Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/559ec5d8-71af-4698-80c0-cf55c18e4e61.roa
File:                     559ec5d8-71af-4698-80c0-cf55c18e4e61.roa (raw, json)
Hash identifier:          21Fksl5rYQOMndwyc5rzESmTrHLnYwUy+ESC4T12hiM=
Subject key identifier:   81:A1:13:EC:D3:A9:49:A6:DA:AC:44:9F:E4:32:1B:BA:EB:2F:95:73
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       32C4C1FB5F06F2BD32673FDE1B20EE448922AB6B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/559ec5d8-71af-4698-80c0-cf55c18e4e61.roa
Signing time:             Tue 08 Jul 2025 16:51:18 +0000
ROA not before:           Tue 08 Jul 2025 16:51:18 +0000
ROA not after:            Tue 12 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f1a:4c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 01 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:c4:c1:fb:5f:06:f2:bd:32:67:3f:de:1b:20:ee:44:89:22:ab:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul  8 16:51:18 2025 GMT
            Not After : Aug 12 23:59:59 2025 GMT
        Subject: serialNumber=a1b903873c7de83f9518cf1cd1faed2acbb245da99729d9d2ae37b88507a820b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c0:3a:5b:68:20:47:fe:a5:94:c4:fa:7e:08:
                    d2:61:a3:8d:13:5f:a2:12:5f:4a:ca:b9:60:5b:ba:
                    68:c5:07:e6:b1:dc:d7:d3:9b:f0:c9:11:62:2d:6a:
                    d2:4d:47:3d:6a:c9:0b:b6:cd:77:8c:e7:4a:b7:e9:
                    46:fe:0e:24:c0:56:34:02:bc:7c:d6:54:6c:39:0c:
                    68:28:79:ad:60:de:42:5d:67:8e:ec:18:b3:95:eb:
                    22:05:ed:be:60:92:9c:4f:07:4b:4a:4b:04:f6:90:
                    57:c4:f7:36:8d:23:49:c9:b4:0f:16:97:cc:6b:77:
                    a7:4c:56:a0:60:65:8a:1a:06:59:92:19:35:8d:68:
                    79:71:f2:3b:e9:8d:4a:2a:ca:ce:70:da:4d:18:f0:
                    ff:10:5d:7c:76:a1:e8:42:8b:3e:b4:b0:b7:b3:69:
                    59:88:53:31:a2:ae:bb:10:fa:ad:27:51:e5:71:0b:
                    dd:92:88:e8:7d:15:6e:ed:66:c9:19:bd:c6:48:27:
                    40:16:7b:d5:78:23:bc:c2:5f:f2:92:bf:4e:55:fa:
                    c0:b8:37:7a:91:b6:86:d4:cf:9c:c3:2c:7f:18:93:
                    65:34:cf:ed:e3:3d:cb:a8:6e:34:e1:c9:6f:5c:d5:
                    f1:ce:93:cd:51:ed:e3:39:65:9a:a9:e1:8e:5e:b4:
                    b9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:A1:13:EC:D3:A9:49:A6:DA:AC:44:9F:E4:32:1B:BA:EB:2F:95:73
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/559ec5d8-71af-4698-80c0-cf55c18e4e61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f1a:4c00::/38

    Signature Algorithm: sha256WithRSAEncryption
         a4:ca:06:3d:d0:49:6a:53:bd:4c:e5:d5:4f:35:46:02:70:66:
         33:54:2b:b9:00:b4:2e:bf:a9:68:53:ee:89:b1:16:db:b4:1f:
         25:20:96:a1:00:75:2f:ee:a0:04:13:9c:69:44:a2:2a:c4:6c:
         fe:39:d4:39:db:c6:75:57:00:76:f4:86:85:59:b5:6f:5f:41:
         3a:c6:19:1e:5a:9b:f4:3f:ee:d9:0d:e7:c9:58:8b:87:55:c9:
         de:30:09:36:77:0d:25:57:3f:1a:20:77:4f:f7:73:02:ec:a1:
         f5:36:7d:6e:f6:ff:07:1f:dc:19:01:24:72:f8:cc:03:5f:b8:
         92:4b:2d:14:05:8e:b2:97:5f:1c:2c:df:7e:e1:93:44:5e:92:
         ab:1b:2b:15:1f:a2:cd:26:41:70:19:6e:9c:1c:74:b6:97:fe:
         41:52:48:46:eb:67:e5:be:7b:5c:33:e3:46:e6:23:b4:fe:0b:
         c8:b2:2b:fa:bb:d8:11:74:8f:e2:af:9a:3e:3d:da:5c:ac:e7:
         64:19:ae:16:0e:43:60:13:44:81:5e:6a:05:2f:3d:9a:96:cd:
         e8:3c:a3:29:42:7f:54:07:0d:f4:88:29:ca:3c:4c:3e:7b:d2:
         c0:50:02:c1:2a:22:96:69:69:2a:b2:f3:60:d1:5a:1c:45:3c:
         d1:f3:29:dd
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jul 31 01:22:48 2025 by rpki-client