Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6527a6a7-121d-43dc-8efc-219b189b20fb.roa
File:                     6527a6a7-121d-43dc-8efc-219b189b20fb.roa (raw, json)
Hash identifier:          qVUNMqBr/5RT+y1snAm4oltgT6qngDlXAvbIB5huxY4=
Subject key identifier:   3D:AF:4C:45:01:83:2D:37:C5:E0:E9:DD:7C:D0:E8:B7:54:10:F6:86
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       45EF0F54321AEF80C474A6A5A79C5AD066ED29A0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6527a6a7-121d-43dc-8efc-219b189b20fb.roa
Signing time:             Fri 29 Aug 2025 16:20:32 +0000
ROA not before:           Fri 29 Aug 2025 16:20:32 +0000
ROA not after:            Fri 03 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f10:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:ef:0f:54:32:1a:ef:80:c4:74:a6:a5:a7:9c:5a:d0:66:ed:29:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 29 16:20:32 2025 GMT
            Not After : Oct  3 23:59:59 2025 GMT
        Subject: serialNumber=28e63b983e86ed2d41a65a0b44da489ff19699fee782925bcfdf537168c65b7f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ca:96:14:b6:00:7d:c0:f0:d6:24:f3:a8:32:
                    9c:55:d4:fe:04:76:46:e0:8e:ac:a6:3f:b0:5a:a4:
                    40:b8:ca:bb:f2:c1:22:df:3d:91:5f:e2:92:f0:2c:
                    78:d1:ea:83:0d:cd:51:07:b1:51:2b:12:eb:f1:d4:
                    84:d0:b1:7e:38:c3:a8:05:9c:c7:fa:01:a3:8a:b2:
                    0c:4f:27:1d:d8:e2:af:bd:4a:ee:16:1a:bb:0c:1c:
                    f0:49:32:93:87:af:c2:4d:aa:d2:37:d3:be:36:b1:
                    88:ca:67:34:ca:ad:d1:87:5f:de:43:09:ab:f9:93:
                    79:9d:a0:04:15:51:0b:29:f5:f6:73:2b:2a:be:ad:
                    1a:a4:0c:cd:a8:6e:ef:ee:e2:b9:fd:cb:85:3b:e1:
                    8b:24:56:05:38:93:ce:95:21:b6:aa:50:29:e0:1e:
                    fd:a1:ad:0a:77:b0:4e:9a:5d:91:83:3c:d2:38:18:
                    ec:bb:48:0a:d5:95:d0:7f:07:58:c5:ce:49:dc:93:
                    78:fc:d7:ee:41:40:d7:e0:98:0b:8f:87:e6:54:54:
                    e6:67:4c:95:a4:3e:4a:ae:c2:9d:27:4d:a1:0b:87:
                    5d:5d:6b:fd:6d:3a:8f:40:d8:69:90:52:7b:85:4a:
                    de:88:9a:a5:34:23:e5:fa:24:76:de:69:7d:f7:1e:
                    9e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:AF:4C:45:01:83:2D:37:C5:E0:E9:DD:7C:D0:E8:B7:54:10:F6:86
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6527a6a7-121d-43dc-8efc-219b189b20fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f10:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         51:86:a8:12:d2:31:85:87:e1:1c:59:4d:bb:e3:8f:60:f7:fa:
         5c:e4:61:c5:49:17:00:fb:a7:53:91:a1:01:1e:59:2f:79:ba:
         3b:47:13:27:62:5b:d7:d4:4f:54:12:39:93:c7:69:54:01:51:
         85:8f:e8:e9:ae:b1:2f:86:a4:11:7a:9a:3c:7d:7e:c8:07:dd:
         60:32:85:e8:1b:7a:2c:b8:af:aa:39:a5:d2:04:09:38:d8:2e:
         c4:b5:47:fc:95:86:af:b0:88:49:96:dd:f1:20:0c:e2:b0:e7:
         16:00:53:6a:cd:ed:6e:00:69:26:75:aa:8a:97:47:ff:fb:ec:
         c0:96:13:08:4a:fa:21:79:f0:91:bf:0b:38:95:2a:e1:ee:8f:
         6b:ac:0c:13:b1:61:58:8e:fe:20:55:fb:22:30:7f:4c:13:8f:
         16:99:7e:b2:ff:85:96:5b:2a:78:85:50:aa:a7:ff:13:5b:21:
         e4:a9:5d:62:7e:0b:3b:0d:b1:66:44:96:18:4e:d0:4f:77:e0:
         8b:a3:5d:4c:8d:83:5b:33:87:83:6e:db:ce:73:f6:56:72:85:
         3d:ad:1a:06:43:07:52:bb:cc:5a:15:d4:6e:32:94:98:09:8b:
         c2:ca:cd:0f:a7:f1:ca:55:fc:85:03:2a:21:a3:1c:4f:38:b8:
         77:08:ae:34
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Sep 6 14:19:53 2025 by rpki-client