Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3158624f-2713-4649-b6a7-25d17c953273.roa
File:                     3158624f-2713-4649-b6a7-25d17c953273.roa (raw, json)
Hash identifier:          3rvfQywWi/nVQHvL4UbOIfJf12TGmyDwoDlHNgs/axk=
Subject key identifier:   2E:EC:27:BC:DD:E4:AC:49:E9:55:F6:53:62:04:F2:6B:5D:8B:98:C4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0F782EA4CDBA5575157FA226B8C6C2D0E042680D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3158624f-2713-4649-b6a7-25d17c953273.roa
Signing time:             Sat 06 Sep 2025 00:20:28 +0000
ROA not before:           Sat 06 Sep 2025 00:20:28 +0000
ROA not after:            Sat 11 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f2b:8000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:78:2e:a4:cd:ba:55:75:15:7f:a2:26:b8:c6:c2:d0:e0:42:68:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep  6 00:20:28 2025 GMT
            Not After : Oct 11 23:59:59 2025 GMT
        Subject: serialNumber=f87ad693e181f3b8d92179bc31d63cf7dc4397b0d382d9d37893b96579ba3206, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:fc:35:9b:f0:33:09:fc:60:d8:bd:e7:88:33:
                    37:69:cb:b4:1e:f9:30:85:7a:96:d0:2a:d2:cf:9d:
                    80:b7:e8:7a:c0:9a:2a:87:1a:77:d4:b3:97:bc:cb:
                    53:8a:d3:9d:b9:e5:45:10:57:cd:1d:f5:82:b9:d5:
                    ee:ed:30:be:5b:16:bc:59:cc:37:02:21:a6:0b:0d:
                    fc:f0:8f:e0:04:39:1f:8c:56:38:32:ee:1e:22:f9:
                    bb:82:c9:cf:2e:49:5e:ad:28:84:67:58:75:4c:1a:
                    d5:76:6a:61:18:75:fd:0e:7f:41:0b:0b:a9:cf:b0:
                    c2:5d:ec:32:39:5c:d2:df:64:6b:87:2a:95:34:32:
                    87:ca:ef:2b:4c:5b:8e:f8:64:59:60:40:b5:e0:dc:
                    6b:41:81:51:e4:83:1e:a1:52:e6:99:f5:e8:e0:80:
                    23:eb:f1:23:97:ad:4f:f1:5d:b4:35:48:fb:0e:58:
                    34:c2:ea:93:74:9a:95:ec:09:77:79:2f:cf:7d:23:
                    19:94:23:e2:26:44:f7:7e:bc:e3:a4:44:47:03:e1:
                    05:33:df:2a:67:a3:47:31:21:10:f8:2b:f5:8c:ae:
                    21:43:d2:5f:07:b1:68:3f:09:01:d0:74:83:83:31:
                    96:9b:43:75:5c:cb:5f:9b:a3:dc:f2:11:a0:9a:fe:
                    61:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:EC:27:BC:DD:E4:AC:49:E9:55:F6:53:62:04:F2:6B:5D:8B:98:C4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3158624f-2713-4649-b6a7-25d17c953273.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f2b:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         a6:8e:55:35:6f:9b:6e:88:f6:c8:8c:32:c5:6f:61:c9:16:cf:
         d2:84:b5:11:e3:d5:82:33:9e:74:69:8d:9f:eb:b7:24:ae:ef:
         c0:9a:bd:82:fc:17:6a:6d:8a:59:be:7b:35:fa:cc:11:2a:1a:
         81:82:a4:6a:0b:98:64:79:71:e9:c2:18:4c:71:6d:ab:2d:a7:
         04:a7:ef:50:95:76:f4:03:b2:c9:a5:5f:05:7e:6e:f5:e5:9f:
         93:b6:2b:ac:24:2b:d2:87:c2:f6:4b:59:21:78:d5:61:38:45:
         8a:d2:73:98:23:ff:6e:ac:ee:5b:e8:e4:59:00:4e:32:a8:6d:
         39:bb:df:57:95:af:e8:47:cb:10:da:86:29:a3:80:1f:6a:a3:
         3e:bb:9b:fd:c7:c0:8e:26:f4:c5:08:55:5c:14:df:f8:c4:4d:
         b2:6f:97:63:1d:f7:ec:3c:a4:ee:5e:6a:5d:66:9e:b8:7e:68:
         ab:96:ba:e1:c5:df:a8:9f:6d:d7:44:11:91:83:3c:77:30:b7:
         97:52:6b:aa:4b:9e:26:b5:2c:07:c8:8e:f3:a8:a1:c3:24:4f:
         3c:3f:4e:44:18:55:e5:dd:84:9d:8d:ff:e3:56:4d:fb:97:10:
         db:5c:23:e3:73:5f:9b:0d:65:f0:a9:ca:f5:62:22:18:28:76:
         16:11:fe:b0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Sep 6 14:13:48 2025 by rpki-client