Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/34a79db6-083b-4ccc-8b7b-2e01a76ddbe2.roa
File:                     34a79db6-083b-4ccc-8b7b-2e01a76ddbe2.roa (raw, json)
Hash identifier:          +Blu6iDoOdFvE1tkfLSSdYkJhKdNml6G4nESkORp3FE=
Subject key identifier:   3E:8A:71:05:81:5C:BA:50:29:AF:28:7F:E5:06:28:61:43:37:3A:80
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4458FBEE0CBC185BFBCC556F92A651F55A758809
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/34a79db6-083b-4ccc-8b7b-2e01a76ddbe2.roa
Signing time:             Fri 13 Jun 2025 16:50:12 +0000
ROA not before:           Fri 13 Jun 2025 16:50:12 +0000
ROA not after:            Fri 18 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f1c::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:58:fb:ee:0c:bc:18:5b:fb:cc:55:6f:92:a6:51:f5:5a:75:88:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 13 16:50:12 2025 GMT
            Not After : Jul 18 23:59:59 2025 GMT
        Subject: serialNumber=d1f620ea520cab075246bbfa25ac6e753e4e2a69c54239939098115f19e48001, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c7:36:a8:fc:9a:fb:90:aa:a0:86:13:f6:1b:
                    41:f2:88:92:6f:2a:1e:1e:f2:ea:51:a2:f7:d6:14:
                    ac:8b:75:0b:c6:ca:22:bf:76:1a:fa:94:fa:22:5b:
                    d0:58:b9:26:d1:37:32:fa:4e:0b:f6:ae:35:09:39:
                    94:1a:5f:5e:00:8b:90:42:8d:4b:af:46:da:eb:c8:
                    48:e2:aa:36:f9:83:1a:a2:ce:ed:36:e4:14:c0:72:
                    1f:07:66:4c:8d:b4:8f:d2:10:b0:39:9a:96:8a:3d:
                    e4:79:b7:36:c4:a5:f5:d0:b5:83:a9:86:91:b6:1c:
                    bc:49:cc:a6:a7:7e:4a:2b:df:ee:db:45:f5:e9:29:
                    9d:af:7a:c5:ce:24:67:aa:01:30:21:c1:ff:74:4b:
                    5a:d3:45:ba:81:82:96:fc:eb:5b:85:72:fe:9d:38:
                    7e:18:c2:57:5f:0d:ea:fa:81:6d:cc:ee:ca:28:84:
                    06:9d:b4:42:f1:43:21:d4:a3:d1:3e:16:fd:e7:fd:
                    af:9a:7e:e3:f9:7c:29:3c:c5:37:30:5a:f4:2c:23:
                    67:ce:fd:dc:c8:c8:d9:ce:fb:3d:44:dc:b7:d9:cd:
                    6a:41:71:cb:b1:4c:a1:74:cf:34:eb:b3:1d:04:e1:
                    eb:7e:0b:dc:ef:b5:2b:61:0f:8c:99:74:98:b1:d5:
                    1f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:8A:71:05:81:5C:BA:50:29:AF:28:7F:E5:06:28:61:43:37:3A:80
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/34a79db6-083b-4ccc-8b7b-2e01a76ddbe2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f1c::/38

    Signature Algorithm: sha256WithRSAEncryption
         32:d8:5f:8b:2a:37:bf:94:ef:cc:28:31:06:fe:2a:7c:49:16:
         b0:3a:64:e6:06:76:3f:3e:41:82:d7:ab:48:09:1e:9e:e8:1b:
         ca:86:5a:d5:cf:73:e6:1a:25:fa:b2:cc:2e:4a:84:4a:bb:eb:
         28:fb:4f:ff:45:06:ae:e0:e0:53:90:d8:cc:07:18:59:a1:20:
         5d:66:1d:51:32:8c:11:d3:b6:d2:b9:22:60:a0:e0:07:b5:05:
         c2:85:02:4d:75:f3:08:84:42:30:16:22:4f:36:52:d5:98:1a:
         5d:b6:12:9e:85:6f:9b:eb:60:a1:92:31:65:66:38:5a:a0:d3:
         da:6e:37:67:f1:83:50:be:5f:36:df:e1:c6:3e:e2:a6:c5:81:
         9f:5c:f4:ee:e1:1c:5f:87:13:98:40:b1:67:15:09:41:61:9d:
         00:1d:90:fb:c6:1c:30:0f:c2:20:cd:97:e0:28:bd:e2:33:2b:
         88:2b:b3:bb:23:d9:e2:49:be:60:0a:1d:9d:3e:58:a1:03:6c:
         a9:79:d2:f4:27:50:a6:8f:d6:d6:21:47:0d:bc:33:47:b0:24:
         76:63:a8:56:06:4d:d9:01:7a:3d:55:c2:6a:8b:ff:76:36:9a:
         06:a1:fb:d6:81:85:b6:eb:c3:1c:05:fd:0b:47:20:1f:92:f0:
         7a:b4:36:9e
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIURFj77gy8GFv7zFVvkqZR9Vp1iAkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjEzMTY1MDEyWhcNMjUwNzE4MjM1OTU5
WjB6MUkwRwYDVQQFE0BkMWY2MjBlYTUyMGNhYjA3NTI0NmJiZmEyNWFjNmU3NTNl
NGUyYTY5YzU0MjM5OTM5MDk4MTE1ZjE5ZTQ4MDAxMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDQxzao/Jr7kKqghhP2G0HyiJJvKh4e8upRovfWFKyLdQvG
yiK/dhr6lPoiW9BYuSbRNzL6Tgv2rjUJOZQaX14Ai5BCjUuvRtrryEjiqjb5gxqi
zu025BTAch8HZkyNtI/SELA5mpaKPeR5tzbEpfXQtYOphpG2HLxJzKanfkor3+7b
RfXpKZ2vesXOJGeqATAhwf90S1rTRbqBgpb861uFcv6dOH4YwldfDer6gW3M7soo
hAadtELxQyHUo9E+Fv3n/a+afuP5fCk8xTcwWvQsI2fO/dzIyNnO+z1E3LfZzWpB
ccuxTKF0zzTrsx0E4et+C9zvtSthD4yZdJix1R8zAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUPopxBYFculApryh/5QYoYUM3OoAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzM0YTc5ZGI2LTA4M2ItNGNjYy04YjdiLTJlMDFhNzZkZGJlMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgImAB8cADANBgkqhkiG9w0BAQsFAAOCAQEAMthfiyo3v5TvzCgxBv4qfEkW
sDpk5gZ2Pz5BgterSAkenugbyoZa1c9z5hol+rLMLkqESrvrKPtP/0UGruDgU5DY
zAcYWaEgXWYdUTKMEdO20rkiYKDgB7UFwoUCTXXzCIRCMBYiTzZS1ZgaXbYSnoVv
m+tgoZIxZWY4WqDT2m43Z/GDUL5fNt/hxj7ipsWBn1z07uEcX4cTmECxZxUJQWGd
AB2Q+8YcMA/CIM2X4Ci94jMriCuzuyPZ4km+YAodnT5YoQNsqXnS9CdQpo/W1iFH
DbwzR7AkdmOoVgZN2QF6PVXCaov/djaaBqH71oGFtuvDHAX9C0cgH5LwerQ2ng==
-----END CERTIFICATE-----
Generated at Sat Jun 14 06:15:13 2025 by rpki-client