Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/81466a00-4ef6-4b26-ad84-e79fb496219c.roa
File:                     81466a00-4ef6-4b26-ad84-e79fb496219c.roa (raw, json)
Hash identifier:          XiSJ7IXDmAbOA0rnavswfAIDjdKrJsi8Ox/CpTWSskk=
Subject key identifier:   2E:16:CD:6C:0D:80:C0:02:73:9A:C2:40:1A:02:4C:94:75:42:5E:06
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5AC15A35853B9B71D43C253A0E30C2847D931581
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/81466a00-4ef6-4b26-ad84-e79fb496219c.roa
Signing time:             Sat 17 May 2025 00:52:03 +0000
ROA not before:           Sat 17 May 2025 00:52:03 +0000
ROA not after:            Sat 21 Jun 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f00:8080::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:c1:5a:35:85:3b:9b:71:d4:3c:25:3a:0e:30:c2:84:7d:93:15:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 17 00:52:03 2025 GMT
            Not After : Jun 21 23:59:59 2025 GMT
        Subject: serialNumber=a4ce23d27cb18fbe44160d3e7288042cd7c839a9a774d672a38168ef58de1494, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:eb:a7:0c:31:25:d0:1c:ba:62:9a:e6:7d:f7:
                    98:e4:06:67:ef:d5:af:98:5a:c0:db:25:31:9c:d3:
                    c7:bf:59:c8:ac:28:16:83:da:6e:c1:7b:3f:6f:ba:
                    87:5b:90:92:39:f4:11:ed:b4:be:50:eb:58:31:b5:
                    68:7c:5e:19:af:cb:a8:7a:31:93:8a:19:a0:6f:19:
                    79:50:37:e6:2d:d4:c2:ba:3d:8b:8e:30:4a:56:87:
                    9e:a6:99:22:93:f2:43:6c:45:b1:4e:4d:66:1a:c7:
                    2d:89:70:89:3d:c9:aa:d1:e8:3c:c8:aa:43:23:6a:
                    d3:fa:80:28:ab:0b:3e:d1:fc:d1:e5:34:40:36:84:
                    a7:0c:38:0d:25:df:be:00:fb:c7:43:91:26:de:a5:
                    ed:8e:d4:c3:64:27:a1:c7:62:a6:54:22:a7:c8:db:
                    5f:b6:35:81:1d:82:c7:bc:59:dd:cf:16:92:cb:59:
                    b6:1b:c2:53:69:c3:dd:ca:02:ff:69:da:b9:75:b2:
                    56:31:df:3f:8b:08:a3:83:06:2f:e3:0d:a7:e2:68:
                    af:ce:21:90:74:d3:84:25:62:6f:d3:6b:47:5b:0e:
                    12:6f:23:77:11:b6:d8:07:0c:dd:93:92:b8:f1:bd:
                    3a:41:86:fd:09:f2:75:15:fc:f8:5f:df:bf:c2:79:
                    54:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:16:CD:6C:0D:80:C0:02:73:9A:C2:40:1A:02:4C:94:75:42:5E:06
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/81466a00-4ef6-4b26-ad84-e79fb496219c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f00:8080::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:80:13:40:66:e4:9e:66:4f:36:21:2b:e3:60:5d:cf:fe:2d:
         2f:37:4a:98:ef:24:f6:04:83:9b:c8:a2:1e:e7:ed:b7:f4:f2:
         cf:a2:38:b5:b2:6f:e0:fb:95:43:2a:83:44:01:bb:08:23:08:
         8f:8f:66:dd:86:9a:b6:08:b4:94:e1:bf:f1:ee:7b:04:7a:73:
         94:67:0e:8c:3b:b1:3c:28:99:05:c2:c5:a4:41:3d:5c:0f:96:
         df:bb:f6:7a:f8:48:11:9a:46:2a:19:22:96:82:42:7e:7b:aa:
         7d:94:8d:d4:87:5c:7e:aa:2f:3b:e0:98:ac:f2:36:ff:03:1a:
         ec:1a:73:32:ba:fb:53:0d:42:06:9e:5c:c6:30:4b:b7:a1:92:
         93:3a:2d:88:18:1c:ac:ec:d6:82:3d:95:c5:7e:c3:f6:89:25:
         01:e3:07:31:e5:d4:0b:8c:56:15:30:e0:c1:86:22:5b:ef:da:
         e1:8e:75:14:17:f8:cd:ee:d0:7b:aa:68:90:a7:f0:4c:67:70:
         bf:14:2b:3f:66:4b:b2:3c:03:6f:ff:b3:6f:5b:1d:c8:4c:f5:
         4a:16:b6:95:15:4d:cf:50:8d:dc:f8:90:3b:ef:80:a2:9c:47:
         c1:7a:f1:0a:35:86:e2:42:d9:14:db:c2:36:ce:6d:7e:ae:a7:
         19:3a:84:8e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 1 04:58:00 2025 by rpki-client