Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e26cb5df-5e86-4ccb-a96a-cb08ad75a489.roa
File:                     e26cb5df-5e86-4ccb-a96a-cb08ad75a489.roa (raw, json)
Hash identifier:          JRmOwYTSmCqGl3uEWURlXJT1dD/IHXTU0RyCnd4H0M0=
Subject key identifier:   58:A0:F6:94:8A:FE:A5:94:FF:D6:BF:04:5B:FE:57:43:31:4E:A9:45
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7A1ECEEBFA1966F32EEC9AFC1DADF6D7C6A5B4E8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e26cb5df-5e86-4ccb-a96a-cb08ad75a489.roa
Signing time:             Fri 23 May 2025 00:21:24 +0000
ROA not before:           Fri 23 May 2025 00:21:24 +0000
ROA not after:            Fri 27 Jun 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1fef:a400::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:1e:ce:eb:fa:19:66:f3:2e:ec:9a:fc:1d:ad:f6:d7:c6:a5:b4:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 23 00:21:24 2025 GMT
            Not After : Jun 27 23:59:59 2025 GMT
        Subject: serialNumber=7e3a67c908de10519719a01da6f170ff9858cb1548dd706e31cc0d9edc9cc458, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:60:85:a9:61:c3:7a:a5:9f:82:65:d3:5a:1f:
                    00:31:a4:e2:4d:25:93:2e:98:41:f0:bf:a8:ac:0e:
                    af:8d:fa:19:f8:72:e8:a1:d5:3c:02:71:f3:3b:7a:
                    2a:2e:5b:57:b6:85:cf:09:95:8f:be:ca:70:9d:e2:
                    3b:52:77:62:55:be:48:ad:1a:15:f5:82:c9:b1:72:
                    74:da:fb:fd:b1:1f:54:cf:fe:7d:db:01:dc:07:2e:
                    7f:76:f6:f7:21:42:b0:30:4d:4a:b4:e1:46:ff:5a:
                    a0:22:29:0c:f5:d3:2e:b1:3c:af:dd:8d:e1:ab:2c:
                    94:a6:ac:24:26:ac:d0:b3:1d:b3:94:69:dd:3f:e6:
                    0b:70:17:e2:d8:c3:6f:c3:c7:d3:c9:29:bb:05:5e:
                    6a:11:0f:fe:80:fb:18:57:07:f2:d9:39:66:57:cc:
                    53:43:79:ba:73:08:5d:f0:bc:fd:24:40:ce:f2:fc:
                    65:00:86:fd:e9:34:eb:68:83:49:5c:b8:c4:42:21:
                    3b:67:cf:40:64:0a:3c:3d:28:b7:95:21:bf:10:fb:
                    00:1c:ac:14:c7:cd:14:ea:68:d9:00:f5:ab:fb:26:
                    8e:a2:49:5f:75:45:cc:ee:8e:fb:2a:dd:49:21:80:
                    80:98:b5:57:1f:c1:18:ee:5b:57:55:4d:aa:35:1b:
                    8f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:A0:F6:94:8A:FE:A5:94:FF:D6:BF:04:5B:FE:57:43:31:4E:A9:45
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e26cb5df-5e86-4ccb-a96a-cb08ad75a489.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fef:a400::/40

    Signature Algorithm: sha256WithRSAEncryption
         81:53:b4:55:85:22:dd:e9:a7:2a:2e:34:8a:0d:14:e8:d6:86:
         54:6b:be:37:09:95:ff:fb:4b:87:51:46:0a:f1:ad:46:4d:19:
         31:4b:b1:66:d0:94:fa:f0:7e:92:cc:30:14:14:50:86:48:a8:
         7c:d5:40:49:f5:db:ff:43:8e:ce:b6:5e:f9:2f:15:0b:6e:6a:
         e4:4f:23:6d:9f:b5:11:c3:b4:88:29:a4:bc:07:86:1a:42:84:
         19:52:a3:53:93:18:a0:0a:ce:21:5f:b1:1c:b6:bf:39:32:93:
         7d:34:16:90:14:0b:59:a3:65:ef:ce:2b:b4:df:22:5f:46:a8:
         c2:8d:e4:c3:e3:67:d8:2f:be:b8:b1:e5:18:8e:ef:98:a3:98:
         ad:fc:bc:0a:2e:16:66:ab:72:23:49:40:1b:b8:ef:96:e4:6d:
         fe:39:15:26:e6:0d:c3:d4:2f:4d:65:59:84:7f:e3:06:62:64:
         fa:3d:41:d0:08:e5:48:d2:2a:03:5e:93:f9:ff:e8:44:10:cc:
         13:db:6f:02:6c:e4:70:e8:ab:69:a8:2f:11:f0:79:e1:e4:f0:
         1b:cb:7c:9a:2e:58:b4:66:ea:c8:4e:82:11:a1:ee:fd:f6:d5:
         75:52:b8:ec:ec:49:6c:2b:4e:23:5e:3a:1b:7f:6c:bb:10:28:
         93:c1:4d:bb
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 6 05:31:09 2025 by rpki-client