Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/adb258f2-061e-4e94-b6ee-d4de9405ec61.roa
File:                     adb258f2-061e-4e94-b6ee-d4de9405ec61.roa (raw, json)
Hash identifier:          J/gj6B+WcxJ4/EMg2nFLY9OKYr2o6m3XA8e+V/s3c7Y=
Subject key identifier:   20:7A:95:24:4C:4F:A9:DD:E8:3F:51:2C:48:93:1E:97:01:02:13:BB
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       7E91C3B9BE0877BA1D428FC282C2A8CE488706F3
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/adb258f2-061e-4e94-b6ee-d4de9405ec61.roa
Signing time:             Tue 05 Aug 2025 18:40:17 +0000
ROA not before:           Tue 05 Aug 2025 18:40:17 +0000
ROA not after:            Tue 09 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:8000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 21 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:91:c3:b9:be:08:77:ba:1d:42:8f:c2:82:c2:a8:ce:48:87:06:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Aug  5 18:40:17 2025 GMT
            Not After : Sep  9 23:59:59 2025 GMT
        Subject: serialNumber=052683040068c5c84c1da0181bd8dc0dab2020a5b0b3e4fb973c011321a03d43, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9c:fb:b9:12:d8:81:6d:68:6c:60:02:50:4e:
                    b4:8f:d2:9d:6f:58:14:ab:9d:51:ed:d3:4e:eb:f0:
                    e2:d1:8b:cd:91:a2:4b:d2:2d:64:b6:e7:55:e2:cc:
                    9c:9d:b7:cc:80:82:88:cc:b1:df:8f:d7:23:3e:9f:
                    19:dd:f2:91:a9:5e:b2:17:20:04:4a:ca:cf:8b:31:
                    89:7f:85:af:78:9e:b0:bd:95:9c:e8:6e:e0:e8:c7:
                    61:7f:1d:b5:2f:97:9d:4c:75:b6:4d:6d:5b:a4:a2:
                    6d:5a:56:3a:ec:7f:f0:b8:2b:47:9c:84:a3:47:bb:
                    c2:0a:80:bc:6e:db:6b:8c:e5:a9:b2:68:56:92:9f:
                    47:7f:57:26:9a:05:6c:f3:1a:41:72:59:d6:b3:0f:
                    4f:a8:b2:19:ac:ed:2a:dd:e0:26:3b:b2:18:eb:72:
                    24:e0:40:60:22:18:29:1b:f2:d1:d1:0a:2c:49:26:
                    cd:c3:b0:c0:7a:3d:fb:9e:51:69:af:98:63:a1:eb:
                    4e:70:83:ae:8c:02:78:62:4d:98:89:7e:98:7f:99:
                    4c:de:2f:ce:e7:24:b4:8a:67:1c:e1:f1:d5:ff:91:
                    65:d0:bc:a9:e4:2a:77:eb:4b:14:4e:90:39:a1:fc:
                    17:49:1f:55:ad:44:c4:4f:4c:c6:1d:c7:10:f8:68:
                    b1:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:7A:95:24:4C:4F:A9:DD:E8:3F:51:2C:48:93:1E:97:01:02:13:BB
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/adb258f2-061e-4e94-b6ee-d4de9405ec61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         3f:b6:db:a6:46:1b:22:c5:94:25:58:29:c6:e3:a0:f4:bd:ea:
         bd:39:6d:54:05:ab:9a:f8:2b:62:dc:2c:a6:4c:6e:79:bc:64:
         4a:a9:a7:86:27:35:4f:1f:b0:0d:03:a4:ad:31:26:0e:69:c7:
         2a:0b:3d:d3:57:44:b9:f1:a4:80:d9:e7:56:9a:ca:61:27:bd:
         cb:32:07:e9:fc:44:0b:b4:5a:89:f0:07:4d:31:f4:f9:ba:34:
         ef:a4:ca:86:a8:1b:03:b0:5c:e8:42:f1:d8:68:51:74:4e:68:
         0e:24:db:33:0e:9c:29:0d:6f:b2:8c:98:88:6b:1e:fd:ff:e7:
         93:b1:3c:14:6c:22:e6:12:cf:f2:5c:08:af:97:00:65:ab:e3:
         ef:f2:2e:d9:6f:e3:dd:1c:4d:3b:6f:ae:ca:84:ad:c6:a4:a6:
         bb:7a:cf:15:0c:4a:79:ac:01:ad:2d:36:08:e8:c5:1a:a7:8b:
         2e:d1:4c:16:96:05:da:90:00:9d:19:0d:5c:cd:a8:f6:1b:12:
         94:72:48:1f:8b:26:a1:d3:7a:45:9b:d4:ca:68:6f:b7:51:06:
         77:05:12:f5:2c:d7:e7:0b:f2:aa:ec:58:aa:3e:e8:c3:87:8b:
         4e:ba:80:00:04:b2:c6:02:b7:ed:dc:7a:62:b2:15:2b:33:2c:
         fd:ba:aa:3c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Aug 20 10:43:42 2025 by rpki-client