Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d9d9efe-6bc4-4ce7-91fb-8b1e032d4ed4.roa
File:                     4d9d9efe-6bc4-4ce7-91fb-8b1e032d4ed4.roa (raw, json)
Hash identifier:          vRB6WA01KEEiSIH9QYa0XtHz/JjU0lm+Up2wnBfjp00=
Subject key identifier:   1A:D5:99:A4:55:1F:1D:E0:C5:7F:8B:3F:EC:19:94:E2:0C:77:0C:4E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3AF5E6BC1ADA196DA3AECADF67E4157F23732C17
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d9d9efe-6bc4-4ce7-91fb-8b1e032d4ed4.roa
Signing time:             Sat 06 Sep 2025 00:20:23 +0000
ROA not before:           Sat 06 Sep 2025 00:20:23 +0000
ROA not after:            Sat 11 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f16:8000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:f5:e6:bc:1a:da:19:6d:a3:ae:ca:df:67:e4:15:7f:23:73:2c:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep  6 00:20:23 2025 GMT
            Not After : Oct 11 23:59:59 2025 GMT
        Subject: serialNumber=fda103cb1b7f83130b2a354429d3847e4bd96cc3fa965206ff50e2e3b1763223, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1c:c1:88:97:e5:7a:24:ee:d3:57:20:24:0d:
                    37:73:60:15:3b:4f:15:a6:56:bd:e3:e7:2e:13:ff:
                    9a:fd:cf:8c:5b:e4:3c:f3:b7:8c:39:27:e3:b7:ac:
                    1b:93:49:b7:40:be:23:3e:76:ec:65:4c:76:d4:b7:
                    7d:4b:81:45:04:e2:6a:39:fb:ed:5a:64:23:1e:0c:
                    ca:b7:54:e4:33:c9:0a:0a:64:97:ae:d4:ac:0b:57:
                    10:f6:e5:2c:10:52:14:0b:07:a3:5a:b8:bf:28:26:
                    34:94:c1:4b:dc:f9:8f:34:7e:ec:fc:45:9e:1d:45:
                    f2:23:fc:c3:9b:14:0b:97:38:f9:13:f9:7f:88:98:
                    23:a2:e7:cb:ea:2f:f7:6e:c2:2f:1b:d3:45:d1:90:
                    e7:a7:4c:78:5f:82:2e:e8:25:ea:ac:10:27:58:76:
                    75:87:02:3f:16:9e:21:a0:1a:55:a1:97:8f:38:5c:
                    40:18:cd:a8:3e:cb:fd:94:5b:c9:55:f8:aa:78:e9:
                    06:57:fa:4f:b4:5f:cb:02:93:28:23:74:e9:97:c6:
                    59:c5:e2:fb:9a:93:9f:77:59:94:f1:36:e0:79:e6:
                    90:38:ea:b4:bb:f6:68:fb:b7:6d:f8:e7:81:f0:94:
                    00:22:ac:46:97:62:8a:5d:94:8e:0d:ce:75:6a:8a:
                    5c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:D5:99:A4:55:1F:1D:E0:C5:7F:8B:3F:EC:19:94:E2:0C:77:0C:4E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d9d9efe-6bc4-4ce7-91fb-8b1e032d4ed4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f16:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         a2:f7:0a:59:72:ce:23:17:cf:3e:b5:55:c9:11:9a:7e:fc:5d:
         32:14:df:b5:f7:f7:90:24:2f:36:a5:7b:f6:b5:22:95:ae:85:
         f7:9b:ce:ad:7b:10:b1:7f:22:f0:1f:47:0f:4b:c2:42:6a:32:
         78:bb:0c:bc:74:ae:d7:2a:ef:8f:ca:b8:9a:66:72:b1:3f:29:
         12:34:16:8b:51:b3:cd:6a:43:37:ee:37:ad:3a:33:2c:96:d5:
         3c:c6:46:f2:2a:87:04:e8:e8:ae:31:d9:96:d0:e6:6e:87:94:
         03:35:61:43:70:fc:e6:a6:90:b2:1f:c2:9a:7f:5c:25:0d:91:
         e2:71:f9:b6:6e:d4:73:e4:eb:e1:0d:63:31:7b:41:56:d2:3b:
         51:58:1a:84:fb:b2:8a:47:d2:3a:84:b1:7f:71:b6:88:f1:60:
         6c:24:2c:bb:20:c7:af:32:a6:9c:5b:59:df:a5:9e:f2:09:07:
         fe:32:e7:81:19:cb:ef:ec:22:5a:87:fa:24:ab:63:8b:2a:52:
         11:a7:e1:52:dd:7e:2b:9a:48:99:cc:e1:25:c8:f6:2e:78:64:
         20:19:0b:39:ed:79:f6:f1:cd:c8:ab:57:21:0f:fa:9a:1f:2e:
         b0:db:29:15:a2:98:b1:f9:53:12:2d:e9:e9:14:76:42:81:4c:
         0d:f7:fe:82
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Sep 16 05:09:11 2025 by rpki-client