Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f15d26f-8f71-43a3-80b0-ce2c01880d7b.roa
File:                     1f15d26f-8f71-43a3-80b0-ce2c01880d7b.roa (raw, json)
Hash identifier:          KxyZtC86eSx4OpwZhjXJDfuGRiuu/VXcw4QCb3RQacA=
Subject key identifier:   61:7C:24:6E:02:FC:9D:AA:87:38:0B:9F:A1:55:FE:EC:8D:D5:05:7E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0697FB10C390F65069187456A010C903BAEE5601
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f15d26f-8f71-43a3-80b0-ce2c01880d7b.roa
Signing time:             Fri 29 Aug 2025 00:41:23 +0000
ROA not before:           Fri 29 Aug 2025 00:41:23 +0000
ROA not after:            Fri 03 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f00:7440::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:97:fb:10:c3:90:f6:50:69:18:74:56:a0:10:c9:03:ba:ee:56:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 29 00:41:23 2025 GMT
            Not After : Oct  3 23:59:59 2025 GMT
        Subject: serialNumber=c14b79679da0d15cafb85f7bee79b75f7a81b4fcad56518166f11705eb9d108d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d6:d3:1f:0e:38:38:ae:45:2f:03:72:4c:6c:
                    46:64:f3:bb:6a:73:9f:29:ed:4c:ba:cf:7f:03:1c:
                    dd:90:ad:95:15:05:4b:d5:12:2d:4e:5c:13:ec:f4:
                    6f:df:92:21:53:5b:1b:11:bd:2b:d9:0a:0e:d3:a7:
                    b7:03:89:2d:fb:90:d8:14:59:54:b5:28:ed:f7:43:
                    14:23:40:14:22:fb:31:05:80:2a:02:f9:5d:67:92:
                    50:92:3e:49:f4:58:22:af:5a:f9:b1:27:1e:51:75:
                    0e:b2:ed:72:72:dc:dd:84:37:c3:98:75:5c:c8:c2:
                    84:34:b0:3f:ad:10:a8:f6:f7:7b:d1:9d:50:53:92:
                    91:3d:46:29:70:dc:26:51:17:ba:eb:33:87:a9:a0:
                    89:1c:6f:cd:87:b7:2c:90:09:06:01:3a:20:df:b2:
                    f4:d8:9e:c8:f6:c6:f8:74:30:4e:76:17:42:1e:8d:
                    14:b1:44:03:aa:67:d8:6a:89:d1:37:1e:47:f3:1d:
                    22:22:7d:2a:c9:51:83:8f:cb:6e:b3:1e:6f:76:ff:
                    97:f6:1a:3d:69:38:9e:26:12:3b:b0:9e:e0:d6:2c:
                    32:e1:d8:39:1d:bf:af:ea:9f:fb:60:3d:4f:c3:79:
                    83:61:8f:54:ee:ac:da:cf:38:de:af:d6:cd:6c:02:
                    75:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:7C:24:6E:02:FC:9D:AA:87:38:0B:9F:A1:55:FE:EC:8D:D5:05:7E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f15d26f-8f71-43a3-80b0-ce2c01880d7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f00:7440::/48

    Signature Algorithm: sha256WithRSAEncryption
         d6:67:74:41:ec:af:5f:62:26:de:8b:25:37:bc:25:ae:ba:3c:
         6d:9e:c4:cc:22:19:c7:f9:ea:21:ef:bb:5c:3c:d6:c3:91:f9:
         e3:33:89:b7:10:32:0b:55:c5:64:c7:66:d7:c0:21:05:30:2e:
         45:fd:d0:cd:59:fe:bb:5c:45:c4:b9:ff:35:72:d7:f5:ca:df:
         f9:02:2b:ed:cf:7b:15:6b:40:6a:c0:97:bd:5b:93:fd:3c:05:
         22:5a:86:3a:e3:45:ba:a8:e1:48:90:1a:8f:ed:57:53:f9:97:
         fc:9a:d6:46:0c:ef:7f:03:5e:85:13:39:da:0c:e6:f8:7b:48:
         cb:9d:fe:5b:3e:08:4e:2b:55:1d:85:90:89:e6:16:b0:02:fe:
         b4:2d:9a:5a:e8:ad:21:ff:da:38:f9:b3:14:7f:04:84:7e:b3:
         0e:74:98:56:e8:8f:e2:70:99:e1:ab:8a:71:f2:8a:92:5e:f7:
         c9:5f:66:09:5c:cf:2b:25:d0:c1:ed:a0:c5:3c:db:21:db:ac:
         11:84:19:96:56:f4:d9:da:6e:10:98:7b:12:05:ed:3b:96:76:
         c6:2b:a3:f6:04:78:b3:1d:ad:2f:5a:53:10:81:1a:b4:9d:b3:
         c6:c0:8c:bb:b1:ea:32:4c:e2:5d:72:ef:1c:b6:7c:25:bc:61:
         cc:cf:66:3a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Sep 6 14:18:42 2025 by rpki-client