa
File:                     a86c8ffa-34ab-4a01-8f63-86207fe44159.roa (raw, json)
Hash identifier:          ZoRmLdp9C04ZpIaUKQJMrL+HQ8E+uHSi8zSb+MCmaJQ=
Subject key identifier:   1F:04:9D:2A:00:8B:BC:55:F9:DD:D3:4D:1F:3A:40:5A:D2:C0:68:E8
Certificate issuer:       /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
Certificate serial:       7BC28DCF246C8D6ED92A206B3A1671CEB1486F36
Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/a86c8ffa-34ab-4a01-8f63-86207fe44159.roa
Signing time:             Tue 01 Jul 2025 00:20:26 +0000
ROA not before:           Tue 01 Jul 2025 00:20:26 +0000
ROA not after:            Tue 05 Aug 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2606:f40::/39 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:c2:8d:cf:24:6c:8d:6e:d9:2a:20:6b:3a:16:71:ce:b1:48:6f:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
        Validity
            Not Before: Jul  1 00:20:26 2025 GMT
            Not After : Aug  5 23:59:59 2025 GMT
        Subject: serialNumber=8a91017aa1993c055527e18254a2312b0ad3eafeae58bdc720cfc72c4a858713, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d8:51:f4:8b:26:c1:bf:05:86:36:89:7f:63:
                    03:f9:28:33:16:7b:a8:ba:0a:3f:0e:26:29:b7:44:
                    13:a3:9c:a9:4b:b6:06:74:ed:68:48:78:af:60:70:
                    27:65:c5:dc:5f:bf:9d:9f:0e:ec:cd:5d:d3:a5:8d:
                    92:2b:ac:6a:db:59:9a:fe:fb:a9:eb:8a:f7:20:0c:
                    84:68:d3:6d:9d:8a:62:93:a6:3b:82:f4:bf:be:a3:
                    ad:dd:10:3c:69:cd:af:05:14:69:82:f8:91:c2:70:
                    a9:6b:fc:e8:06:6d:4b:ff:3c:dd:08:84:f6:d0:49:
                    cd:5b:a4:8d:0c:e9:eb:87:20:bb:1b:43:e1:d6:e1:
                    85:8f:53:ab:90:c8:0d:0a:11:4c:17:28:ef:82:27:
                    45:c2:1b:fa:1a:d3:f3:7e:9d:26:1e:cd:ca:20:2d:
                    e7:be:be:77:9d:a2:84:81:72:ae:d7:4f:cf:2a:07:
                    61:3c:f8:b8:20:d6:bd:2f:0b:74:69:f5:eb:f4:87:
                    91:ec:75:ab:a0:f1:42:5e:02:65:5d:58:6e:68:31:
                    ea:f2:fb:ed:77:61:7e:ac:1f:74:28:f6:6f:47:c9:
                    ae:53:74:ec:28:39:5e:7c:35:f3:9a:bc:35:b7:1e:
                    a5:2e:eb:83:bc:ae:dc:1d:10:57:b3:fb:15:fe:af:
                    d0:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:04:9D:2A:00:8B:BC:55:F9:DD:D3:4D:1F:3A:40:5A:D2:C0:68:E8
            X509v3 Authority Key Identifier:
                keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/a86c8ffa-34ab-4a01-8f63-86207fe44159.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f40::/39

    Signature Algorithm: sha256WithRSAEncryption
         0e:b5:0e:bb:9f:b5:7f:e7:e0:ef:2c:e1:0a:cc:28:59:5c:fa:
         a3:eb:47:b4:20:bb:37:74:da:1c:32:63:ca:21:a5:a9:97:19:
         11:07:8d:d5:b6:cb:b2:cf:e7:4b:1c:99:d1:fa:b9:0a:4e:ff:
         79:1d:4b:d8:4f:a3:16:be:18:a7:ca:fd:c0:bf:4e:f0:96:bf:
         d2:17:8d:8a:20:eb:5a:28:c8:0e:77:77:31:c2:1b:db:20:1b:
         0f:af:e6:69:3a:40:ce:0a:97:29:ba:6f:e0:5c:38:0f:f5:87:
         66:9c:f6:86:6f:2a:3b:1a:ca:fe:36:c1:f4:1c:00:07:5c:34:
         6a:0d:2d:38:08:b3:da:f4:ca:47:b2:6e:31:db:a4:94:59:9a:
         45:c5:bf:cb:34:26:67:e4:16:ec:90:83:63:6f:48:b7:c3:c3:
         76:cc:52:02:e2:be:35:1e:83:5c:a4:41:cf:9d:a9:cf:3f:63:
         19:35:90:eb:10:2a:82:b8:72:74:ee:9e:ef:16:4c:62:c7:81:
         38:57:08:7c:ae:5a:97:cc:86:6d:c9:d2:08:f4:ec:b0:9e:5b:
         f4:58:67:18:49:06:75:ff:91:a7:06:86:1c:bd:a2:4d:dd:fc:
         1a:48:c4:75:be:fc:8d:f6:f5:f5:92:12:61:55:a1:89:8f:b7:
         f2:e9:e4:c2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jul 23 11:58:22 2025 by rpki-client