Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c636934a-c7cc-4c0f-acb1-a74b2500994d.roa
File:                     c636934a-c7cc-4c0f-acb1-a74b2500994d.roa (raw, json)
Hash identifier:          IkyFtGhMi5M2AJokYYI3GTfa1xnF87dgCL2mfwu+ZFI=
Subject key identifier:   2E:72:0E:C3:7A:56:91:9D:2D:B8:E8:F2:3D:A3:7E:95:DE:E1:14:73
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       676C864EBAC929054B811A1F7E3D3F3DCC7FDD21
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c636934a-c7cc-4c0f-acb1-a74b2500994d.roa
Signing time:             Tue 26 Aug 2025 16:01:20 +0000
ROA not before:           Tue 26 Aug 2025 16:01:20 +0000
ROA not after:            Tue 30 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f38:3480::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:6c:86:4e:ba:c9:29:05:4b:81:1a:1f:7e:3d:3f:3d:cc:7f:dd:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 26 16:01:20 2025 GMT
            Not After : Sep 30 23:59:59 2025 GMT
        Subject: serialNumber=5da66177d8fc235d5336c6da7afb1c4d06ee367c5039d2e84280c4fba40a209d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:df:fe:02:88:d0:f8:cc:9b:7e:22:a0:79:61:
                    e0:26:05:88:3a:27:44:d5:82:2a:b3:ce:91:6f:9c:
                    90:0c:07:35:e0:5b:de:0c:b8:26:22:77:12:bb:6c:
                    59:f0:cb:c3:19:ca:3d:d9:b1:cd:eb:75:d7:12:85:
                    a0:67:bf:64:47:8b:5e:65:c3:eb:92:c4:31:37:b8:
                    58:b7:f9:66:37:29:36:2f:ce:1a:86:0f:cb:dc:64:
                    cc:bf:91:73:2f:b0:0b:9b:a8:ba:05:ce:ac:4f:47:
                    35:75:b3:24:b9:e2:5f:62:17:5d:ca:01:6d:20:b3:
                    dc:83:33:21:1c:1c:46:74:39:c6:d6:45:74:16:8c:
                    51:9f:48:97:d9:02:09:19:3e:46:cc:53:14:08:54:
                    85:8e:cc:f1:5b:29:a0:dd:df:ba:b7:8f:04:75:e6:
                    68:e3:0d:61:03:ec:c5:b4:ec:35:8b:66:61:44:4c:
                    b6:f6:f0:13:c0:03:b0:af:ee:06:29:55:ab:7f:fd:
                    81:26:7d:fd:82:08:67:c2:07:6b:31:63:24:b8:ff:
                    9f:6f:16:6e:0a:b8:29:cb:48:00:98:31:b9:ed:8d:
                    00:89:e7:20:46:c9:b2:48:6b:48:92:82:2a:81:a5:
                    33:3e:78:43:2d:72:76:4f:37:11:6f:24:aa:b4:05:
                    8f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:72:0E:C3:7A:56:91:9D:2D:B8:E8:F2:3D:A3:7E:95:DE:E1:14:73
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c636934a-c7cc-4c0f-acb1-a74b2500994d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f38:3480::/48

    Signature Algorithm: sha256WithRSAEncryption
         a0:36:ba:3e:55:81:4c:57:99:e3:a7:82:b9:d6:da:2e:06:62:
         64:63:dd:18:59:38:d4:46:11:db:2a:94:0a:09:a1:22:43:97:
         32:a8:bf:d1:44:54:ca:b5:19:b8:e6:c0:df:b5:dd:25:21:1b:
         78:47:94:57:10:6e:43:69:13:bc:d4:9a:ac:4c:d4:0c:07:1a:
         d6:fe:55:40:e0:fd:fe:70:c9:8f:64:e1:3f:a0:da:fb:24:6b:
         b1:82:4f:ef:bb:0b:5e:6c:9d:00:f0:5b:0a:3e:96:ca:9d:6a:
         67:53:e6:02:04:96:1e:42:80:af:50:85:16:40:be:b9:0f:ff:
         01:94:81:b9:1b:a7:be:b4:da:fd:1d:a8:0c:95:5b:c6:88:b4:
         8f:0a:01:b1:90:be:68:a3:23:07:6c:75:f8:41:bc:08:b0:01:
         e2:54:b2:a3:91:60:90:eb:87:38:a3:56:03:a2:ce:1a:88:b4:
         a5:b1:5d:c2:e8:3c:6a:af:08:a1:8f:83:b2:a2:a1:85:ef:dc:
         5d:9b:2a:43:18:be:bc:f1:28:e8:5d:81:40:25:b6:60:f5:4e:
         08:ce:5c:4d:23:10:f6:5c:a2:d7:49:f3:ff:5d:29:e8:02:74:
         70:be:42:50:e9:a2:5c:4d:c8:d4:00:c9:66:be:5c:5a:aa:a4:
         72:de:f4:78
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Sep 6 14:18:49 2025 by rpki-client