Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b48c916-3858-4b00-8e15-9c902a1cc973.roa
File:                     9b48c916-3858-4b00-8e15-9c902a1cc973.roa (raw, json)
Hash identifier:          tz7/tte3md9SiZUXHftfJtB5aUAraR6kxRaD1x0ZYk0=
Subject key identifier:   29:88:BE:C5:98:09:A8:ED:4B:60:70:5D:CA:82:85:9F:3A:5E:DF:4F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       026C061A295AA6B9B4D1AD044373088623A1078E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b48c916-3858-4b00-8e15-9c902a1cc973.roa
Signing time:             Wed 11 Jun 2025 00:31:54 +0000
ROA not before:           Wed 11 Jun 2025 00:31:54 +0000
ROA not after:            Wed 16 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f61:6080::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:6c:06:1a:29:5a:a6:b9:b4:d1:ad:04:43:73:08:86:23:a1:07:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 11 00:31:54 2025 GMT
            Not After : Jul 16 23:59:59 2025 GMT
        Subject: serialNumber=c07c9e75765c6758435cf4a4dd182fdcb7d29365bb9311b5b056e8590cd56f15, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:31:27:19:00:c9:7f:5a:e8:68:99:3a:2d:de:
                    0e:9f:d6:1d:1a:80:f1:54:e2:93:f1:e8:01:81:20:
                    d0:af:a2:41:3a:d7:e6:0e:38:23:9d:1b:76:6b:25:
                    12:99:97:81:17:5a:7c:5f:a9:87:a3:ef:30:a5:84:
                    c4:23:5e:39:91:c7:4c:4c:ea:47:f5:87:49:b0:2c:
                    2b:08:c9:42:7d:20:a5:c1:a7:15:02:f6:0e:f4:b7:
                    28:48:d6:8a:2d:75:5e:4d:c3:34:27:3b:87:5b:d0:
                    10:04:9b:bb:27:c5:44:78:1f:1a:3f:7e:b6:55:14:
                    22:87:60:60:87:32:77:e2:ac:ff:ca:91:f7:11:d4:
                    61:14:42:f6:87:d0:75:de:f9:00:78:78:df:41:2a:
                    27:80:4b:b5:cb:27:0a:b5:a3:ec:ca:7f:ad:91:ac:
                    10:6c:27:54:e0:87:c1:23:fb:9c:74:3e:4b:d1:47:
                    75:24:c2:64:d7:47:af:7e:30:7f:9a:99:2d:d0:8c:
                    00:2d:87:c0:eb:e6:06:c7:67:ed:f1:46:92:57:6a:
                    42:48:da:a4:d3:4d:be:39:b3:ca:0b:11:0a:f8:ad:
                    14:ac:18:1f:7f:9d:f2:16:af:87:bb:56:21:a2:30:
                    d3:39:71:38:84:6a:cb:96:4e:a4:eb:ba:15:34:50:
                    35:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:88:BE:C5:98:09:A8:ED:4B:60:70:5D:CA:82:85:9F:3A:5E:DF:4F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b48c916-3858-4b00-8e15-9c902a1cc973.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f61:6080::/48

    Signature Algorithm: sha256WithRSAEncryption
         be:9e:f9:4c:a4:ff:5d:dd:4c:54:13:ca:5a:74:8c:29:1c:43:
         a7:b4:7c:aa:64:8c:4f:ec:6f:e0:da:d4:df:5e:6d:7a:b5:76:
         fd:a3:fe:b6:52:4f:d5:6a:e4:6e:aa:79:dd:48:e1:c3:b0:92:
         d8:75:69:da:a9:48:e1:7a:92:b3:ee:9d:28:2c:27:d8:90:c3:
         57:cc:3c:68:7a:9a:5f:b7:d6:36:01:00:cb:2f:a6:6c:1b:44:
         88:49:b2:6a:fb:8f:df:ba:6d:a1:72:21:ed:7c:0e:48:3b:18:
         03:8c:f3:62:a1:33:09:89:6b:2f:4e:3b:d7:d7:23:2a:88:e7:
         67:76:c3:9c:a8:e2:98:6d:d8:cb:81:97:a4:d1:2f:cc:23:02:
         41:ee:c3:31:6c:53:f4:50:a6:dc:23:68:bc:d1:e4:f2:d1:da:
         a8:45:c3:f9:3d:32:90:48:e3:4b:b0:f4:8e:57:22:d4:da:fe:
         f7:4f:ae:03:7f:6f:32:70:23:77:26:11:94:6a:a6:0a:b6:4e:
         ab:08:f3:39:53:20:b9:dd:fe:ce:a3:48:de:bf:6a:61:53:5f:
         a6:8b:83:2d:c6:79:ff:b6:32:18:ef:e9:e6:2d:65:31:7a:59:
         60:f4:95:87:fb:fc:7d:1c:b8:62:f6:95:97:e9:26:e2:20:d4:
         67:81:68:67
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUAmwGGilaprm00a0EQ3MIhiOhB44wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjExMDAzMTU0WhcNMjUwNzE2MjM1OTU5
WjB6MUkwRwYDVQQFE0BjMDdjOWU3NTc2NWM2NzU4NDM1Y2Y0YTRkZDE4MmZkY2I3
ZDI5MzY1YmI5MzExYjViMDU2ZTg1OTBjZDU2ZjE1MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDSMScZAMl/WuhomTot3g6f1h0agPFU4pPx6AGBINCvokE6
1+YOOCOdG3ZrJRKZl4EXWnxfqYej7zClhMQjXjmRx0xM6kf1h0mwLCsIyUJ9IKXB
pxUC9g70tyhI1ootdV5NwzQnO4db0BAEm7snxUR4Hxo/frZVFCKHYGCHMnfirP/K
kfcR1GEUQvaH0HXe+QB4eN9BKieAS7XLJwq1o+zKf62RrBBsJ1Tgh8Ej+5x0PkvR
R3UkwmTXR69+MH+amS3QjAAth8Dr5gbHZ+3xRpJXakJI2qTTTb45s8oLEQr4rRSs
GB9/nfIWr4e7ViGiMNM5cTiEasuWTqTruhU0UDXlAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUKYi+xZgJqO1LYHBdyoKFnzpe308wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzliNDhjOTE2LTM4NTgtNGIwMC04ZTE1LTljOTAyYTFjYzk3My5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB9hYIAwDQYJKoZIhvcNAQELBQADggEBAL6e+Uyk/13dTFQTylp0jCkc
Q6e0fKpkjE/sb+Da1N9ebXq1dv2j/rZST9Vq5G6qed1I4cOwkth1adqpSOF6krPu
nSgsJ9iQw1fMPGh6ml+31jYBAMsvpmwbRIhJsmr7j9+6baFyIe18Dkg7GAOM82Kh
MwmJay9OO9fXIyqI52d2w5yo4pht2MuBl6TRL8wjAkHuwzFsU/RQptwjaLzR5PLR
2qhFw/k9MpBI40uw9I5XItTa/vdPrgN/bzJwI3cmEZRqpgq2TqsI8zlTILnd/s6j
SN6/amFTX6aLgy3Gef+2Mhjv6eYtZTF6WWD0lYf7/H0cuGL2lZfpJuIg1GeBaGc=
-----END CERTIFICATE-----
Generated at Sat Jun 14 07:07:53 2025 by rpki-client