Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c636934a-c7cc-4c0f-acb1-a74b2500994d.roa
File:                     c636934a-c7cc-4c0f-acb1-a74b2500994d.roa (raw, json)
Hash identifier:          nu5BufHh8PbBn4P/f4f4EGRlElVcxZeNRHcYR+G6hz4=
Subject key identifier:   06:F3:70:0C:3E:52:E0:7A:79:AF:6F:8E:D9:98:CF:17:40:C2:1E:C6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       233ADD831BA9FC6CDF673C86E911D4E7DD2A0C01
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c636934a-c7cc-4c0f-acb1-a74b2500994d.roa
Signing time:             Tue 10 Jun 2025 16:50:58 +0000
ROA not before:           Tue 10 Jun 2025 16:50:58 +0000
ROA not after:            Tue 15 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f38:3480::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:3a:dd:83:1b:a9:fc:6c:df:67:3c:86:e9:11:d4:e7:dd:2a:0c:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 10 16:50:58 2025 GMT
            Not After : Jul 15 23:59:59 2025 GMT
        Subject: serialNumber=43ad5f9b76ba0e271e621a7800e9dec65a31bda188955c9f7640aab5cdbade20, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:25:ab:64:1e:31:6e:fa:90:d5:77:a0:a8:f6:
                    6f:02:20:2f:28:a4:64:d8:d2:4f:b0:4f:84:c1:46:
                    32:7d:d6:fe:af:ed:ba:8b:04:28:b2:ef:65:a1:6d:
                    d2:4e:c0:5b:3e:c5:97:b9:1f:9b:56:c3:d4:a8:07:
                    f3:59:24:fe:32:56:db:ce:47:6c:85:d7:be:26:aa:
                    f3:3c:c3:46:ce:16:0e:5e:10:a1:6d:2f:4a:36:1e:
                    70:63:11:43:0d:a4:34:f1:c6:82:26:a4:f9:08:84:
                    ed:9d:20:d2:a4:87:4d:a7:eb:94:b6:fa:77:85:2f:
                    8c:4e:f8:0e:f1:b1:a7:67:8c:e4:0d:e2:96:59:45:
                    e9:77:be:3b:98:bd:a2:2e:25:97:3b:27:48:cc:39:
                    19:8b:fa:e0:f0:ee:67:0a:8d:c2:d0:42:6a:3e:5e:
                    9e:56:61:e0:8e:70:87:34:f0:b2:bf:e7:8b:ce:eb:
                    dc:1a:c0:14:b1:a2:0e:01:04:91:c2:95:7f:2a:be:
                    7f:4e:5d:bf:d9:66:ac:1a:0c:38:e5:24:7c:42:85:
                    5c:fa:d2:04:62:cc:d6:61:b4:2e:ae:68:e4:3c:5c:
                    f3:b2:ce:43:7a:6f:09:fe:b6:71:b6:14:7e:d2:7b:
                    8b:5e:63:69:b5:bb:25:27:82:9d:12:f5:e3:b9:77:
                    cf:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:F3:70:0C:3E:52:E0:7A:79:AF:6F:8E:D9:98:CF:17:40:C2:1E:C6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c636934a-c7cc-4c0f-acb1-a74b2500994d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f38:3480::/48

    Signature Algorithm: sha256WithRSAEncryption
         0f:9f:05:06:87:4a:51:0f:27:35:4f:5f:b8:9c:f2:06:8f:c6:
         76:0a:99:70:a9:88:e1:5d:cc:f9:b7:5e:bd:9a:17:86:a2:4a:
         65:2a:1e:12:ef:17:37:8d:dd:22:e0:c1:21:3e:ec:7a:a1:8e:
         b5:07:ab:2f:0c:75:fa:2e:90:68:1e:72:61:73:82:1c:28:d5:
         79:a4:2e:ef:85:11:65:7c:f9:5d:74:e8:f9:29:1e:06:c6:29:
         ac:1f:0b:cf:8e:10:89:80:5b:c7:72:a6:d7:a0:f4:fe:4e:9a:
         06:d6:a8:72:1c:4b:f2:a3:a8:d9:27:a0:cd:ed:1e:d2:83:8f:
         ec:d6:b5:d8:b7:6f:68:54:04:fe:60:63:f0:ae:5b:d8:62:73:
         59:c0:8e:b5:c6:20:07:1f:c7:a3:1a:cd:e7:6a:30:6c:b8:42:
         94:12:d2:8c:df:95:ad:65:13:dc:7c:22:0c:5f:ff:35:19:58:
         47:8c:7f:f5:ff:1e:0f:b5:dd:74:8d:b6:02:45:be:7f:4b:33:
         33:b6:94:45:f0:7d:77:1c:48:92:35:15:96:9b:25:4a:52:7c:
         ad:10:85:19:62:dd:5a:64:67:10:0b:af:55:8c:c6:89:f1:f1:
         2b:33:85:28:7c:66:cb:6d:f2:4f:91:46:36:53:f4:ce:16:71:
         97:5e:eb:52
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUIzrdgxup/GzfZzyG6RHU590qDAEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjEwMTY1MDU4WhcNMjUwNzE1MjM1OTU5
WjB6MUkwRwYDVQQFE0A0M2FkNWY5Yjc2YmEwZTI3MWU2MjFhNzgwMGU5ZGVjNjVh
MzFiZGExODg5NTVjOWY3NjQwYWFiNWNkYmFkZTIwMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC2JatkHjFu+pDVd6Co9m8CIC8opGTY0k+wT4TBRjJ91v6v
7bqLBCiy72WhbdJOwFs+xZe5H5tWw9SoB/NZJP4yVtvOR2yF174mqvM8w0bOFg5e
EKFtL0o2HnBjEUMNpDTxxoImpPkIhO2dINKkh02n65S2+neFL4xO+A7xsadnjOQN
4pZZRel3vjuYvaIuJZc7J0jMORmL+uDw7mcKjcLQQmo+Xp5WYeCOcIc08LK/54vO
69wawBSxog4BBJHClX8qvn9OXb/ZZqwaDDjlJHxChVz60gRizNZhtC6uaOQ8XPOy
zkN6bwn+tnG2FH7Se4teY2m1uyUngp0S9eO5d88zAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUBvNwDD5S4Hp5r2+O2ZjPF0DCHsYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2M2MzY5MzRhLWM3Y2MtNGMwZi1hY2IxLWE3NGIyNTAwOTk0ZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB84NIAwDQYJKoZIhvcNAQELBQADggEBAA+fBQaHSlEPJzVPX7ic8gaP
xnYKmXCpiOFdzPm3Xr2aF4aiSmUqHhLvFzeN3SLgwSE+7HqhjrUHqy8MdfoukGge
cmFzghwo1XmkLu+FEWV8+V106PkpHgbGKawfC8+OEImAW8dypteg9P5OmgbWqHIc
S/KjqNknoM3tHtKDj+zWtdi3b2hUBP5gY/CuW9hic1nAjrXGIAcfx6MazedqMGy4
QpQS0ozfla1lE9x8Igxf/zUZWEeMf/X/Hg+13XSNtgJFvn9LMzO2lEXwfXccSJI1
FZabJUpSfK0QhRli3VpkZxALr1WMxonx8SszhSh8Zstt8k+RRjZT9M4WcZde61I=
-----END CERTIFICATE-----
Generated at Sat Jun 14 06:30:28 2025 by rpki-client