Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5c0fa006-4f28-4bdd-acd1-957f7dd216ff.roa
File:                     5c0fa006-4f28-4bdd-acd1-957f7dd216ff.roa (raw, json)
Hash identifier:          zv+R2F1i5aZP+bmWC1VWwmV9L+zh4JQ8NhlzptWl1jo=
Subject key identifier:   FC:97:53:38:EC:F2:B2:ED:09:5B:03:E4:3C:A6:57:A3:4E:5E:C7:6B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       43820164D9A3CD03499F7099ABB3D2E2DCD6955F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5c0fa006-4f28-4bdd-acd1-957f7dd216ff.roa
Signing time:             Mon 04 Aug 2025 17:11:41 +0000
ROA not before:           Mon 04 Aug 2025 17:11:41 +0000
ROA not after:            Mon 08 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f13:8000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:82:01:64:d9:a3:cd:03:49:9f:70:99:ab:b3:d2:e2:dc:d6:95:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  4 17:11:41 2025 GMT
            Not After : Sep  8 23:59:59 2025 GMT
        Subject: serialNumber=2b2d9aa55a88dbb010236edc51833fc159cf83d4857ad2c301d4a48f195b4270, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:75:78:c9:e4:00:b3:63:7c:d5:86:e7:f3:f0:
                    e7:d5:b8:f5:be:4f:43:35:0c:bc:2f:f4:e7:95:68:
                    19:df:fa:29:f9:21:1c:54:10:ff:c0:be:2e:10:e1:
                    27:33:dd:33:b3:f4:cc:36:d2:fe:a9:40:06:cb:db:
                    16:ad:03:74:4d:75:29:5e:ef:31:3c:89:d9:0c:d8:
                    b9:c5:c8:12:93:a8:06:5f:42:07:6e:d6:23:65:fd:
                    45:f5:81:e7:4a:19:eb:25:1b:ba:89:93:85:8c:3a:
                    54:b9:2f:00:a1:79:d2:bf:cc:e7:f8:62:fe:66:b7:
                    d2:87:0b:93:88:b7:a4:ec:dc:a6:00:fe:99:dd:87:
                    e9:dc:f7:f0:1e:48:2c:31:27:90:ff:a3:16:99:83:
                    0d:18:13:13:ac:76:9e:95:dc:82:01:7f:ea:84:9b:
                    2d:11:94:aa:4f:aa:38:19:a2:31:29:60:b7:0d:62:
                    47:e2:ca:98:8d:d7:34:13:7c:7b:c0:e8:e0:a8:98:
                    f5:31:0f:04:23:4c:15:e7:f4:a6:87:35:0e:01:90:
                    f5:46:3b:53:02:85:b5:28:4e:1f:b1:a3:a0:50:f7:
                    84:35:d4:7f:a3:c9:0a:03:4e:1d:09:27:ab:67:ea:
                    7f:e7:07:bb:84:43:5c:c7:ec:d2:7a:e8:75:69:e5:
                    27:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:97:53:38:EC:F2:B2:ED:09:5B:03:E4:3C:A6:57:A3:4E:5E:C7:6B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5c0fa006-4f28-4bdd-acd1-957f7dd216ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f13:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         9f:32:54:70:24:b5:c4:5d:d0:cd:56:9b:ee:05:fb:4d:19:13:
         1b:a8:2c:01:d8:8e:ed:f0:af:e6:f4:46:06:95:3b:1e:38:90:
         35:17:85:f1:87:7f:81:4f:a7:57:61:70:9b:7e:70:16:42:8a:
         46:6f:f0:47:e1:97:fa:da:37:cc:2f:08:b2:ec:bd:b2:70:e6:
         6e:1c:b4:56:a3:89:d3:e9:32:d2:f8:1e:51:2c:af:a3:7a:51:
         b0:e4:84:97:1b:d3:2b:e1:4f:bf:a6:05:ee:a4:58:8c:27:d7:
         e5:b9:71:fe:bf:95:18:ac:3d:b9:bb:bf:09:5c:09:fc:65:c9:
         27:f5:56:12:69:54:67:4b:ef:43:f1:68:57:f1:9d:43:47:35:
         87:77:38:16:82:b2:3d:4d:7d:31:e3:8e:90:f8:63:e6:d4:1d:
         a6:4a:c6:c9:b1:40:30:f3:69:a4:a3:01:3e:bc:3d:4a:13:24:
         61:c5:7e:d9:d3:34:59:e5:07:10:03:e6:3f:b2:8b:07:ea:10:
         4c:95:0b:92:7f:db:8f:20:e1:78:99:5f:ed:32:fc:28:d2:f4:
         b1:f8:fb:76:12:02:40:8f:00:1d:c1:a1:d3:58:6e:e6:c5:7e:
         9b:78:f3:7b:fb:a8:c0:b8:88:35:3e:b9:f4:e3:09:d7:dc:0b:
         ce:b4:6c:38
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUQ4IBZNmjzQNJn3CZq7PS4tzWlV8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA0MTcxMTQxWhcNMjUwOTA4MjM1OTU5
WjB6MUkwRwYDVQQFE0AyYjJkOWFhNTVhODhkYmIwMTAyMzZlZGM1MTgzM2ZjMTU5
Y2Y4M2Q0ODU3YWQyYzMwMWQ0YTQ4ZjE5NWI0MjcwMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDHdXjJ5ACzY3zVhufz8OfVuPW+T0M1DLwv9OeVaBnf+in5
IRxUEP/Avi4Q4Scz3TOz9Mw20v6pQAbL2xatA3RNdSle7zE8idkM2LnFyBKTqAZf
Qgdu1iNl/UX1gedKGeslG7qJk4WMOlS5LwChedK/zOf4Yv5mt9KHC5OIt6Ts3KYA
/pndh+nc9/AeSCwxJ5D/oxaZgw0YExOsdp6V3IIBf+qEmy0RlKpPqjgZojEpYLcN
YkfiypiN1zQTfHvA6OComPUxDwQjTBXn9KaHNQ4BkPVGO1MChbUoTh+xo6BQ94Q1
1H+jyQoDTh0JJ6tn6n/nB7uEQ1zH7NJ66HVp5ScbAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQU/JdTOOzysu0JWwPkPKZXo05ex2swHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzVjMGZhMDA2LTRmMjgtNGJkZC1hY2QxLTk1N2Y3ZGQyMTZmZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgQmAB8TgDANBgkqhkiG9w0BAQsFAAOCAQEAnzJUcCS1xF3QzVab7gX7TRkT
G6gsAdiO7fCv5vRGBpU7HjiQNReF8Yd/gU+nV2Fwm35wFkKKRm/wR+GX+to3zC8I
suy9snDmbhy0VqOJ0+ky0vgeUSyvo3pRsOSElxvTK+FPv6YF7qRYjCfX5blx/r+V
GKw9ubu/CVwJ/GXJJ/VWEmlUZ0vvQ/FoV/GdQ0c1h3c4FoKyPU19MeOOkPhj5tQd
pkrGybFAMPNppKMBPrw9ShMkYcV+2dM0WeUHEAPmP7KLB+oQTJULkn/bjyDheJlf
7TL8KNL0sfj7dhICQI8AHcGh01hu5sV+m3jze/uowLiINT659OMJ19wLzrRsOA==
-----END CERTIFICATE-----
Generated at Wed Aug 6 05:52:14 2025 by rpki-client