Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62120907-8205-4b89-a6c6-7c624370b254.roa
File:                     62120907-8205-4b89-a6c6-7c624370b254.roa (raw, json)
Hash identifier:          ou80QAz0Y9j6fv6LZDMLAsOkvnjfRzUIQGbdBAn0MvI=
Subject key identifier:   36:7B:81:C5:F5:38:F6:B2:7A:CA:EC:DB:1F:CE:83:13:79:17:35:5C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6F235923127C5D6513C8DF657803C8ADA05F8223
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62120907-8205-4b89-a6c6-7c624370b254.roa
Signing time:             Mon 04 Aug 2025 17:11:47 +0000
ROA not before:           Mon 04 Aug 2025 17:11:47 +0000
ROA not after:            Mon 08 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f13::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:23:59:23:12:7c:5d:65:13:c8:df:65:78:03:c8:ad:a0:5f:82:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  4 17:11:47 2025 GMT
            Not After : Sep  8 23:59:59 2025 GMT
        Subject: serialNumber=8c39b0994ea43d01889aeaf9509d27b80efb619ea3c4d37e55228bd1bef9a7d4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f8:d2:6b:58:fd:b0:aa:02:42:23:db:ae:17:
                    5b:d0:f2:f5:7e:a2:9d:39:8f:73:0c:2f:73:12:e3:
                    ca:e7:74:67:a6:98:0a:d0:cd:f2:c2:2b:38:2d:ee:
                    41:10:c9:c8:59:5e:8a:66:97:c0:65:ce:e6:b3:41:
                    6d:a2:c9:f3:dc:db:eb:c1:6a:0c:4a:39:f3:6e:c0:
                    2e:74:85:a9:ff:75:98:e0:d7:0d:4d:14:5c:ae:7b:
                    9d:77:cf:a3:a1:0b:57:c2:b2:20:ca:2e:82:f2:a5:
                    58:fb:14:9c:c2:c9:b5:18:3b:7e:64:82:8b:20:05:
                    05:08:e5:61:cc:b8:20:ea:6e:7f:af:ca:bc:2b:b7:
                    2e:f9:37:f9:13:f1:ef:c6:0b:21:16:38:d9:bd:fc:
                    5b:82:8a:5a:70:9e:55:ed:97:70:ab:b0:cc:94:15:
                    72:2a:18:1d:57:e1:d3:df:52:62:9a:7a:98:0b:f7:
                    6d:0b:ef:73:88:d8:bd:34:a1:a0:0a:dd:c1:97:c8:
                    0d:df:33:3c:a2:19:4a:86:d2:56:a1:12:b3:a6:5a:
                    c5:48:1c:2c:3c:f3:00:53:94:b3:d6:c0:e5:87:e8:
                    69:07:ff:5b:52:9d:ce:68:4a:36:72:0b:c2:18:84:
                    ca:3d:0c:c0:26:73:c3:49:c6:55:96:f2:d8:17:e1:
                    5a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:7B:81:C5:F5:38:F6:B2:7A:CA:EC:DB:1F:CE:83:13:79:17:35:5C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62120907-8205-4b89-a6c6-7c624370b254.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f13::/36

    Signature Algorithm: sha256WithRSAEncryption
         65:0d:62:83:5c:71:c8:10:8d:9d:a7:31:47:ed:e7:d6:92:b1:
         71:85:93:db:5f:1f:aa:2c:a3:de:dd:eb:b6:58:aa:e8:56:f8:
         db:8b:67:6d:57:80:f4:9c:ab:79:bd:f2:d2:56:6b:ef:2d:d5:
         87:fe:ea:33:0c:5b:3e:ba:ca:55:e5:c2:68:9c:48:fd:c4:be:
         52:d9:31:d5:0f:61:65:fd:8f:02:94:da:67:17:39:02:9b:17:
         c8:93:54:90:4d:99:6f:5b:75:be:85:55:0e:49:42:67:18:18:
         4e:16:2a:4b:5e:48:5d:2e:ec:c7:dd:f9:57:d5:f0:f5:e8:99:
         08:41:78:31:53:5c:f3:d6:2b:48:08:3b:a5:e7:6f:b5:01:48:
         54:63:f4:f5:f3:9e:e9:42:1e:62:92:7c:40:36:1e:1a:09:85:
         31:98:6e:ca:90:26:f9:37:c8:d3:63:5d:f7:d6:b0:05:bc:bc:
         49:1e:d6:ff:b8:17:c6:e6:4b:43:e2:ae:16:d2:87:20:b6:41:
         3e:2d:25:ee:9d:59:f2:a5:a7:1e:e0:bb:38:f6:59:39:65:f4:
         57:47:6b:00:aa:99:54:33:45:5c:a9:73:5d:0b:98:ec:63:0e:
         53:af:27:59:f1:3e:27:d1:ba:ad:00:62:2a:8c:23:e8:17:e0:
         a1:ae:1a:bb
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUbyNZIxJ8XWUTyN9leAPIraBfgiMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA0MTcxMTQ3WhcNMjUwOTA4MjM1OTU5
WjB6MUkwRwYDVQQFE0A4YzM5YjA5OTRlYTQzZDAxODg5YWVhZjk1MDlkMjdiODBl
ZmI2MTllYTNjNGQzN2U1NTIyOGJkMWJlZjlhN2Q0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDU+NJrWP2wqgJCI9uuF1vQ8vV+op05j3MML3MS48rndGem
mArQzfLCKzgt7kEQychZXopml8BlzuazQW2iyfPc2+vBagxKOfNuwC50han/dZjg
1w1NFFyue513z6OhC1fCsiDKLoLypVj7FJzCybUYO35kgosgBQUI5WHMuCDqbn+v
yrwrty75N/kT8e/GCyEWONm9/FuCilpwnlXtl3CrsMyUFXIqGB1X4dPfUmKaepgL
920L73OI2L00oaAK3cGXyA3fMzyiGUqG0lahErOmWsVIHCw88wBTlLPWwOWH6GkH
/1tSnc5oSjZyC8IYhMo9DMAmc8NJxlWW8tgX4VpdAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUNnuBxfU49rJ6yuzbH86DE3kXNVwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzYyMTIwOTA3LTgyMDUtNGI4OS1hNmM2LTdjNjI0MzcwYjI1NC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgQmAB8TADANBgkqhkiG9w0BAQsFAAOCAQEAZQ1ig1xxyBCNnacxR+3n1pKx
cYWT218fqiyj3t3rtliq6Fb424tnbVeA9Jyreb3y0lZr7y3Vh/7qMwxbPrrKVeXC
aJxI/cS+Utkx1Q9hZf2PApTaZxc5ApsXyJNUkE2Zb1t1voVVDklCZxgYThYqS15I
XS7sx935V9Xw9eiZCEF4MVNc89YrSAg7pedvtQFIVGP09fOe6UIeYpJ8QDYeGgmF
MZhuypAm+TfI02Nd99awBby8SR7W/7gXxuZLQ+KuFtKHILZBPi0l7p1Z8qWnHuC7
OPZZOWX0V0drAKqZVDNFXKlzXQuY7GMOU68nWfE+J9G6rQBiKowj6Bfgoa4auw==
-----END CERTIFICATE-----
Generated at Sun Aug 10 04:27:19 2025 by rpki-client