Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b1cdc996-d9de-4ebc-9b37-048cf0e36669.roa
File:                     b1cdc996-d9de-4ebc-9b37-048cf0e36669.roa (raw, json)
Hash identifier:          U/xNYDr9aGBmHc8+6OSDsATkKyGta0IJ0UzzLVxRPYo=
Subject key identifier:   2D:73:61:67:23:9A:1C:BB:9B:BF:A0:B6:91:63:86:01:B9:0D:36:7F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       47754F2C72760FF1A582BE8281F810A8F0661DDF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b1cdc996-d9de-4ebc-9b37-048cf0e36669.roa
Signing time:             Fri 13 Jun 2025 15:11:47 +0000
ROA not before:           Fri 13 Jun 2025 15:11:47 +0000
ROA not after:            Fri 18 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ffb:c040::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:75:4f:2c:72:76:0f:f1:a5:82:be:82:81:f8:10:a8:f0:66:1d:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 13 15:11:47 2025 GMT
            Not After : Jul 18 23:59:59 2025 GMT
        Subject: serialNumber=adc453a153cc998f18e919de6f6c5910acb42c02e575b1d8094fd91d2bdf63ec, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:54:4f:a3:5d:88:4e:98:30:cf:7a:f7:0c:57:
                    23:c6:6a:55:1b:c4:42:95:1d:20:67:da:f9:9f:2d:
                    b8:80:d1:f9:14:ba:ad:d0:39:59:f0:70:e1:0c:fb:
                    10:d4:04:f7:8a:85:26:97:a9:31:69:10:a1:89:b4:
                    21:20:fc:ba:c3:70:92:67:df:8c:76:b8:91:91:8f:
                    41:87:b9:c6:50:c7:39:68:d6:a8:aa:6d:05:8d:9f:
                    f4:a5:56:49:b2:f6:ae:ba:88:84:84:b9:49:e6:7b:
                    db:97:20:55:e0:b4:f9:f3:79:33:44:ba:d1:69:55:
                    b0:2b:1e:c1:10:c5:ec:08:b1:c1:a2:da:6b:cc:72:
                    98:de:4a:25:6f:0a:4f:0d:a0:e0:2e:6e:ba:a4:a6:
                    2e:86:da:1f:93:07:12:c8:8c:b3:3b:46:66:77:ef:
                    a3:4a:af:bf:be:13:8f:17:a4:60:0b:81:4b:d6:00:
                    75:bb:47:5b:d4:9f:c1:fd:71:2e:54:e4:eb:e2:b9:
                    9b:97:d0:93:0b:43:8a:5d:f8:ea:9f:68:82:8e:fc:
                    54:0f:a4:11:84:c1:6f:de:0f:2c:df:16:1b:38:91:
                    3d:ca:f1:86:fa:2c:41:7c:23:49:78:99:5a:6d:e5:
                    93:cd:17:3a:72:51:db:d5:dd:ae:c2:6e:cb:1b:fe:
                    0e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:73:61:67:23:9A:1C:BB:9B:BF:A0:B6:91:63:86:01:B9:0D:36:7F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b1cdc996-d9de-4ebc-9b37-048cf0e36669.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ffb:c040::/46

    Signature Algorithm: sha256WithRSAEncryption
         30:f1:8f:28:90:63:7d:af:3b:2d:3e:bc:12:1a:94:5b:e6:f2:
         d1:1c:49:4b:da:9c:0e:11:cd:6c:5e:60:c5:ae:c9:3d:c6:0d:
         10:f3:2a:34:35:a5:99:d2:70:9c:32:43:2d:58:e5:31:46:bf:
         08:1a:3d:7c:d1:ba:16:c5:3e:45:08:24:32:d2:37:6d:d2:ad:
         7d:78:bd:28:ac:c5:be:66:aa:25:b1:a4:64:fe:db:59:24:c2:
         fb:23:f9:0c:de:85:55:26:8b:40:a0:2b:2e:b1:06:24:ae:ff:
         c4:38:3b:99:ec:f0:fc:62:61:92:ea:6d:ea:0b:83:12:ac:dd:
         8f:71:3e:50:ee:cb:63:90:0d:b4:6e:e6:54:0c:bf:a6:aa:39:
         0e:a6:ef:f1:b0:18:cb:3a:dc:fb:be:57:01:1d:f6:a3:f2:14:
         79:41:f8:26:98:00:c9:f0:77:62:d4:dc:c0:e2:c1:24:17:b7:
         60:9c:5b:cb:c8:17:ca:5d:26:17:61:da:7b:ec:12:aa:97:51:
         b0:29:e6:79:99:31:28:42:81:56:f3:6c:22:d2:e2:36:60:c8:
         22:f7:ca:b8:33:1a:ea:a7:f5:bc:04:45:fc:4c:ee:33:ef:7b:
         26:a5:b7:43:ed:8c:eb:cf:f0:94:93:24:5a:22:7e:2a:60:ee:
         c9:89:fd:bf
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUR3VPLHJ2D/Glgr6CgfgQqPBmHd8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjEzMTUxMTQ3WhcNMjUwNzE4MjM1OTU5
WjB6MUkwRwYDVQQFE0BhZGM0NTNhMTUzY2M5OThmMThlOTE5ZGU2ZjZjNTkxMGFj
YjQyYzAyZTU3NWIxZDgwOTRmZDkxZDJiZGY2M2VjMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDYVE+jXYhOmDDPevcMVyPGalUbxEKVHSBn2vmfLbiA0fkU
uq3QOVnwcOEM+xDUBPeKhSaXqTFpEKGJtCEg/LrDcJJn34x2uJGRj0GHucZQxzlo
1qiqbQWNn/SlVkmy9q66iISEuUnme9uXIFXgtPnzeTNEutFpVbArHsEQxewIscGi
2mvMcpjeSiVvCk8NoOAubrqkpi6G2h+TBxLIjLM7RmZ376NKr7++E48XpGALgUvW
AHW7R1vUn8H9cS5U5OviuZuX0JMLQ4pd+OqfaIKO/FQPpBGEwW/eDyzfFhs4kT3K
8Yb6LEF8I0l4mVpt5ZPNFzpyUdvV3a7Cbssb/g75AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQULXNhZyOaHLubv6C2kWOGAbkNNn8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2IxY2RjOTk2LWQ5ZGUtNGViYy05YjM3LTA0OGNmMGUzNjY2OS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImAB/7wEAwDQYJKoZIhvcNAQELBQADggEBADDxjyiQY32vOy0+vBIalFvm
8tEcSUvanA4RzWxeYMWuyT3GDRDzKjQ1pZnScJwyQy1Y5TFGvwgaPXzRuhbFPkUI
JDLSN23SrX14vSisxb5mqiWxpGT+21kkwvsj+QzehVUmi0CgKy6xBiSu/8Q4O5ns
8PxiYZLqbeoLgxKs3Y9xPlDuy2OQDbRu5lQMv6aqOQ6m7/GwGMs63Pu+VwEd9qPy
FHlB+CaYAMnwd2LU3MDiwSQXt2CcW8vIF8pdJhdh2nvsEqqXUbAp5nmZMShCgVbz
bCLS4jZgyCL3yrgzGuqn9bwERfxM7jPveyalt0PtjOvP8JSTJFoifipg7smJ/b8=
-----END CERTIFICATE-----
Generated at Sat Jun 14 18:55:46 2025 by rpki-client