Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e8abf14e-6680-4c4c-89ee-4b6e6a375e4a.roa
File:                     e8abf14e-6680-4c4c-89ee-4b6e6a375e4a.roa (raw, json)
Hash identifier:          gXVHVeaLT02e5TSWHM3ej7w88nef6Jlp+fs5pHQ53Ak=
Subject key identifier:   8A:8C:FF:CF:F3:6A:5F:0C:9D:38:CB:2A:9D:4A:7D:66:91:6D:2C:4F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       23A041F7F5909E7DD1A830CD7B6D33C7AF2DB1B8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e8abf14e-6680-4c4c-89ee-4b6e6a375e4a.roa
Signing time:             Mon 19 May 2025 16:21:26 +0000
ROA not before:           Mon 19 May 2025 16:21:26 +0000
ROA not after:            Mon 23 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff7:c080::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:a0:41:f7:f5:90:9e:7d:d1:a8:30:cd:7b:6d:33:c7:af:2d:b1:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 19 16:21:26 2025 GMT
            Not After : Jun 23 23:59:59 2025 GMT
        Subject: serialNumber=5c2e7c1719d6c020c452e8f773f0713f0b26dc59f17393508eedef7fd4ae3ab6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3e:ea:8b:46:47:22:1f:cb:b4:70:d7:3a:f4:
                    de:ab:0b:59:8f:aa:e6:9d:ee:41:75:0d:89:da:6f:
                    df:f6:7a:a0:f0:e0:fa:70:76:36:2b:0e:50:df:06:
                    d2:29:46:39:e7:2d:8e:09:a7:02:4f:0f:22:2b:ca:
                    1f:7f:af:2e:77:4c:e4:a1:81:0a:86:62:9a:06:28:
                    0d:1d:7d:5e:39:65:8c:dc:ef:4e:8c:6d:12:8d:95:
                    06:54:b9:aa:a5:95:55:c2:27:7c:3e:f6:46:0e:09:
                    31:0e:75:e8:ac:44:db:48:66:84:73:3c:80:ca:04:
                    f2:4e:e1:6d:92:09:2f:c5:88:32:04:81:45:e9:a1:
                    8c:2a:51:88:17:32:ce:f8:39:b1:b0:fb:d7:91:0a:
                    73:bb:ad:b7:9d:38:5d:50:6d:be:59:cd:4e:30:28:
                    22:df:8c:2d:43:b8:20:9b:49:3b:ee:fb:4d:0f:74:
                    c3:fb:5b:90:45:9c:b4:10:3a:23:0a:ff:67:93:fc:
                    c9:0d:fb:4a:80:67:50:61:6b:a6:36:da:17:1c:37:
                    a9:b0:db:29:19:f5:76:35:90:99:c6:83:f0:6c:7b:
                    ad:d8:b4:13:92:75:53:30:11:ac:10:53:66:76:24:
                    17:47:c3:1f:9d:62:6d:a9:fb:3a:83:53:94:26:16:
                    6a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:8C:FF:CF:F3:6A:5F:0C:9D:38:CB:2A:9D:4A:7D:66:91:6D:2C:4F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e8abf14e-6680-4c4c-89ee-4b6e6a375e4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff7:c080::/46

    Signature Algorithm: sha256WithRSAEncryption
         5c:51:9a:db:89:8c:c5:a3:7f:cf:eb:05:51:22:c1:29:07:d4:
         fb:6d:45:4e:3e:b9:3f:7e:24:3d:a9:66:06:cf:f7:59:54:65:
         47:bc:f4:e1:db:43:a8:f3:ac:b1:88:10:cf:20:82:81:6b:95:
         94:b0:66:ef:05:25:9e:51:9c:23:6d:d2:ec:c7:2a:b0:3f:7e:
         f4:e0:51:ee:f1:6f:95:66:17:f6:dc:f7:b0:89:27:28:2b:3c:
         10:19:8f:aa:65:4a:ce:ab:c8:1b:1d:9d:c3:94:96:74:6a:c6:
         10:eb:6e:b0:74:b4:65:f6:a3:3e:ec:80:c4:4f:7b:bc:e1:3d:
         aa:13:8c:06:c4:e7:94:d1:4f:28:d2:ff:32:00:65:be:b7:ec:
         bc:a2:11:23:fa:16:7c:9b:d2:d9:86:06:a3:36:e9:3d:9d:56:
         44:79:b6:46:3c:f5:7e:44:8d:3f:d3:8f:b0:3d:9f:76:31:81:
         e2:1d:3d:2a:53:00:60:fa:c1:24:3e:ba:33:b2:58:09:32:33:
         06:2e:e6:0e:08:1f:7d:16:d3:68:dc:fb:8f:d0:52:f3:8f:60:
         ff:e0:9d:b6:23:ff:14:eb:d5:29:53:74:0a:63:e3:f0:53:5e:
         c2:d1:43:35:32:3f:a9:5a:0e:3c:f9:87:a4:4a:61:fd:2a:ad:
         bb:cd:2a:91
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 1 04:29:20 2025 by rpki-client