Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f15d26f-8f71-43a3-80b0-ce2c01880d7b.roa
File:                     1f15d26f-8f71-43a3-80b0-ce2c01880d7b.roa (raw, json)
Hash identifier:          VHBSAKStVWOh59lEm4SQxNWRsnrYZ6/o089TLSf36vk=
Subject key identifier:   0A:B8:9F:08:7D:45:61:BF:40:3C:1B:A1:F9:B2:D8:7F:64:B3:51:FF
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       613726D078E388FB3774E24EB8B404C2B4451449
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f15d26f-8f71-43a3-80b0-ce2c01880d7b.roa
Signing time:             Mon 19 May 2025 15:21:15 +0000
ROA not before:           Mon 19 May 2025 15:21:15 +0000
ROA not after:            Mon 23 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f00:7440::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:37:26:d0:78:e3:88:fb:37:74:e2:4e:b8:b4:04:c2:b4:45:14:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 19 15:21:15 2025 GMT
            Not After : Jun 23 23:59:59 2025 GMT
        Subject: serialNumber=8ea2b3d0ea53cdd73e8da6ee9ee4e304d70de90b28d83a14303bc0150d4bba20, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1b:2b:8a:51:d2:67:5f:1b:74:f6:0d:13:4d:
                    43:8b:c1:f7:00:43:fb:2c:f3:c3:9d:15:93:b4:da:
                    1d:89:83:78:00:a2:7a:9d:2e:78:7b:ef:77:19:90:
                    71:7f:f0:ed:39:a1:67:b4:89:e8:c4:96:3e:ee:98:
                    8f:60:86:15:53:9c:eb:84:22:56:92:9c:74:0f:d4:
                    60:3c:c8:87:8c:00:5e:ab:66:18:7e:cf:fa:e5:58:
                    65:17:af:c2:89:3d:88:49:84:35:fb:bf:12:a5:91:
                    e9:38:ca:63:3e:63:af:75:fa:0b:1d:04:25:dc:01:
                    72:51:50:bf:e8:76:1e:9e:3c:e4:b6:2b:b4:08:04:
                    e2:df:09:09:75:e8:21:ea:4b:db:f1:67:43:38:29:
                    e6:45:7c:ce:ee:a7:e5:fb:49:b6:07:ae:99:d7:15:
                    b1:dc:75:5c:81:b2:f5:33:b6:18:3d:e1:46:5c:43:
                    a4:67:1a:cc:b5:68:54:8a:69:89:9e:3f:27:fb:70:
                    a4:40:ff:f3:a8:75:73:87:79:14:c0:eb:99:b1:b8:
                    1a:35:52:0c:f0:fd:67:e7:cd:b4:c3:99:c5:8f:c3:
                    20:8e:c3:15:b6:dd:02:a4:a3:94:da:99:cc:d1:e7:
                    32:2d:a3:90:9d:3d:c1:27:66:94:cd:72:3f:06:c8:
                    6e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:B8:9F:08:7D:45:61:BF:40:3C:1B:A1:F9:B2:D8:7F:64:B3:51:FF
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f15d26f-8f71-43a3-80b0-ce2c01880d7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f00:7440::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:1d:21:54:60:79:0e:00:d3:d0:98:30:9c:28:4e:c7:b6:9e:
         8d:20:ce:3e:6f:46:76:1a:72:b1:1d:c7:5a:bc:41:bf:95:2b:
         e1:7e:e9:55:2f:b8:d4:60:a1:dd:a2:6e:36:9d:4b:aa:cc:ed:
         4f:7d:b0:dc:73:c2:94:a1:0a:b1:fc:aa:8b:b6:dc:d7:8c:01:
         10:77:fd:e5:0d:fd:0e:b6:cd:1d:c9:68:e1:cf:23:d0:48:1c:
         2d:88:a7:5c:73:58:23:c5:3b:d9:09:fa:f9:b6:24:06:b1:0b:
         ee:cc:1d:4f:d2:96:5c:f2:65:5c:6c:83:cc:82:2c:9b:9d:3f:
         39:43:1e:66:ed:d2:91:16:7b:de:77:55:5d:d4:26:4b:32:ed:
         5e:fe:41:71:0d:14:81:a6:d0:39:ab:19:e1:1a:e7:58:07:b6:
         5e:ae:0a:95:08:ed:07:63:5a:80:8f:88:70:7d:f3:8a:3e:77:
         c6:7c:8f:7d:57:2f:79:cd:ad:46:94:08:2d:5f:40:c7:09:cb:
         26:d4:24:8b:fd:0c:dd:c9:6c:88:4a:04:86:e9:44:e7:53:81:
         81:5d:00:03:ec:66:84:78:d2:da:0f:e8:dc:f2:5d:70:a3:4a:
         25:36:08:e8:b3:c3:ab:8e:b4:57:ee:50:1d:b6:98:fe:38:9f:
         83:a3:6d:cc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 1 04:32:49 2025 by rpki-client