Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0aed058e-8a89-4a3a-98d6-a76022818bde.roa
File:                     0aed058e-8a89-4a3a-98d6-a76022818bde.roa (raw, json)
Hash identifier:          YpLGOQ8ia7hikQwjLq58sbuKmGH2FGQ5i+TT7ea3pZU=
Subject key identifier:   47:03:B3:D4:79:0B:B0:CC:16:A3:25:6C:8A:26:DF:99:03:78:1B:B1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       17F68DC86F8C42D279B3CFA3B92A4ECFBCD2506F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0aed058e-8a89-4a3a-98d6-a76022818bde.roa
Signing time:             Mon 19 May 2025 18:01:05 +0000
ROA not before:           Mon 19 May 2025 18:01:05 +0000
ROA not after:            Mon 23 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f17:4c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:f6:8d:c8:6f:8c:42:d2:79:b3:cf:a3:b9:2a:4e:cf:bc:d2:50:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 19 18:01:05 2025 GMT
            Not After : Jun 23 23:59:59 2025 GMT
        Subject: serialNumber=9625a0584cc7798383bd66f3e3d7290ec3e9e607d0981d0fa173fb003a583c80, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5f:58:5a:4a:ed:6c:61:42:8e:9c:6f:56:45:
                    03:6f:13:4a:42:1f:7a:ce:53:28:53:28:1e:67:8f:
                    1a:dd:66:9d:39:34:27:c1:87:87:6c:9d:71:e8:f7:
                    28:46:54:e3:69:87:d7:94:17:c4:97:83:57:24:53:
                    79:00:5d:94:4d:72:dc:2b:64:61:d0:17:6f:c7:87:
                    30:96:90:c0:a2:c2:d6:bc:ac:f1:10:11:cc:9c:32:
                    47:8c:40:51:55:8f:4d:95:c4:c9:ea:31:ae:4c:49:
                    f8:07:5c:b5:e7:50:44:93:bf:4f:ae:9e:e6:be:48:
                    5b:7e:40:17:fd:49:7d:1b:59:ff:98:9c:53:de:82:
                    f4:c5:90:5e:07:1c:2c:21:3a:a5:c2:c8:1b:a1:d6:
                    94:03:80:c2:0d:ba:e3:e3:26:ce:11:f7:26:33:f3:
                    04:b7:fc:7d:8b:5f:34:a3:49:8e:97:1f:f6:78:79:
                    3a:f0:74:27:6a:99:03:8e:fa:37:9c:44:2a:68:52:
                    fc:6e:6b:0f:b5:39:d4:be:d9:58:2c:a0:8c:90:58:
                    71:b0:60:e0:37:7a:4c:b7:70:f2:c9:01:5b:17:32:
                    25:4e:c5:93:f4:da:cc:64:92:69:eb:46:e0:e2:7c:
                    c9:e7:9b:39:60:07:2a:d7:f1:ea:d7:49:d4:5d:7f:
                    f7:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:03:B3:D4:79:0B:B0:CC:16:A3:25:6C:8A:26:DF:99:03:78:1B:B1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0aed058e-8a89-4a3a-98d6-a76022818bde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f17:4c00::/38

    Signature Algorithm: sha256WithRSAEncryption
         cc:26:8d:13:15:33:15:70:f0:48:3e:85:0f:5b:4c:c8:30:3a:
         67:81:c5:b4:88:d9:c4:54:34:45:10:9c:7e:1b:1e:80:5d:95:
         44:c5:ae:6e:1e:d9:23:ab:fc:34:8b:d7:e4:3c:2d:24:db:e5:
         57:36:ea:53:1a:71:09:27:be:d8:43:cd:08:cf:48:20:94:55:
         0b:38:8f:77:93:f2:ef:15:8a:1d:61:15:76:ba:7c:60:17:21:
         f4:dd:f7:cd:f9:0b:4d:18:bf:8d:0e:a0:8b:59:75:7e:7b:78:
         5e:15:78:92:0e:1d:e0:a5:4a:9a:d4:84:d3:dc:4c:28:1f:6b:
         33:5e:55:8f:22:5f:57:79:ba:ef:b5:61:32:cb:c7:8e:c5:c3:
         a4:8d:22:09:ab:20:d0:1c:80:26:91:0b:2a:d7:dc:61:87:4b:
         8a:66:a2:3a:54:35:33:eb:fe:f9:f8:85:02:6f:0f:a8:2f:90:
         d8:ed:7e:0d:86:35:39:e3:6e:5b:92:a5:06:ab:14:18:a6:77:
         71:5a:80:7e:22:1f:8f:20:04:59:a1:51:ab:67:01:bc:f8:0f:
         a2:94:09:96:78:f4:8b:bc:31:ef:69:f5:ed:cf:fd:a8:3d:7f:
         6f:f7:60:1f:77:2e:b9:c9:fa:f2:15:15:5a:8f:d5:43:fc:c3:
         ae:a7:e7:0e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 1 05:01:25 2025 by rpki-client