Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67cccffa-6f12-42e5-86fc-9793e15b5a3f.roa
File:                     67cccffa-6f12-42e5-86fc-9793e15b5a3f.roa (raw, json)
Hash identifier:          Ixnqio1QBzkcDYu5xzIa9/MpF/kUnmhXYQtPsUVkvBs=
Subject key identifier:   45:1B:86:6F:71:85:D9:DF:92:CD:B1:7E:39:00:CE:D2:5C:0B:43:ED
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1F01A81F8E2949A3B3904A624014E12FAD0F074F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67cccffa-6f12-42e5-86fc-9793e15b5a3f.roa
Signing time:             Fri 29 Aug 2025 00:31:35 +0000
ROA not before:           Fri 29 Aug 2025 00:31:35 +0000
ROA not after:            Fri 03 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f00:e0c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:01:a8:1f:8e:29:49:a3:b3:90:4a:62:40:14:e1:2f:ad:0f:07:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 29 00:31:35 2025 GMT
            Not After : Oct  3 23:59:59 2025 GMT
        Subject: serialNumber=9bdc088c7e7105999dddff1900c316bdfe64d1920099b13d27c5b2609224032f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:52:7e:5a:3b:30:d3:a6:c2:cb:ef:6f:63:9c:
                    9e:33:3c:5c:a9:c9:87:ef:d0:5b:0b:95:1d:72:d1:
                    b5:45:df:35:0e:de:18:c8:7b:81:dc:bb:55:5c:58:
                    24:97:29:a9:63:6a:aa:80:f1:9e:01:a8:b1:26:eb:
                    03:68:41:7f:c4:38:c8:45:c2:b9:22:30:fa:c1:c8:
                    b7:c4:8d:f7:ca:43:12:23:a1:2b:cd:72:5c:b5:c1:
                    5c:0e:e2:b7:7d:7f:15:d0:8e:53:de:9b:9d:37:ab:
                    45:a6:d3:14:bc:6a:c6:3b:2f:1d:2f:60:90:e3:1e:
                    01:31:f6:0e:33:59:a8:31:62:4f:d0:ff:1f:c0:95:
                    75:ab:d8:a5:1c:9f:57:18:cd:b8:38:1d:e4:74:61:
                    9b:42:5d:15:91:a5:d9:89:7b:69:0a:c5:3a:f7:0d:
                    b8:71:e2:32:06:de:ca:d4:10:94:6d:0d:22:00:c0:
                    8d:1e:50:e6:4f:3b:73:0c:a8:14:32:fd:9a:50:9f:
                    b6:4f:67:a5:af:34:bf:6b:b7:5e:a7:65:f5:36:d2:
                    ef:d9:29:db:c0:28:19:e3:2a:87:2c:7e:5e:c8:0e:
                    5c:59:41:72:6d:33:d1:a4:59:9a:63:10:d1:ee:5d:
                    90:c0:e3:45:c3:5e:02:63:e5:bb:e3:07:2c:96:aa:
                    08:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:1B:86:6F:71:85:D9:DF:92:CD:B1:7E:39:00:CE:D2:5C:0B:43:ED
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67cccffa-6f12-42e5-86fc-9793e15b5a3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f00:e0c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:9c:d1:de:5b:56:06:03:41:73:00:bf:56:5d:f5:6e:26:7e:
         9c:6b:98:f0:fa:26:61:34:8f:4f:ec:ea:35:f2:d9:20:65:28:
         87:10:d5:30:83:61:0a:bc:03:03:9d:54:95:09:1d:17:8e:b2:
         a6:e9:74:b2:94:cf:40:b7:1e:14:3b:ff:62:fc:ba:3a:78:6f:
         5d:02:d2:f2:5c:38:69:c4:06:53:48:9f:79:57:89:22:4a:28:
         a7:ed:cb:16:df:85:46:8a:bd:23:bf:d2:48:b9:98:da:13:30:
         00:37:b5:58:6d:a1:7f:29:69:90:d0:7f:a1:aa:8e:57:9b:47:
         75:ba:41:36:c0:ea:21:c4:b2:a9:c7:82:bb:11:f2:2e:a2:65:
         d3:1a:59:a2:27:11:ed:02:9e:7f:f0:85:aa:9e:b8:2c:9b:56:
         2c:82:f2:5f:e5:13:b4:b3:48:e8:cd:5a:fa:a1:7c:02:56:74:
         0a:5e:ae:db:d1:0b:b9:69:d5:3d:ee:7a:b2:e0:cd:50:de:08:
         56:87:5c:98:1d:56:4c:09:8f:bb:34:a1:42:10:7f:f6:df:7e:
         83:43:76:e4:6d:ea:d8:ca:1d:43:d0:9c:9a:2d:54:9a:04:60:
         c6:4e:e3:33:95:90:93:1f:c2:cb:90:1e:66:92:e3:49:ff:fc:
         1e:3b:e0:af
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Sep 6 14:11:21 2025 by rpki-client