Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/c518c762-ddbf-4352-b9b9-1484318adaa8.roa
File:                     c518c762-ddbf-4352-b9b9-1484318adaa8.roa (raw, json)
Hash identifier:          GXH8s+tS1Z+F8AqQhpBcLTSMkVsff4tRUcLeWq7o8Gk=
Subject key identifier:   27:68:1D:3B:22:03:57:EA:43:49:87:35:49:5B:30:88:D2:BD:44:2D
Certificate issuer:       /CN=6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267
Certificate serial:       6E75725697F303A63BD1D13BA2917E6BE56760A9
Authority key identifier: 6D:CA:65:D0:71:4D:7E:F2:56:90:BC:09:13:D3:54:DB:AC:89:2A:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/c518c762-ddbf-4352-b9b9-1484318adaa8.roa
Signing time:             Mon 01 Sep 2025 19:10:01 +0000
ROA not before:           Mon 01 Sep 2025 19:10:01 +0000
ROA not after:            Mon 06 Oct 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2605:c940::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/7276b2fa-548d-4970-8314-8d73945c34d8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/7276b2fa-548d-4970-8314-8d73945c34d8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:75:72:56:97:f3:03:a6:3b:d1:d1:3b:a2:91:7e:6b:e5:67:60:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267
        Validity
            Not Before: Sep  1 19:10:01 2025 GMT
            Not After : Oct  6 23:59:59 2025 GMT
        Subject: serialNumber=8416b4d6f542d25b7a207f8e0b7201b8ff36d3c65789f32615803afc8f79d62a, CN=15f1683a-c0c2-4266-9a96-ecf9eba3239c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c0:36:08:16:b7:32:3d:c2:2f:f0:1a:44:8f:
                    9e:73:70:f9:f4:02:0e:65:b3:f7:95:63:b7:8b:b1:
                    07:d4:b8:8a:97:01:5d:50:df:ef:da:aa:81:2f:ce:
                    75:62:ec:d1:d4:24:d3:3d:74:81:ff:73:5a:74:b6:
                    3e:38:1c:bc:e8:b4:c8:fb:c8:23:3d:72:07:64:ba:
                    84:75:83:8e:b5:a7:51:3f:83:ac:40:5c:02:05:39:
                    1d:81:0d:82:2e:57:00:af:c1:92:ed:00:e4:95:fe:
                    d9:1f:e8:c2:e7:33:5c:c4:c1:da:34:ec:65:cd:73:
                    ad:c9:43:8e:c7:a6:4e:b4:ef:a4:76:e6:60:9c:cd:
                    13:42:de:f4:56:7a:ed:ac:54:c6:cc:a7:bf:87:d9:
                    a9:3c:3c:85:35:99:04:eb:ae:11:1f:62:66:50:8e:
                    e3:ad:eb:75:90:c3:d7:2c:03:01:d9:cf:0f:ae:55:
                    05:3f:09:29:6a:19:9f:a2:7c:18:15:13:c6:8d:54:
                    d6:9f:5a:dc:51:b5:90:e9:56:6e:b5:d3:2f:d1:ab:
                    ab:a2:ad:60:1f:97:20:bd:d5:9c:3e:f4:ba:15:00:
                    9a:55:54:77:a9:16:3f:4c:2d:22:14:db:2a:af:25:
                    89:a3:e0:45:20:43:c6:e1:dd:e1:4a:4a:3a:90:9d:
                    92:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:68:1D:3B:22:03:57:EA:43:49:87:35:49:5B:30:88:D2:BD:44:2D
            X509v3 Authority Key Identifier:
                keyid:6D:CA:65:D0:71:4D:7E:F2:56:90:BC:09:13:D3:54:DB:AC:89:2A:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/c518c762-ddbf-4352-b9b9-1484318adaa8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:c940::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:0a:d2:29:35:aa:92:7b:1c:a6:aa:5d:d6:09:ad:06:3c:a5:
         7d:40:6a:63:43:d4:c4:a6:91:3d:29:1c:dc:0a:82:27:6c:02:
         6c:22:c8:f4:a4:48:2c:eb:c0:76:91:6e:2c:62:84:60:2c:98:
         8a:1c:34:f0:23:1d:cc:5f:16:4b:f0:4a:79:2a:33:81:ae:f5:
         41:1a:59:96:d9:5f:87:76:5a:0c:0a:58:48:5f:58:aa:55:f8:
         a9:0b:b5:16:98:c7:b8:2d:c5:8c:02:d2:bc:0c:2a:5a:5f:5c:
         04:6b:48:25:c3:5f:d3:48:5a:a8:e5:75:e7:df:3a:ca:e1:35:
         9d:b1:e1:8f:2f:fc:e7:87:09:d3:26:36:f4:49:1d:f0:8a:ed:
         6e:45:8b:e1:00:07:93:55:59:2e:be:c9:c1:d2:79:40:75:35:
         26:b2:39:22:a3:e8:a8:9a:65:d5:1b:10:d8:27:54:31:c0:4b:
         de:75:19:85:bc:54:d4:db:31:5a:60:f7:aa:42:f6:bd:8a:e5:
         c1:64:33:1f:ba:e6:05:82:7e:15:44:e0:6c:25:52:cc:df:73:
         47:43:1e:52:73:eb:76:b2:72:b0:c4:d6:43:4c:1a:45:8a:8f:
         ee:92:e5:1e:64:21:b6:77:d7:be:26:27:ab:8d:32:20:04:38:
         f2:f5:0c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 06:43:59 2025 by rpki-client