Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/74979d15-5647-4efc-ac8a-013c581338cc.roa
File:                     74979d15-5647-4efc-ac8a-013c581338cc.roa (raw, json)
Hash identifier:          yT6S9iZ83ka9rya5ePcDnzjhF3sdSYBtc1yN/KGoeXA=
Subject key identifier:   0D:58:B5:71:95:B2:E0:1F:7E:00:3D:22:8D:B4:A1:3C:0F:82:26:F9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4155936EA9F719DA980E6F339E14E8FBF665BDE0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/74979d15-5647-4efc-ac8a-013c581338cc.roa
Signing time:             Mon 07 Jul 2025 16:30:18 +0000
ROA not before:           Mon 07 Jul 2025 16:30:18 +0000
ROA not after:            Mon 11 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f00:5040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 01 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:55:93:6e:a9:f7:19:da:98:0e:6f:33:9e:14:e8:fb:f6:65:bd:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul  7 16:30:18 2025 GMT
            Not After : Aug 11 23:59:59 2025 GMT
        Subject: serialNumber=02bd350d3e22ec9d23375384c7944cd4710f2f910069b1b1f38615b66e3553cd, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:eb:bc:6b:86:47:c1:da:bc:46:02:f2:21:9f:
                    99:05:fd:cf:d0:3f:a1:44:4c:3f:fc:fd:06:ba:04:
                    bc:79:20:91:64:fe:8b:4f:e2:dd:2b:fb:04:3b:6f:
                    6b:6c:68:2d:07:9d:24:d6:43:c5:8d:06:e1:04:5e:
                    c2:7d:8c:f4:0d:b6:53:b5:f3:1e:05:32:93:67:8a:
                    18:83:b3:8d:7d:91:88:69:9a:ab:c8:cb:e4:5e:ae:
                    21:20:ea:02:4f:09:b3:da:44:88:56:47:fb:f4:75:
                    9d:f6:a5:eb:cc:4c:39:eb:8c:a3:e6:e0:c8:25:90:
                    1e:c4:2d:4a:c3:9c:3b:96:ad:94:9c:37:dc:7f:f6:
                    70:d4:19:08:2a:f0:06:60:a8:a5:7d:3c:85:a7:43:
                    a2:9a:b9:07:2e:6f:d0:4f:03:3f:29:d7:4f:61:50:
                    ff:67:e6:c5:85:1e:91:ca:2d:f6:74:9f:8f:71:63:
                    2e:94:e1:8d:94:2e:fa:91:06:3f:33:3c:be:e1:15:
                    35:ad:49:01:95:d9:b7:92:73:32:f2:60:77:d8:a0:
                    f9:d2:51:29:2e:bd:07:23:24:5e:40:f2:16:ed:d3:
                    83:73:58:fb:ef:e3:ed:97:7b:69:f7:f5:bf:d4:ff:
                    9f:04:9c:57:33:39:ff:a8:d4:46:a2:aa:f2:c5:84:
                    9c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:58:B5:71:95:B2:E0:1F:7E:00:3D:22:8D:B4:A1:3C:0F:82:26:F9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/74979d15-5647-4efc-ac8a-013c581338cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f00:5040::/48

    Signature Algorithm: sha256WithRSAEncryption
         2e:e8:0a:64:6c:df:ad:38:5a:15:bf:49:2a:1b:aa:87:b3:be:
         53:6e:b6:93:25:59:a7:96:cb:48:86:be:3c:05:d3:4c:8a:fe:
         be:91:de:42:bf:92:c7:91:02:82:16:68:0c:3b:e5:55:bc:7d:
         7c:46:7f:4c:7f:bf:1c:fe:9e:e7:8a:de:c8:ff:26:03:21:16:
         bc:35:ad:13:39:c3:5b:9c:d9:c2:50:a8:b7:84:92:59:91:0f:
         44:34:04:fb:c4:20:7f:e3:4b:cd:1f:2f:30:be:de:d5:16:a3:
         de:28:71:04:24:38:0d:6c:a3:54:5d:25:90:51:39:5b:53:d5:
         62:59:38:52:43:47:6d:c7:61:af:b5:63:b9:64:b4:a3:bb:50:
         d5:5b:1a:4a:57:7f:32:c5:aa:6c:af:89:f3:8a:45:0d:02:19:
         2f:b1:b4:f9:c9:0b:83:04:2f:fb:2b:45:3f:dc:9a:ee:58:44:
         31:82:09:5e:da:da:f8:18:d6:29:0d:75:fc:cb:00:af:1a:d8:
         e4:8e:57:bb:0f:9d:58:e5:6c:0d:b8:a1:3d:4e:a8:26:35:54:
         3b:00:c0:3c:ad:ee:27:98:8f:f6:33:f2:2e:20:52:ad:6b:40:
         55:f9:1b:6e:4b:f3:60:02:3f:b0:27:60:63:b9:4f:8f:7f:22:
         68:64:d5:1e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 31 01:13:21 2025 by rpki-client