Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/de77e4d6-8de1-407f-8ff9-841658b07cc0.roa
File:                     de77e4d6-8de1-407f-8ff9-841658b07cc0.roa (raw, json)
Hash identifier:          8IXm/jnqN+Um0DLri771iyV8wlEzCHNgGOFgkO4ZvmI=
Subject key identifier:   2B:B6:F9:BE:F0:51:6F:BD:39:85:95:DE:CC:98:4E:4D:92:BD:FE:9E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       558CABBA814118EF87AD8DF2359C3C09E2E2F463
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/de77e4d6-8de1-407f-8ff9-841658b07cc0.roa
Signing time:             Sat 14 Jun 2025 00:40:26 +0000
ROA not before:           Sat 14 Jun 2025 00:40:26 +0000
ROA not after:            Sat 19 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f27:8000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:8c:ab:ba:81:41:18:ef:87:ad:8d:f2:35:9c:3c:09:e2:e2:f4:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 14 00:40:26 2025 GMT
            Not After : Jul 19 23:59:59 2025 GMT
        Subject: serialNumber=b2fd77925864a571a0065b739349bdd317cae7a4ddda4c4be7697d6312b818dc, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b4:e7:07:e6:26:5b:06:11:ae:68:ff:3d:08:
                    e2:38:1d:3d:cc:5a:65:ae:9b:16:01:aa:ec:31:5f:
                    2c:41:19:aa:5c:61:d6:de:f7:6c:6e:2a:47:fd:5b:
                    ea:fe:21:9d:28:4a:22:99:c8:fe:ba:33:0a:36:eb:
                    ff:21:5f:db:65:9e:99:8c:43:7d:6c:59:b4:b2:c5:
                    57:06:c1:f8:00:b9:21:70:91:c1:5d:18:21:b6:be:
                    84:ac:bd:f3:ce:fa:93:bc:d6:17:b5:37:4e:2e:6e:
                    27:3b:8e:bb:b0:a0:d4:0f:85:a8:99:24:60:4a:c4:
                    e8:17:20:07:92:ad:88:17:d1:87:ec:33:06:da:d7:
                    80:04:0d:81:9a:20:c9:da:d1:f1:71:6b:48:67:f2:
                    34:e6:95:f3:fa:5b:ad:85:46:e3:e1:ca:62:fc:25:
                    0c:77:2f:c4:c5:10:fb:b8:cc:07:b3:82:04:f0:fc:
                    37:e7:06:fa:20:07:3b:2a:01:f0:5f:57:e3:c1:9e:
                    96:11:a5:41:4f:6f:7d:42:50:8a:6d:29:3b:22:29:
                    3f:07:1b:e1:9e:c4:b7:24:66:fe:03:3d:62:c8:b5:
                    95:c9:cb:1e:b4:67:fb:4f:ea:17:03:83:0b:4a:3e:
                    2f:06:95:75:fe:f3:18:2e:3e:96:6e:a2:f7:9a:b8:
                    ed:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:B6:F9:BE:F0:51:6F:BD:39:85:95:DE:CC:98:4E:4D:92:BD:FE:9E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/de77e4d6-8de1-407f-8ff9-841658b07cc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f27:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         24:46:da:d1:bd:cf:a7:80:2b:ef:fa:0b:9d:2d:fe:6f:fd:17:
         97:5f:a8:c3:94:77:bd:f7:b1:27:23:b0:41:c0:3d:6a:87:ca:
         19:6b:d3:83:6a:ed:f1:ba:3e:80:2f:75:53:a9:1b:1a:b2:96:
         fd:d2:15:e8:87:62:a4:c4:bc:7c:f2:3d:e8:bb:bc:3f:f9:ba:
         b2:ec:50:87:88:2c:12:6f:8a:f0:40:d0:13:0e:3d:1e:2e:36:
         f3:be:77:9e:62:18:3e:c7:fc:db:f1:33:55:53:40:0b:0e:49:
         8b:1b:ad:20:3b:75:83:48:3e:11:fa:9f:99:e2:00:6b:03:6b:
         19:2e:e3:d3:17:9d:df:b0:73:49:64:f8:b9:ff:a3:11:fb:f3:
         5d:88:48:06:aa:ff:71:a4:65:40:d4:48:12:5a:70:31:c1:86:
         44:e7:59:de:37:52:58:56:82:0c:8e:9c:5c:e7:bf:9b:e9:82:
         e1:47:e7:96:6e:14:36:e8:bc:1f:cf:63:8b:d2:98:9c:d5:3b:
         0f:72:2e:94:89:de:96:f3:ea:1c:f9:08:e3:ad:4c:da:6f:6c:
         8a:f4:00:1e:01:59:c3:62:87:69:c6:8c:7f:8f:4b:d8:ad:fb:
         95:2c:3b:ba:00:fe:bd:af:e7:87:76:ea:d6:28:d3:4f:97:f0:
         b3:61:79:21
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUVYyruoFBGO+HrY3yNZw8CeLi9GMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjE0MDA0MDI2WhcNMjUwNzE5MjM1OTU5
WjB6MUkwRwYDVQQFE0BiMmZkNzc5MjU4NjRhNTcxYTAwNjViNzM5MzQ5YmRkMzE3
Y2FlN2E0ZGRkYTRjNGJlNzY5N2Q2MzEyYjgxOGRjMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCftOcH5iZbBhGuaP89COI4HT3MWmWumxYBquwxXyxBGapc
Ydbe92xuKkf9W+r+IZ0oSiKZyP66Mwo26/8hX9tlnpmMQ31sWbSyxVcGwfgAuSFw
kcFdGCG2voSsvfPO+pO81he1N04ubic7jruwoNQPhaiZJGBKxOgXIAeSrYgX0Yfs
Mwba14AEDYGaIMna0fFxa0hn8jTmlfP6W62FRuPhymL8JQx3L8TFEPu4zAezggTw
/DfnBvogBzsqAfBfV+PBnpYRpUFPb31CUIptKTsiKT8HG+GexLckZv4DPWLItZXJ
yx60Z/tP6hcDgwtKPi8GlXX+8xguPpZuoveauO2BAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUK7b5vvBRb705hZXezJhOTZK9/p4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2RlNzdlNGQ2LThkZTEtNDA3Zi04ZmY5LTg0MTY1OGIwN2NjMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgQmAB8ngDANBgkqhkiG9w0BAQsFAAOCAQEAJEba0b3Pp4Ar7/oLnS3+b/0X
l1+ow5R3vfexJyOwQcA9aofKGWvTg2rt8bo+gC91U6kbGrKW/dIV6IdipMS8fPI9
6Lu8P/m6suxQh4gsEm+K8EDQEw49Hi428753nmIYPsf82/EzVVNACw5JixutIDt1
g0g+EfqfmeIAawNrGS7j0xed37BzSWT4uf+jEfvzXYhIBqr/caRlQNRIElpwMcGG
ROdZ3jdSWFaCDI6cXOe/m+mC4Ufnlm4UNui8H89ji9KYnNU7D3IulInelvPqHPkI
461M2m9sivQAHgFZw2KHacaMf49L2K37lSw7ugD+va/nh3bq1ijTT5fws2F5IQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 06:44:14 2025 by rpki-client