Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/455d7b92-4c00-4985-ae91-ef6d61407b05.roa
File:                     455d7b92-4c00-4985-ae91-ef6d61407b05.roa (raw, json)
Hash identifier:          qK0D/Quyl/WNgaUeJB6CTtaYnbSbVPNamEK7xpA7izc=
Subject key identifier:   04:C0:3E:B6:B8:6B:DC:3C:0D:C3:15:45:8E:35:BE:EB:DB:15:80:AE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       14091269411182A5322BF28301C032E8DB5B7802
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/455d7b92-4c00-4985-ae91-ef6d61407b05.roa
Signing time:             Tue 26 Aug 2025 16:50:52 +0000
ROA not before:           Tue 26 Aug 2025 16:50:52 +0000
ROA not after:            Tue 30 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fff:40d0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:09:12:69:41:11:82:a5:32:2b:f2:83:01:c0:32:e8:db:5b:78:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 26 16:50:52 2025 GMT
            Not After : Sep 30 23:59:59 2025 GMT
        Subject: serialNumber=e5a727bb869491308f0f01fd3785ba714233e368fdd249e2edafb5cdffe886b7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:84:b6:16:33:83:63:c5:a8:a2:c4:c9:d1:8b:
                    dd:4c:56:85:4e:66:b0:6c:df:e7:fa:5e:5a:6a:3c:
                    be:9b:bd:bf:61:b4:d8:be:8f:0f:88:17:16:3c:f6:
                    46:19:06:ba:37:48:ee:52:48:26:3d:ac:6d:69:2e:
                    24:59:9b:d6:ab:bc:de:5e:d8:00:0b:36:13:6f:de:
                    c9:eb:27:55:8b:f7:1d:6e:3f:4b:6d:cd:37:8d:ac:
                    bd:78:4a:51:74:19:c0:0a:d4:4c:25:b6:38:ec:1f:
                    68:43:e8:69:88:f7:b3:03:77:16:ea:4d:52:97:2c:
                    af:24:1f:cd:07:2e:47:c3:06:b5:96:8c:04:53:c4:
                    7d:3c:c8:3d:76:80:c3:80:e3:20:82:5d:62:18:9c:
                    59:b0:db:01:c5:75:2f:81:5c:2e:79:50:ab:54:f7:
                    ec:5f:dd:ac:65:4c:cc:df:eb:4b:03:50:a5:66:d6:
                    ac:af:29:86:c2:bf:6f:b8:31:86:85:31:06:a6:04:
                    01:46:b7:02:1e:8a:a2:cf:38:1b:8d:b4:5f:76:64:
                    32:6b:50:0b:a0:a6:cf:01:42:88:5e:21:8f:02:a5:
                    82:e7:0f:1e:74:1e:40:ec:29:7f:27:db:14:02:eb:
                    a1:61:e2:63:55:26:61:b6:23:04:6e:38:a3:e4:8d:
                    ee:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:C0:3E:B6:B8:6B:DC:3C:0D:C3:15:45:8E:35:BE:EB:DB:15:80:AE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/455d7b92-4c00-4985-ae91-ef6d61407b05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fff:40d0::/48

    Signature Algorithm: sha256WithRSAEncryption
         80:f7:04:bd:83:8f:0f:2e:6f:8d:6b:fa:6c:78:89:11:22:5d:
         5b:15:71:7e:30:5b:02:6b:99:6c:5b:82:bd:e8:bf:3b:65:dc:
         f5:14:d5:14:8e:21:52:6e:73:8e:06:48:3c:66:24:97:49:20:
         33:c0:21:b7:a6:6d:bb:d3:6c:33:0e:02:11:8d:ec:8e:c2:da:
         11:9d:d4:0b:01:94:f2:86:f9:5c:0b:c0:c4:bb:b2:7d:0f:a5:
         57:30:5b:de:df:25:6a:3d:9f:d8:c2:76:a8:5f:82:11:75:8a:
         3a:ab:57:a4:82:48:49:bb:07:84:4f:10:fa:57:fb:dc:5c:a4:
         5d:92:0b:61:bb:cd:9a:36:2b:0b:5d:bb:a7:e5:2d:b9:87:eb:
         5c:a7:2e:e8:8f:ba:cb:1d:3d:5b:1e:4b:54:6e:2c:2f:24:8f:
         2a:4c:6e:aa:bc:3f:ed:76:5b:47:7d:18:82:eb:18:e0:d6:06:
         68:4a:e7:01:f6:9b:0f:39:71:93:83:cf:5f:1e:76:1c:16:30:
         35:ad:f4:a7:e2:5b:c4:1a:d2:2c:58:da:f4:2d:08:7e:f9:de:
         a7:16:6d:ea:12:f5:10:d8:cc:d5:7b:e7:b3:5c:2b:8b:55:26:
         d9:a6:f6:d6:ee:85:ac:67:69:5c:a3:d8:88:2d:c0:c0:e0:89:
         ee:5d:31:60
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Sep 6 14:14:20 2025 by rpki-client