Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc9f5c91-e465-4ceb-a73b-236ab84fd8ce.roa
File:                     cc9f5c91-e465-4ceb-a73b-236ab84fd8ce.roa (raw, json)
Hash identifier:          z8+aJbvX6OF3FC13P23Cd8d1VGGsAltUls00JYSgxow=
Subject key identifier:   A8:41:37:F2:F2:14:FA:0B:FB:07:8A:72:4B:31:10:C1:70:8F:77:2D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       B2A84DD04232043F60E6A9D1339A02AD0DBFB0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc9f5c91-e465-4ceb-a73b-236ab84fd8ce.roa
Signing time:             Tue 26 Aug 2025 16:01:18 +0000
ROA not before:           Tue 26 Aug 2025 16:01:18 +0000
ROA not after:            Tue 30 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f00:a4c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            b2:a8:4d:d0:42:32:04:3f:60:e6:a9:d1:33:9a:02:ad:0d:bf:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 26 16:01:18 2025 GMT
            Not After : Sep 30 23:59:59 2025 GMT
        Subject: serialNumber=40bd2774250b640cc83ff684df305db5d66c2095090c0e563bbcb6faf45a1841, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2e:70:b9:d6:a7:fe:b7:f7:da:ea:93:80:5d:
                    71:cb:2a:14:3e:72:60:85:6c:a1:d0:39:2f:00:43:
                    81:fe:3e:9c:cc:5c:72:e6:4b:86:8b:10:23:59:5e:
                    75:41:5c:dc:aa:6b:b9:b3:99:65:eb:92:c1:87:e0:
                    f7:cf:7f:a0:11:c3:47:39:75:f4:d6:99:10:b4:8e:
                    6e:85:9d:05:71:9c:47:43:4c:7e:b8:0b:46:d2:f9:
                    81:53:ad:c4:22:46:9c:8b:56:77:ee:d3:ce:31:09:
                    78:e1:aa:9d:38:39:07:ae:45:f8:20:76:32:b2:89:
                    7f:84:29:62:f1:35:7e:46:69:c9:52:e9:af:93:64:
                    78:ab:3c:33:ea:81:99:fe:f9:9b:ff:bb:02:4e:0a:
                    ed:87:33:92:6a:76:00:00:17:34:26:50:32:51:96:
                    59:f2:4e:28:ee:4b:cb:6d:3d:1e:bc:50:64:7d:58:
                    96:f0:ed:bb:39:56:96:da:91:7c:96:15:63:87:12:
                    9d:98:4c:6c:95:d4:c9:30:b4:33:5c:6c:7b:92:e8:
                    44:97:2c:86:a7:c1:1f:80:f6:e5:e0:fe:44:65:3b:
                    aa:c1:f1:be:62:e8:0e:01:db:51:5f:82:4f:3d:47:
                    ed:7b:95:1a:25:4d:1d:44:59:10:9e:ea:b2:ef:92:
                    54:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:41:37:F2:F2:14:FA:0B:FB:07:8A:72:4B:31:10:C1:70:8F:77:2D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc9f5c91-e465-4ceb-a73b-236ab84fd8ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f00:a4c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         44:8b:59:20:b8:a9:ea:21:12:c7:31:2d:bc:c0:90:a1:59:71:
         c3:b8:90:f6:6d:fc:98:84:d8:77:52:8b:11:ef:54:4c:61:19:
         68:03:67:75:97:37:c0:f4:9f:d2:e5:e9:9e:7a:ce:dd:cd:0a:
         dc:6c:d6:c2:0f:56:55:36:b3:28:0f:f7:e5:5a:26:63:23:b6:
         4e:c2:b4:45:23:f2:da:ff:b6:0b:55:2e:14:09:a6:e4:a2:14:
         32:5b:6d:f5:5f:59:c0:b0:58:6b:e3:2c:6e:84:af:ae:fd:66:
         25:f2:90:41:40:01:2d:b1:cc:b0:d0:9c:16:b3:a2:50:13:d6:
         ef:2a:13:da:1b:a5:1c:d6:e2:3d:09:47:cf:6f:e9:9d:f8:20:
         97:c8:f1:3f:e6:a3:6e:98:97:d0:01:b8:42:ff:29:25:4f:5a:
         d3:58:d3:bc:5f:45:ff:6d:9d:05:7c:60:b3:b1:55:f4:d5:ec:
         0f:44:82:7a:56:2c:9a:2e:3e:dc:5b:ce:96:21:45:9a:70:85:
         95:6a:d1:25:12:80:79:ed:64:97:81:33:9a:ba:b9:9e:1e:70:
         cf:bf:7f:15:c5:e0:6b:57:3c:c1:da:8e:ca:cd:84:73:3f:99:
         03:44:2e:6e:b4:93:ce:c1:73:3c:94:d7:af:6c:ad:07:dc:0c:
         91:85:08:d9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Sep 6 14:11:20 2025 by rpki-client