Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a0a8979-b3b0-44b3-8908-2d54f7cf4311.roa
File:                     4a0a8979-b3b0-44b3-8908-2d54f7cf4311.roa (raw, json)
Hash identifier:          Dhgg6DmerG3bpdbQKzfXRT/7ktO30NMtrkucAJecoWg=
Subject key identifier:   AA:8F:59:AF:92:0E:2C:2B:E1:4D:28:AF:67:AE:BA:CF:7B:5A:D4:AC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       52235600F403A2BC999741AF24D07A81383C92F4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a0a8979-b3b0-44b3-8908-2d54f7cf4311.roa
Signing time:             Fri 29 Aug 2025 16:02:17 +0000
ROA not before:           Fri 29 Aug 2025 16:02:17 +0000
ROA not after:            Fri 03 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f15:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Sep 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:23:56:00:f4:03:a2:bc:99:97:41:af:24:d0:7a:81:38:3c:92:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 29 16:02:17 2025 GMT
            Not After : Oct  3 23:59:59 2025 GMT
        Subject: serialNumber=1f7a0ed2fc64d8e741be89e2d6c3477b000558472dde69c3b2aa12dd1430633d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:85:a3:25:f4:73:0c:65:a5:a2:e6:47:f4:8f:
                    c2:07:eb:06:70:b2:a7:47:27:fb:80:f8:72:b7:33:
                    93:c2:69:64:51:c3:90:63:f8:81:42:ee:b1:83:9c:
                    af:c7:4e:ab:2f:4a:66:15:e7:d0:11:0c:56:f7:4c:
                    ed:7b:ca:97:e1:52:02:0b:ef:a4:1e:64:ef:ff:d4:
                    e1:03:ed:e3:7a:70:8a:53:61:bc:ce:39:44:fd:36:
                    f1:98:d1:c6:c3:a9:af:c3:61:29:2a:34:16:63:79:
                    05:41:f6:14:f3:c5:da:72:e3:ae:52:c7:44:20:37:
                    ac:20:10:17:1d:26:a1:03:12:08:53:4a:95:85:b0:
                    97:61:28:1b:13:e0:a5:fb:a4:a0:4f:3d:11:3d:f7:
                    16:5a:91:21:81:e7:ed:95:11:f9:2c:be:1f:eb:e5:
                    a0:a5:25:41:3a:cb:c0:32:ae:72:13:0a:b8:fd:17:
                    96:a7:7f:61:75:21:02:ed:80:5f:23:ab:74:96:62:
                    de:26:95:f7:6d:17:99:31:20:9b:58:41:5f:d9:35:
                    43:e3:25:c7:f2:9e:30:b6:fa:f3:f9:78:2c:31:2d:
                    9c:c1:cb:3b:2e:2d:64:7a:30:2c:0b:25:29:31:e9:
                    f4:df:e7:96:f9:c9:a9:0d:12:8c:06:e4:93:d0:13:
                    ed:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:8F:59:AF:92:0E:2C:2B:E1:4D:28:AF:67:AE:BA:CF:7B:5A:D4:AC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a0a8979-b3b0-44b3-8908-2d54f7cf4311.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f15:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         c5:00:71:e1:6a:28:cf:6c:3b:ea:48:e5:24:14:22:97:0f:d0:
         00:51:4b:67:27:91:56:d8:e5:c6:c3:f3:56:bd:65:fb:fe:82:
         de:6e:5d:9b:fc:a1:26:01:0f:dd:5d:ec:5e:c1:a7:57:17:b4:
         03:ff:79:69:0d:d0:22:93:ec:ed:06:23:12:a7:72:df:8a:45:
         e1:e6:17:57:98:bc:b6:8d:39:f1:ab:e3:c1:7e:fe:ab:c7:c2:
         87:4b:88:66:bf:d4:bb:ac:c8:7a:67:cf:18:fc:90:fe:d5:07:
         67:63:58:e9:c5:70:57:ee:a2:b8:4d:d7:be:dc:30:d0:af:21:
         09:11:bb:69:40:e1:1e:0e:8d:89:41:f1:ed:7c:55:68:c0:78:
         6d:ac:31:03:1e:d5:1c:aa:ca:7f:05:39:63:05:99:68:54:d1:
         be:d8:a4:05:cb:1f:cb:56:bc:dc:26:0d:9c:da:51:47:43:c0:
         9d:3e:29:2a:31:db:c5:09:f6:6e:7b:d7:e7:49:9d:10:42:7c:
         84:43:cb:60:44:e9:be:e7:70:66:90:d4:49:9e:3b:60:9c:07:
         95:ad:2e:f3:88:f5:cc:c1:b5:f1:90:85:68:8c:e1:17:88:47:
         8a:cd:51:f8:af:ca:36:69:09:cc:a4:f7:2b:1c:bd:60:28:7d:
         c5:f7:f6:66
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Sep 6 16:40:51 2025 by rpki-client