Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/379923f6-f2ed-41a0-a0b5-3ea7a6f71c3f.roa
File:                     379923f6-f2ed-41a0-a0b5-3ea7a6f71c3f.roa (raw, json)
Hash identifier:          kiwcRYZ0Kw0lfxjsB+kDSELlLK6aL8uu7joxpM90MKQ=
Subject key identifier:   B8:1A:DB:2A:DF:02:DA:64:57:F7:1F:FF:2F:E7:72:E1:2C:74:3F:41
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7DC28FC9DA9E140E9ACF70F09DC859AFEF65A692
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/379923f6-f2ed-41a0-a0b5-3ea7a6f71c3f.roa
Signing time:             Mon 19 May 2025 16:32:17 +0000
ROA not before:           Mon 19 May 2025 16:32:17 +0000
ROA not after:            Mon 23 Jun 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        2600:1ff7:5040::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:c2:8f:c9:da:9e:14:0e:9a:cf:70:f0:9d:c8:59:af:ef:65:a6:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 19 16:32:17 2025 GMT
            Not After : Jun 23 23:59:59 2025 GMT
        Subject: serialNumber=5f0733aa36e65807c77f7f363737ee50fa78bae848e92212d41bc2a389314d48, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d2:ff:72:07:f9:88:a4:8c:fe:66:64:11:6f:
                    3f:92:4e:a8:8a:54:59:f1:86:a3:d8:1f:72:f3:2c:
                    4c:d4:ae:7c:d5:c2:9b:92:6d:1f:87:ca:31:2e:e3:
                    80:05:72:5f:c2:6b:3e:79:fc:84:93:4d:21:f3:2b:
                    b4:6b:c0:b5:43:8b:c4:32:5b:cb:1b:05:7e:f8:0a:
                    fc:fa:21:0a:60:5b:7c:aa:e5:54:73:29:32:ee:ad:
                    de:bf:37:d1:a5:7c:b4:e2:bc:44:a8:6c:8d:8b:73:
                    d9:77:11:a7:14:71:11:1e:f7:92:10:6a:6d:65:e5:
                    47:5d:a4:b5:1b:d2:cb:35:fc:3d:a7:fd:75:e2:d1:
                    14:9c:88:d0:db:fa:ee:b0:3e:bf:77:e0:cc:ce:a9:
                    cf:cd:c3:c3:44:51:38:43:3f:da:5f:5c:28:ce:c4:
                    dd:53:8f:28:a2:dc:8a:2b:44:56:f0:e9:43:44:0f:
                    5f:af:83:bb:de:f5:34:8d:64:07:98:98:70:8e:43:
                    31:a9:30:b3:3a:27:56:11:80:33:1e:df:1b:0e:52:
                    c7:45:06:7e:eb:17:3c:f4:3d:74:7c:f0:a5:66:40:
                    de:7e:ea:3b:43:d2:1e:c0:f9:ee:f5:72:90:2e:c3:
                    dd:aa:e9:59:9a:4d:5c:82:e4:3a:1e:59:3d:38:fd:
                    ef:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:1A:DB:2A:DF:02:DA:64:57:F7:1F:FF:2F:E7:72:E1:2C:74:3F:41
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/379923f6-f2ed-41a0-a0b5-3ea7a6f71c3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff7:5040::/46

    Signature Algorithm: sha256WithRSAEncryption
         65:25:31:62:57:9d:84:a8:35:c0:fe:d9:32:fb:9f:28:08:49:
         23:1f:cf:98:66:53:23:20:ab:be:a6:ee:6b:da:e2:cc:07:8c:
         ad:76:1f:ef:aa:14:0f:f0:8a:f5:e3:32:0c:9c:3b:ec:e8:0c:
         b4:32:ab:57:84:4a:dd:2d:67:00:14:cd:be:7a:00:a0:22:e9:
         30:66:fc:23:42:60:c1:e8:07:f2:6a:90:49:53:50:26:f1:70:
         7b:ab:cb:01:42:63:01:4a:19:b5:db:4f:c1:68:3f:7d:e4:17:
         bf:a5:e4:09:28:70:bd:f4:43:76:2d:29:32:20:63:75:02:42:
         fd:8a:64:12:9c:f9:d9:8c:7c:3c:0e:35:bb:68:a5:d0:82:6d:
         87:5f:9b:5f:ab:a6:d7:11:5f:2b:ed:68:d5:f5:7c:95:44:96:
         d4:30:98:ac:11:9e:86:58:67:86:2d:fe:a8:20:2a:13:a5:a8:
         1d:cd:d7:84:a8:2a:ea:d9:ba:33:32:c9:1b:b7:fe:8e:03:93:
         ed:c5:d7:6e:c1:27:b9:39:5a:58:3a:e8:6b:ed:35:0c:18:aa:
         64:aa:4d:4e:f0:c9:07:3a:1a:37:cd:34:60:e3:ab:49:eb:44:
         b3:7b:7f:d2:35:de:0e:0c:c8:d4:31:10:80:1f:c7:00:c5:45:
         c4:29:63:2d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 1 04:34:41 2025 by rpki-client