Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22478e61-69b1-43c8-9d97-aedb4afd8d04.roa
File:                     22478e61-69b1-43c8-9d97-aedb4afd8d04.roa (raw, json)
Hash identifier:          lCpha/LiSwwU4PTaPNTV8Q41FCJm+x/B7/immLsg+As=
Subject key identifier:   40:97:92:AC:0B:B6:71:5F:C8:C7:C2:F6:A2:46:B0:21:F2:04:0E:DD
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0203857650BB152AAD706F8F00E884FF0A26D2D4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22478e61-69b1-43c8-9d97-aedb4afd8d04.roa
Signing time:             Fri 29 Aug 2025 15:40:24 +0000
ROA not before:           Fri 29 Aug 2025 15:40:24 +0000
ROA not after:            Fri 03 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f11:800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:03:85:76:50:bb:15:2a:ad:70:6f:8f:00:e8:84:ff:0a:26:d2:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 29 15:40:24 2025 GMT
            Not After : Oct  3 23:59:59 2025 GMT
        Subject: serialNumber=66a04cb825b45bd85aab8f58a07f1e9c0534e5c2a31e2faec2311b7f25fc08c6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c1:01:d2:3e:58:a8:c0:4f:19:5b:a7:51:be:
                    b3:5e:9c:d0:61:bd:36:45:19:24:34:df:5f:dd:3b:
                    7b:90:ae:ae:23:cd:8d:75:e4:21:de:5d:2e:01:73:
                    63:23:1a:72:38:24:47:cc:ac:d4:af:d9:eb:1e:b8:
                    96:74:82:16:90:f8:a8:5a:8d:02:cf:ce:e2:cb:ba:
                    3f:92:26:84:cf:34:87:bb:b5:ed:6f:c7:71:b9:75:
                    00:54:ce:00:59:45:d5:2f:37:fc:53:04:39:73:45:
                    8f:8c:c7:0a:47:87:2b:56:24:6f:ff:c0:e1:66:6e:
                    d6:03:be:95:b2:95:14:bf:a7:a0:c6:d6:05:20:21:
                    f8:2b:8a:39:23:36:f4:ea:da:b2:5d:a3:53:b3:e3:
                    88:47:f8:0c:09:55:7e:fc:a7:98:69:b9:d0:db:c9:
                    10:62:37:c1:f6:10:c0:41:b8:b5:18:7e:8e:d3:20:
                    27:31:af:d0:42:f4:ee:4d:1c:d7:48:2e:b0:0b:d4:
                    dd:0d:c3:f3:b2:26:6d:c7:0b:3d:e6:0c:db:da:a6:
                    e3:f7:51:ea:55:b0:46:2d:5a:23:65:15:01:a0:79:
                    a2:2a:5f:b9:17:37:0f:f8:cf:1b:1c:da:2a:ae:16:
                    b7:81:f3:3e:3e:70:75:ae:28:e5:3b:8b:f8:2e:a6:
                    f6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:97:92:AC:0B:B6:71:5F:C8:C7:C2:F6:A2:46:B0:21:F2:04:0E:DD
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22478e61-69b1-43c8-9d97-aedb4afd8d04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f11:800::/38

    Signature Algorithm: sha256WithRSAEncryption
         5d:8e:a5:6b:fd:6d:da:a9:0b:05:4d:08:57:02:73:39:50:4e:
         7b:29:21:5e:61:89:60:49:ac:f8:38:8d:62:f6:b2:41:5f:1c:
         f2:e1:98:51:e7:88:0b:75:a5:e6:13:fc:3d:94:d1:85:66:cf:
         cb:0c:17:65:d6:66:17:bd:ed:cd:9a:d9:f8:da:9d:2d:7f:77:
         19:65:2a:57:1b:1e:71:8b:b9:77:1e:70:82:85:80:f0:7f:67:
         ac:5e:3b:d6:fb:ae:3c:11:42:cb:e3:bc:c2:ad:68:ba:10:03:
         12:bf:30:17:85:c5:52:93:d8:6e:b1:dc:0b:9d:7b:6d:72:e9:
         b1:7d:14:78:a1:5f:d0:b8:5d:af:52:0e:61:f4:a8:4c:83:7c:
         fc:3b:6b:4f:d3:f5:c0:95:a8:58:ba:ee:9f:e0:e6:82:8c:59:
         24:04:53:a3:ef:c1:14:32:9a:81:d8:d5:b3:72:8e:d8:77:16:
         bf:20:35:b9:1b:d9:17:bf:e2:6e:36:a8:3c:74:55:75:78:11:
         b1:fb:32:51:a8:b2:b5:18:54:11:f7:e8:20:b2:c9:7b:68:4e:
         b2:81:3c:78:44:27:b3:6e:b5:59:7e:ba:13:f1:89:42:22:b4:
         a5:2e:7b:f2:7d:91:d1:af:0b:2b:a8:9f:83:74:66:d4:14:63:
         58:12:1b:3f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Sep 6 14:19:38 2025 by rpki-client