Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/2592ade6-505a-4e24-928b-9a1e71b309ae.roa
File:                     2592ade6-505a-4e24-928b-9a1e71b309ae.roa (raw, json)
Hash identifier:          V7m4Q44l/f/AggpsxPFMLlttMX2dYfHaoH38DEvKGXA=
Subject key identifier:   1C:DE:ED:BC:53:D9:42:47:EE:F7:DC:FC:06:6A:FA:5E:C0:6E:67:6E
Certificate issuer:       /CN=6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267
Certificate serial:       0E91CAD6CFA76A2A76B0009859D0C8BB4537B361
Authority key identifier: 6D:CA:65:D0:71:4D:7E:F2:56:90:BC:09:13:D3:54:DB:AC:89:2A:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/2592ade6-505a-4e24-928b-9a1e71b309ae.roa
Signing time:             Mon 01 Sep 2025 19:10:04 +0000
ROA not before:           Mon 01 Sep 2025 19:10:04 +0000
ROA not after:            Mon 06 Oct 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        2605:c940::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/7276b2fa-548d-4970-8314-8d73945c34d8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/7276b2fa-548d-4970-8314-8d73945c34d8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:91:ca:d6:cf:a7:6a:2a:76:b0:00:98:59:d0:c8:bb:45:37:b3:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267
        Validity
            Not Before: Sep  1 19:10:04 2025 GMT
            Not After : Oct  6 23:59:59 2025 GMT
        Subject: serialNumber=d0bbb6347faf7b37b83dc6f4fde8c7afb7c260c4afefa038be6ea56b14a3d458, CN=15f1683a-c0c2-4266-9a96-ecf9eba3239c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:af:77:3e:14:94:3b:2b:e6:9e:6d:d7:29:dc:
                    01:a4:53:13:f7:54:0c:8b:d0:ca:b7:0f:5c:a7:b0:
                    19:5a:86:80:51:61:a3:90:6c:9c:60:10:19:9c:89:
                    d6:3e:b6:24:a7:d9:15:85:38:1f:ff:a8:68:29:ed:
                    9b:39:fd:df:db:b3:27:d5:7d:34:61:1c:74:9f:c8:
                    a6:a2:e1:44:da:29:d6:63:fa:b0:85:b2:70:f3:f6:
                    76:b6:9c:ae:a7:a8:6b:5c:d9:96:5c:0e:74:bc:34:
                    83:57:f6:50:a7:76:41:c2:0a:fa:58:dc:60:69:fb:
                    4e:9f:9a:ae:69:06:f5:d8:7d:5b:c6:5d:00:88:50:
                    6e:cf:f0:68:81:c0:86:39:52:fe:4f:a0:95:a7:99:
                    4d:48:18:0e:8a:5b:72:7a:91:be:30:ca:c4:94:23:
                    8d:76:e9:6c:2b:93:f0:74:da:20:ce:4c:43:20:c5:
                    85:11:99:bb:73:6f:f5:f5:00:14:b5:6f:0f:9e:b4:
                    4f:28:fa:6b:d3:b8:31:17:5b:f0:b2:67:7d:6d:0a:
                    8f:50:af:af:31:e3:2a:ab:65:f2:b7:a8:73:af:81:
                    f0:75:1c:a5:33:76:13:21:ea:cb:2b:cf:29:a8:4f:
                    c4:5e:85:80:c6:cb:a3:a8:e5:64:30:39:11:2d:c4:
                    4b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:DE:ED:BC:53:D9:42:47:EE:F7:DC:FC:06:6A:FA:5E:C0:6E:67:6E
            X509v3 Authority Key Identifier:
                keyid:6D:CA:65:D0:71:4D:7E:F2:56:90:BC:09:13:D3:54:DB:AC:89:2A:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/2592ade6-505a-4e24-928b-9a1e71b309ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:c940::/32

    Signature Algorithm: sha256WithRSAEncryption
         b4:32:ee:bd:5f:92:2c:42:da:ce:34:98:27:ac:01:51:d5:c7:
         91:94:f0:50:39:e5:c7:7c:88:31:e4:71:10:05:27:a7:47:06:
         c2:1f:f4:8a:c5:e0:ce:a9:92:67:2e:8e:ce:ae:b4:a1:42:3d:
         7d:e1:ad:95:50:6b:bb:90:ca:fb:79:aa:fd:50:9e:9c:75:52:
         f0:c3:28:7d:1c:ac:df:38:6b:82:f0:f1:aa:62:52:aa:73:2b:
         77:bc:7b:fb:cd:c2:c6:d8:61:4e:c1:b6:29:93:10:d7:f4:14:
         86:48:a7:b7:dd:e2:62:49:e8:1c:ab:89:b0:99:3d:84:5b:21:
         90:41:d6:04:f9:92:9c:b6:84:91:66:81:b3:e8:da:0f:e4:2e:
         cc:0d:72:5e:23:5b:0d:a6:9a:41:13:a7:87:6f:fe:a7:bb:36:
         8f:34:6c:99:ae:aa:5a:be:a7:e9:9d:f8:a1:25:83:69:45:52:
         8e:c6:43:ed:1e:9c:bd:ad:b7:f4:c8:ab:72:82:07:95:d6:8c:
         29:d6:71:6c:f8:ad:32:11:8d:e5:fa:e0:85:83:fe:90:8e:db:
         5e:bd:21:a5:4f:b9:0a:18:ef:b2:8b:c2:99:2b:e2:fd:5f:da:
         ad:b7:ea:ca:1b:c9:ab:29:23:26:0e:2e:45:e5:9a:db:6e:ee:
         6b:ca:2a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 08:19:51 2025 by rpki-client