Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a272600a-9414-4881-b3df-55f7c5722f94.roa
File:                     a272600a-9414-4881-b3df-55f7c5722f94.roa (raw, json)
Hash identifier:          HCxJxpMl3/3axz1ZA1A7+dqK8DnR+stEcniTx1HaMUo=
Subject key identifier:   DE:72:43:51:12:99:A4:58:81:18:CB:87:E4:51:DA:34:3E:61:B6:9A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       38830ED2EC0D64C6E2DB0FD1AEA0E7F419B8841B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a272600a-9414-4881-b3df-55f7c5722f94.roa
Signing time:             Fri 29 Aug 2025 15:41:32 +0000
ROA not before:           Fri 29 Aug 2025 15:41:32 +0000
ROA not after:            Fri 03 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f18:c000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:83:0e:d2:ec:0d:64:c6:e2:db:0f:d1:ae:a0:e7:f4:19:b8:84:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 29 15:41:32 2025 GMT
            Not After : Oct  3 23:59:59 2025 GMT
        Subject: serialNumber=628ef7bfd17749d0bcbebb066cc6cd1bf98d101b4589df0033c769b3d0241eb7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:69:62:28:6c:93:fa:1e:94:0d:d9:cf:ab:9a:
                    91:f2:18:f8:d3:dd:96:02:4b:d5:92:a2:c7:c0:40:
                    4a:a9:66:19:87:0b:60:99:4a:df:9a:54:a0:58:d7:
                    fb:13:90:78:a5:6a:ba:79:8d:5f:0f:ac:61:de:ef:
                    f8:78:0a:fa:8f:a2:b2:93:6a:b3:ed:ac:86:47:76:
                    16:42:21:fd:63:5d:6a:07:ef:75:26:7a:1b:0c:91:
                    70:eb:c8:74:d7:f9:df:9d:68:80:34:03:f7:8b:3e:
                    74:6b:c2:28:59:a5:bc:68:39:92:87:07:74:e3:3f:
                    13:e1:47:5d:54:72:e9:1a:f3:dd:e3:b1:d0:1e:7e:
                    e8:62:18:88:06:70:32:c3:e2:27:f0:f8:ff:31:43:
                    04:f5:10:83:9d:45:81:83:90:e5:b7:b7:0e:76:f8:
                    9e:74:da:7b:24:57:31:ce:8e:7a:1d:f3:a2:40:f8:
                    5f:f3:99:d2:65:67:c4:a1:0e:ac:87:03:69:7d:44:
                    f2:73:c5:99:c7:51:3b:3b:a5:49:ec:f5:81:0c:2b:
                    cf:21:d6:16:63:10:64:5f:c7:32:ed:29:e8:d1:3a:
                    49:a3:91:3f:b0:31:be:ec:52:f9:68:0a:25:54:ce:
                    1a:8c:e8:b7:1e:fe:50:d3:fa:83:45:fa:ff:b5:53:
                    02:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:72:43:51:12:99:A4:58:81:18:CB:87:E4:51:DA:34:3E:61:B6:9A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a272600a-9414-4881-b3df-55f7c5722f94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f18:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         93:fc:0d:81:e0:5a:88:c1:5a:05:ec:19:8b:a9:df:08:e2:30:
         32:d7:b7:90:a3:2d:53:db:ec:47:c5:ae:00:e8:67:b2:4d:0a:
         88:4b:d2:d8:92:b5:a1:42:b2:de:79:26:68:18:bb:ab:33:a5:
         52:76:54:71:24:a0:e4:1c:9f:d4:df:a5:ef:fe:cd:54:9a:a9:
         37:71:bb:50:4a:9e:03:4d:8e:a9:cc:a8:cc:ea:b6:99:45:ed:
         fc:e8:57:1e:8a:5b:1c:fb:e9:65:49:2b:a6:94:a3:41:0f:76:
         8a:e9:d4:4e:86:77:9a:16:3d:bb:62:a8:9e:60:58:9a:e6:34:
         39:80:f7:79:73:2c:c4:c0:aa:ab:ba:d5:4b:0e:d9:e7:13:6b:
         4f:b8:cf:5f:09:f7:1a:9b:de:3a:0d:d9:76:13:91:ed:9e:86:
         e6:34:1a:c0:4f:a0:e1:19:88:86:14:10:c4:ba:51:50:21:1c:
         59:a2:6b:60:3a:ed:03:07:58:bc:c9:54:df:3c:95:d8:f5:2c:
         35:63:10:17:6d:8d:36:78:bb:49:be:e8:f2:ab:9d:f7:a5:2c:
         f0:df:7c:e0:b9:22:e2:76:98:e5:21:ce:3d:ba:38:0b:00:2c:
         dc:07:60:c4:6e:49:18:44:60:31:f2:d0:81:2b:ab:d8:06:cf:
         16:d5:66:3d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Sep 6 14:11:04 2025 by rpki-client