Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79b3e168-0fa7-4da6-8746-4089ce7254f1.roa
File:                     79b3e168-0fa7-4da6-8746-4089ce7254f1.roa (raw, json)
Hash identifier:          yl9KONiQZFnzqC7StjX7/Y8CsmWmM8n0bSEcvoaj9NQ=
Subject key identifier:   E5:A0:6C:56:99:B5:10:45:5A:6F:23:77:C0:2A:88:D6:F8:E5:EA:E3
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0999D6F7C4FCA69F337FA9878616A7429AAF7BB9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79b3e168-0fa7-4da6-8746-4089ce7254f1.roa
Signing time:             Mon 19 May 2025 17:50:53 +0000
ROA not before:           Mon 19 May 2025 17:50:53 +0000
ROA not after:            Mon 23 Jun 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        2600:1f15:400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:99:d6:f7:c4:fc:a6:9f:33:7f:a9:87:86:16:a7:42:9a:af:7b:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 19 17:50:53 2025 GMT
            Not After : Jun 23 23:59:59 2025 GMT
        Subject: serialNumber=b0efe207c8cf60a48a350bc703f4baf72538a1b4b061a783b0a2b0405755ace0, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:19:6c:d2:b5:93:7c:22:3b:c1:ec:c6:66:bc:
                    fb:4d:40:71:2c:45:9f:e5:20:9d:9b:c0:14:13:4a:
                    76:b2:c3:6f:b1:aa:9a:c8:22:41:97:66:81:46:c1:
                    5e:4c:98:34:39:09:67:18:2b:51:35:f8:b3:da:52:
                    47:0f:46:2e:cd:89:39:4f:12:ee:a7:68:4c:10:7d:
                    47:d9:1c:e5:c0:61:5e:f7:e5:8c:8c:9c:8c:ed:a7:
                    3c:e0:e1:c0:0e:3e:11:f8:d3:ed:1f:07:11:92:08:
                    2f:67:c0:a6:39:15:bc:8c:c1:d2:17:77:2b:44:26:
                    94:13:e2:5b:5b:62:9f:c6:7e:ca:7d:fa:f4:3d:a7:
                    22:80:79:8f:16:15:c4:93:74:a9:13:7a:e0:28:b9:
                    10:c9:69:9c:8c:70:be:a2:61:df:5a:ef:e9:9b:db:
                    89:62:78:65:f8:52:0a:c9:be:b3:91:ce:79:ee:ba:
                    e5:87:9e:ce:ee:56:47:83:da:68:ca:5a:4a:6b:a5:
                    26:af:55:1f:0e:d6:ff:53:d4:08:19:69:c2:cb:ac:
                    3b:32:33:61:a1:3c:25:30:3e:74:fd:04:0d:3b:2a:
                    6c:62:bd:73:d7:f8:0a:df:ea:f4:27:00:02:b2:3a:
                    f6:52:6d:93:55:da:c8:5b:12:f2:d1:5a:f2:6b:2b:
                    94:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:A0:6C:56:99:B5:10:45:5A:6F:23:77:C0:2A:88:D6:F8:E5:EA:E3
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79b3e168-0fa7-4da6-8746-4089ce7254f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f15:400::/38

    Signature Algorithm: sha256WithRSAEncryption
         43:80:66:cb:c1:6e:29:f2:61:b1:f1:08:82:b9:54:20:10:9c:
         62:85:1f:22:f3:02:43:93:b0:c9:aa:da:ef:58:ae:63:7e:04:
         5a:f5:36:3d:55:fa:8c:1a:36:9f:9f:ea:11:47:af:ad:3b:a0:
         23:83:01:9d:74:1b:75:48:3f:98:c1:52:6f:a4:4d:ea:d7:77:
         19:95:fb:bd:2b:c7:e4:68:6b:e3:73:bb:8f:64:ce:a1:38:01:
         38:08:a3:42:2f:f9:b4:0c:22:b1:0c:2d:91:0c:a3:42:28:9d:
         c8:85:70:c4:2c:6f:46:ff:ab:0d:0a:05:ca:70:14:2b:43:40:
         b9:f7:70:70:9d:c1:66:37:b3:fe:e5:7f:d4:92:02:09:25:1b:
         10:56:da:12:ad:a5:11:0a:ea:87:64:02:6c:22:e9:c7:af:24:
         53:ff:20:bc:55:5f:07:c2:60:17:12:97:da:fc:98:13:e8:48:
         ab:dd:fb:ae:e7:ef:77:18:a4:8b:7f:96:a7:55:6b:b7:77:af:
         d8:6e:13:27:fc:a3:5d:4d:75:05:4f:1c:eb:7b:55:c9:5d:85:
         c8:d5:5b:4c:0e:a1:97:00:cc:d3:6a:54:8c:85:57:bc:88:c0:
         29:85:59:a0:f8:98:9a:de:83:ef:95:7c:26:eb:a3:e4:7f:f6:
         9d:21:a8:94
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 7 19:51:51 2025 by rpki-client