Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a0a8979-b3b0-44b3-8908-2d54f7cf4311.roa
File:                     4a0a8979-b3b0-44b3-8908-2d54f7cf4311.roa (raw, json)
Hash identifier:          TnDg0bsAAtrWFnq7kVLG9zBlIA73BSGrge2kpapw+XE=
Subject key identifier:   3E:BA:A8:70:98:3F:76:ED:9F:7B:C8:72:27:76:78:70:2B:49:FC:C0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       396854D6B70B2B5DFC6E21C829B0BBF9CB812874
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a0a8979-b3b0-44b3-8908-2d54f7cf4311.roa
Signing time:             Mon 04 Aug 2025 17:01:11 +0000
ROA not before:           Mon 04 Aug 2025 17:01:11 +0000
ROA not after:            Mon 08 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f15:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:68:54:d6:b7:0b:2b:5d:fc:6e:21:c8:29:b0:bb:f9:cb:81:28:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  4 17:01:11 2025 GMT
            Not After : Sep  8 23:59:59 2025 GMT
        Subject: serialNumber=6e08bbeb2159c7adc08920bcf8dc88879e715cc8cc24057a1ea3dfc550aea31d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fe:c7:6e:55:79:e6:84:47:1b:12:98:b9:c0:
                    55:7a:4f:ff:f7:16:d6:88:a6:6f:d9:3b:7f:9a:25:
                    97:0e:35:bc:4a:35:90:76:77:e7:03:b2:0e:48:cf:
                    b2:66:d0:56:2c:8b:d1:b3:0b:8f:43:b3:29:d4:ce:
                    b3:b0:6c:1e:87:48:e7:f7:41:47:06:14:9b:53:fb:
                    44:03:77:5a:84:44:3e:ff:8a:a1:c2:5b:4d:65:f3:
                    1b:fc:5c:23:0f:0a:28:f4:58:64:71:48:22:11:3c:
                    0c:03:b7:f6:77:5e:b0:7c:ca:02:98:98:4f:f3:9e:
                    57:2f:02:94:f2:2d:28:19:65:ec:30:a8:a5:df:5b:
                    a9:27:57:29:e0:91:58:10:76:94:d8:a2:e9:8c:c3:
                    85:f4:00:64:7b:8c:f8:6a:35:01:fa:05:9e:81:5a:
                    e4:df:fa:0a:38:a0:30:ff:6c:29:d5:2a:a4:12:d1:
                    5e:f1:41:84:7e:7b:93:15:0e:91:42:c4:f8:93:f3:
                    94:b4:5d:c1:ee:c6:a6:b9:ad:2e:19:e4:e8:6f:14:
                    cf:52:1b:9f:e7:8f:91:a5:ec:75:12:b8:ca:5b:42:
                    4e:b0:72:45:a2:0a:5c:cc:01:3f:fc:92:bc:04:a6:
                    59:af:a8:fc:96:be:1a:2d:e8:07:18:8c:e6:fb:f7:
                    9d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:BA:A8:70:98:3F:76:ED:9F:7B:C8:72:27:76:78:70:2B:49:FC:C0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a0a8979-b3b0-44b3-8908-2d54f7cf4311.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f15:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         49:8f:07:4b:07:2a:fe:2c:d5:d5:6f:48:33:c3:21:cb:1f:16:
         83:4a:a8:b6:92:4f:18:f7:8b:87:cf:e9:6a:c7:10:b5:ea:b5:
         c4:d9:6c:56:74:3c:29:5e:e0:bd:c8:ad:e8:f8:eb:f5:80:1a:
         58:23:b2:4a:9d:9c:b2:db:a4:ae:08:97:6e:5e:30:1b:41:13:
         d1:4e:84:5b:cc:58:ac:32:d3:72:65:75:ea:9c:d1:74:ff:a0:
         04:0f:d0:be:ba:f0:d0:22:f2:31:54:d9:ea:b6:da:81:16:34:
         c4:8d:7f:5e:58:10:92:af:65:42:0a:f1:5c:ea:39:12:68:0a:
         45:6b:cb:ee:02:4a:d0:bb:12:d9:74:88:56:79:be:af:a7:c4:
         e4:9c:84:49:0f:6b:43:22:0d:db:e8:70:2d:85:3c:45:0a:4a:
         c2:0d:56:e7:51:bf:f6:c9:15:8d:2c:74:d3:5f:74:76:69:14:
         70:dd:2d:62:0b:b0:60:46:7c:a6:cc:fe:ce:bf:c6:63:ce:fb:
         b3:c4:d4:6a:4c:4f:2e:6f:bd:03:15:e1:f8:82:3b:4a:60:3e:
         f0:1b:9d:8b:85:28:a1:8f:54:3a:db:b6:e5:24:43:33:77:30:
         8b:27:79:2a:b7:ca:04:b9:a5:92:7a:18:e4:f0:1d:f7:32:04:
         77:e3:f3:29
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUOWhU1rcLK138biHIKbC7+cuBKHQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA0MTcwMTExWhcNMjUwOTA4MjM1OTU5
WjB6MUkwRwYDVQQFE0A2ZTA4YmJlYjIxNTljN2FkYzA4OTIwYmNmOGRjODg4Nzll
NzE1Y2M4Y2MyNDA1N2ExZWEzZGZjNTUwYWVhMzFkMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC3/sduVXnmhEcbEpi5wFV6T//3FtaIpm/ZO3+aJZcONbxK
NZB2d+cDsg5Iz7Jm0FYsi9GzC49DsynUzrOwbB6HSOf3QUcGFJtT+0QDd1qERD7/
iqHCW01l8xv8XCMPCij0WGRxSCIRPAwDt/Z3XrB8ygKYmE/znlcvApTyLSgZZeww
qKXfW6knVyngkVgQdpTYoumMw4X0AGR7jPhqNQH6BZ6BWuTf+go4oDD/bCnVKqQS
0V7xQYR+e5MVDpFCxPiT85S0XcHuxqa5rS4Z5OhvFM9SG5/nj5Gl7HUSuMpbQk6w
ckWiClzMAT/8krwEplmvqPyWvhot6AcYjOb79537AgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUPrqocJg/du2fe8hyJ3Z4cCtJ/MAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzRhMGE4OTc5LWIzYjAtNDRiMy04OTA4LTJkNTRmN2NmNDMxMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgQmAB8VQDANBgkqhkiG9w0BAQsFAAOCAQEASY8HSwcq/izV1W9IM8Mhyx8W
g0qotpJPGPeLh8/pascQteq1xNlsVnQ8KV7gvcit6Pjr9YAaWCOySp2cstukrgiX
bl4wG0ET0U6EW8xYrDLTcmV16pzRdP+gBA/Qvrrw0CLyMVTZ6rbagRY0xI1/XlgQ
kq9lQgrxXOo5EmgKRWvL7gJK0LsS2XSIVnm+r6fE5JyESQ9rQyIN2+hwLYU8RQpK
wg1W51G/9skVjSx00190dmkUcN0tYguwYEZ8psz+zr/GY877s8TUakxPLm+9AxXh
+II7SmA+8Budi4UooY9UOtu25SRDM3cwiyd5KrfKBLmlknoY5PAd9zIEd+PzKQ==
-----END CERTIFICATE-----
Generated at Wed Aug 6 04:09:59 2025 by rpki-client