Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e1f6bf7e-9565-4298-9b05-aadfb34edb3c.roa
File:                     e1f6bf7e-9565-4298-9b05-aadfb34edb3c.roa (raw, json)
Hash identifier:          V9CeWH8m3tnZm7xng2coNoMND3jusAi7eDZqxWS4kVc=
Subject key identifier:   F4:6E:03:48:76:00:93:35:A8:3B:F4:82:BC:71:B0:E1:82:95:34:55
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7EA491E14773A61502DDBC724B3D0E676971E6F4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e1f6bf7e-9565-4298-9b05-aadfb34edb3c.roa
Signing time:             Fri 16 May 2025 17:02:13 +0000
ROA not before:           Fri 16 May 2025 17:02:13 +0000
ROA not after:            Fri 20 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f61:3440::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:a4:91:e1:47:73:a6:15:02:dd:bc:72:4b:3d:0e:67:69:71:e6:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 16 17:02:13 2025 GMT
            Not After : Jun 20 23:59:59 2025 GMT
        Subject: serialNumber=6f258890405792bd4d7aa23adf5aa0abdfaca9c20857b34e3ed10c79d91c84ea, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:93:63:fa:c3:ec:71:a7:6c:e0:07:2b:e9:5c:
                    a8:68:fa:89:40:dc:28:fe:27:2b:59:23:b9:60:5f:
                    4a:f8:f1:5a:ca:c0:42:69:23:3c:fe:17:93:c2:33:
                    c4:76:ee:f9:28:b2:af:20:45:1f:0c:d0:76:ff:86:
                    73:95:0e:14:4a:9f:c5:c1:50:e8:e5:c2:dc:4c:7e:
                    53:bb:20:d7:6e:a4:33:67:66:2f:1f:00:d6:ea:0b:
                    b6:2e:72:c2:3f:64:50:22:b1:b5:bb:e9:eb:4f:01:
                    64:f8:73:5e:5b:c9:2d:2f:d8:f8:71:97:5b:83:11:
                    a9:63:73:fa:ba:35:87:72:d2:b8:0a:38:b2:9a:99:
                    c3:07:89:c6:54:a4:c5:d0:4a:24:0e:67:d8:10:27:
                    fc:73:28:c5:d3:20:9c:69:4a:a2:1f:bd:6b:ad:6b:
                    09:4a:8a:60:bf:a3:d8:ea:2c:ca:7f:02:ae:70:95:
                    81:2e:5d:07:a2:98:7c:1f:87:4b:c6:fd:4e:a1:43:
                    e2:37:13:1a:2c:97:ed:5e:a0:a7:a5:6c:1b:14:1a:
                    90:75:f4:dc:5f:c0:ad:90:0b:2a:dd:32:da:9f:98:
                    7b:d8:86:ee:13:31:70:2e:39:37:6f:ed:3b:e7:38:
                    d5:68:94:14:48:90:0d:fc:57:55:b0:5f:5e:1c:df:
                    2e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:6E:03:48:76:00:93:35:A8:3B:F4:82:BC:71:B0:E1:82:95:34:55
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e1f6bf7e-9565-4298-9b05-aadfb34edb3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f61:3440::/48

    Signature Algorithm: sha256WithRSAEncryption
         97:ee:85:27:9b:5e:46:9e:3e:48:7f:ec:7c:56:31:e0:ac:c9:
         49:ab:9e:cc:86:31:ae:96:45:97:07:40:fd:e3:69:f4:ad:61:
         26:b5:07:10:4e:af:8b:72:3b:75:f3:50:ee:ef:67:e7:44:dd:
         34:c2:5e:f9:50:e1:be:ba:14:79:cb:e4:50:bc:9f:64:99:93:
         07:86:80:99:ea:27:b0:88:8a:0d:38:15:16:7f:77:f0:60:de:
         bb:e1:67:03:e5:03:d3:e1:8f:bf:28:f9:70:5b:1d:00:fa:36:
         36:29:2c:cf:34:95:04:37:4d:8b:7c:94:ed:de:03:18:f9:42:
         cc:77:54:ec:25:ed:9a:cd:ce:78:22:40:19:2b:04:d0:a8:f0:
         ac:36:dd:b6:5a:23:26:cb:e8:e3:45:6f:51:e5:da:e0:45:ab:
         f5:f7:c3:3b:f4:2c:8d:6d:e3:63:4c:97:6d:e8:68:83:62:33:
         62:2b:be:b8:ef:08:01:1d:93:1c:9a:fa:76:c1:35:01:ec:c9:
         af:66:ae:0e:27:9a:0c:ca:ca:1b:80:81:0d:a4:45:08:34:3d:
         12:01:bd:f9:34:cb:a1:3f:88:c6:af:21:03:bd:ff:c9:84:2c:
         91:bb:b0:c8:07:12:a7:3c:fa:83:6f:85:c1:ea:99:d5:36:d7:
         83:fb:49:ef
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 1 04:57:11 2025 by rpki-client