Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6acb9110-0c4f-4d2d-9be0-bb29543dafd3.roa
File:                     6acb9110-0c4f-4d2d-9be0-bb29543dafd3.roa (raw, json)
Hash identifier:          HkklzBMCmzkFar9s+xy+iD9rkLhOUlfis/IfwHxjCSI=
Subject key identifier:   7A:95:C4:C0:86:79:53:B2:00:11:F1:93:FD:87:19:8C:F5:07:E3:CA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5DE8C5F33E81735D3F065B97B6239DE08D60F0A8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6acb9110-0c4f-4d2d-9be0-bb29543dafd3.roa
Signing time:             Mon 25 Aug 2025 16:52:20 +0000
ROA not before:           Mon 25 Aug 2025 16:52:20 +0000
ROA not after:            Mon 29 Sep 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1fec:3800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:e8:c5:f3:3e:81:73:5d:3f:06:5b:97:b6:23:9d:e0:8d:60:f0:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 25 16:52:20 2025 GMT
            Not After : Sep 29 23:59:59 2025 GMT
        Subject: serialNumber=22cb23e3d5401effb53bbd5bdbc1d21c9a870951a3ac19caf1af315beaf2d01e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ee:85:9e:40:5d:58:54:e5:92:15:0f:74:39:
                    cb:ec:92:a3:ab:b8:f8:d9:74:a6:49:8b:4f:34:e9:
                    00:77:9e:74:b9:4e:0b:1b:aa:54:e6:fb:a9:ce:5a:
                    9f:89:03:c1:f4:d3:1f:7b:ef:b2:09:5b:99:da:75:
                    e0:de:71:5f:92:0a:ed:11:e5:83:49:dc:e8:a5:35:
                    86:ff:bf:ce:b6:7d:92:03:b5:fc:89:d5:6a:1d:8c:
                    7a:e8:2b:47:9e:cb:91:bf:4e:8d:f9:d6:72:e1:5d:
                    07:7e:07:0b:78:1a:f5:09:3b:aa:f1:7e:57:b2:92:
                    60:b4:b5:ef:9c:4b:15:57:66:6f:31:41:4c:17:51:
                    3f:f6:f2:4b:5d:7f:98:10:ba:0d:03:0a:c1:c9:17:
                    50:8f:a1:9d:65:8f:93:e0:d2:0e:0e:5a:e1:f2:20:
                    ef:3e:5a:e9:28:f1:c7:a8:1e:ee:15:ee:d2:f5:61:
                    4e:3c:a1:15:cc:4b:e6:cb:93:d0:0f:06:6a:a9:a2:
                    5b:bc:b3:79:f4:6c:b3:a4:4f:24:1c:23:59:ad:db:
                    39:38:4f:e5:9e:61:fc:1c:4a:73:c7:93:64:67:71:
                    49:f2:34:72:e5:ee:da:1a:7a:c9:5d:78:28:c1:50:
                    ce:39:28:25:2e:cc:77:04:13:52:fe:12:22:f6:ea:
                    00:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:95:C4:C0:86:79:53:B2:00:11:F1:93:FD:87:19:8C:F5:07:E3:CA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6acb9110-0c4f-4d2d-9be0-bb29543dafd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fec:3800::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:cd:07:3d:ba:a1:b7:9a:8d:e5:5d:f9:84:49:cd:ea:25:ac:
         10:dd:3e:b2:3d:b1:38:d0:83:7b:34:be:8d:36:92:b2:67:5a:
         d6:05:b6:84:6a:61:68:e1:7f:c3:7f:fa:2f:0d:7b:e3:8e:fa:
         a8:a5:a1:62:f4:ca:64:46:c3:93:60:56:ce:eb:68:6b:48:60:
         c0:42:38:86:a6:cb:43:18:00:16:ff:80:12:1e:19:22:85:97:
         fd:b0:c9:a2:df:ac:3b:06:a4:2b:30:56:20:ef:36:b4:13:6a:
         fb:fb:ec:59:b5:23:d0:16:a3:05:60:e3:9f:e8:c4:8f:bb:ba:
         39:27:68:82:d0:02:26:ea:f8:d4:24:9d:44:4b:76:b0:95:1c:
         73:47:f4:bf:d6:9e:d9:36:ef:95:29:8f:74:53:92:9e:82:31:
         92:68:e7:55:72:66:2f:af:0a:3d:6d:78:69:3c:da:fc:e9:34:
         1e:47:db:3b:e0:c6:6b:27:e2:26:05:0a:93:e6:93:bf:dd:ac:
         d5:1f:2e:99:59:38:19:02:61:9b:c9:2c:20:b9:5d:99:58:fc:
         96:30:28:8f:eb:ad:e9:33:bb:a9:98:15:52:71:8d:c9:08:ab:
         68:73:2c:ac:16:e5:32:ea:c3:bc:57:02:20:4b:a7:a0:5f:f0:
         be:cd:2b:6c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Sep 6 14:18:56 2025 by rpki-client