Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f753c740-464a-475b-92d6-7f0a2009b711.roa
File:                     f753c740-464a-475b-92d6-7f0a2009b711.roa (raw, json)
Hash identifier:          6RqD1iwmbOxqQ1uUbWlUDReh4YtUIX7KoBWJNQ/Y7+k=
Subject key identifier:   11:63:D0:83:67:21:8A:2C:BD:BC:6C:64:BF:D9:87:F6:85:B3:73:D2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       595D74C1F573823B5FDEF335E3FB82B83B30A85C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f753c740-464a-475b-92d6-7f0a2009b711.roa
Signing time:             Fri 01 Aug 2025 16:10:15 +0000
ROA not before:           Fri 01 Aug 2025 16:10:15 +0000
ROA not after:            Fri 05 Sep 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f00:80c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:5d:74:c1:f5:73:82:3b:5f:de:f3:35:e3:fb:82:b8:3b:30:a8:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  1 16:10:15 2025 GMT
            Not After : Sep  5 23:59:59 2025 GMT
        Subject: serialNumber=cbdd255ae07b3da1a1a34d521b3c7c7f29d30f6d1f1b526b187671cf253796d2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e5:7b:c4:11:57:09:3a:45:18:cb:53:09:78:
                    d2:b8:85:af:9a:bf:b2:8d:f8:93:d6:dc:e8:9f:54:
                    7f:32:d9:3f:91:9e:71:84:e2:cb:92:11:cd:02:b2:
                    c8:a3:7c:8b:de:73:a0:42:6c:7b:e3:b6:7e:a0:d7:
                    ca:be:aa:47:7a:96:52:84:af:c5:6d:71:c2:bf:5a:
                    04:7b:84:d9:7f:dc:65:67:2b:03:f6:d4:ef:01:4e:
                    ab:8d:12:a3:23:cf:d8:57:96:f1:f8:cb:5a:e5:e9:
                    9c:1d:68:41:95:21:9d:d5:b1:29:9e:6b:8d:4c:50:
                    5c:27:67:e1:e2:54:0d:54:d1:fa:9d:30:70:15:69:
                    23:b4:67:5e:1c:10:9e:56:ea:1d:53:37:a4:2c:7d:
                    81:88:5e:8a:a3:dd:6f:c3:49:c1:88:0e:cb:7e:da:
                    0e:08:97:5c:4e:5c:fc:05:a0:71:34:eb:a8:28:e9:
                    b9:53:c4:f5:95:33:45:a5:4a:7b:77:28:8a:cb:c8:
                    9f:10:b3:8c:a3:14:fe:a5:6e:37:23:86:a4:30:69:
                    6f:90:03:e4:da:58:ad:d8:7e:b6:4c:9a:5a:9b:26:
                    30:e9:fc:51:bf:2c:c9:9a:87:5c:76:86:b5:78:a0:
                    7d:a1:59:b2:70:a2:98:cb:13:eb:b0:6e:92:95:81:
                    c4:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:63:D0:83:67:21:8A:2C:BD:BC:6C:64:BF:D9:87:F6:85:B3:73:D2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f753c740-464a-475b-92d6-7f0a2009b711.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f00:80c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         61:e5:4d:3d:a7:89:e0:b8:0a:0f:3b:88:7c:de:2e:0c:7d:55:
         87:f8:c9:fb:a4:78:a9:7e:28:ab:ad:f8:23:cb:5f:8f:f8:82:
         b6:ae:48:69:8c:f4:93:dc:36:3e:e2:65:cb:3a:55:4c:27:aa:
         2a:39:5d:15:4a:d1:52:2f:59:2e:24:a5:9b:e3:c9:e9:bd:26:
         bd:b0:22:50:45:0b:73:f4:ea:59:d1:a7:5d:da:b2:48:b4:c5:
         a0:30:a9:9e:5e:7a:38:f9:57:05:59:2c:97:22:a1:d0:87:4c:
         a7:45:9c:ce:cb:45:80:b7:03:d1:44:6c:3a:18:62:88:9c:c7:
         14:54:2b:17:d7:9b:fa:23:07:d5:87:d2:ff:57:87:0a:92:4f:
         f5:98:e2:da:8e:a8:8e:dd:d3:2e:f0:80:74:ad:45:7c:4f:3b:
         4b:40:16:3b:e7:12:8c:26:c4:6f:9d:34:d9:29:0d:53:a3:10:
         ae:89:a0:5b:f5:9a:10:c2:d6:46:7b:00:34:57:1f:19:fd:7e:
         ef:69:3c:bb:58:e9:6b:fb:a9:39:b8:59:05:31:68:24:5c:03:
         78:40:73:a8:f9:f9:ef:7a:21:75:5a:1b:e8:ee:22:f5:92:80:
         66:4f:4d:b1:a0:c4:d2:2e:28:24:f5:c0:d3:0f:1b:c7:4d:7b:
         e8:81:94:e4
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUWV10wfVzgjtf3vM14/uCuDswqFwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODAxMTYxMDE1WhcNMjUwOTA1MjM1OTU5
WjB6MUkwRwYDVQQFE0BjYmRkMjU1YWUwN2IzZGExYTFhMzRkNTIxYjNjN2M3ZjI5
ZDMwZjZkMWYxYjUyNmIxODc2NzFjZjI1Mzc5NmQyMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCh5XvEEVcJOkUYy1MJeNK4ha+av7KN+JPW3OifVH8y2T+R
nnGE4suSEc0CssijfIvec6BCbHvjtn6g18q+qkd6llKEr8VtccK/WgR7hNl/3GVn
KwP21O8BTquNEqMjz9hXlvH4y1rl6ZwdaEGVIZ3VsSmea41MUFwnZ+HiVA1U0fqd
MHAVaSO0Z14cEJ5W6h1TN6QsfYGIXoqj3W/DScGIDst+2g4Il1xOXPwFoHE066go
6blTxPWVM0WlSnt3KIrLyJ8Qs4yjFP6lbjcjhqQwaW+QA+TaWK3YfrZMmlqbJjDp
/FG/LMmah1x2hrV4oH2hWbJwopjLE+uwbpKVgcSPAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUEWPQg2chiiy9vGxkv9mH9oWzc9IwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2Y3NTNjNzQwLTQ2NGEtNDc1Yi05MmQ2LTdmMGEyMDA5YjcxMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB8AgMAwDQYJKoZIhvcNAQELBQADggEBAGHlTT2nieC4Cg87iHzeLgx9
VYf4yfukeKl+KKut+CPLX4/4grauSGmM9JPcNj7iZcs6VUwnqio5XRVK0VIvWS4k
pZvjyem9Jr2wIlBFC3P06lnRp13aski0xaAwqZ5eejj5VwVZLJciodCHTKdFnM7L
RYC3A9FEbDoYYoicxxRUKxfXm/ojB9WH0v9XhwqST/WY4tqOqI7d0y7wgHStRXxP
O0tAFjvnEowmxG+dNNkpDVOjEK6JoFv1mhDC1kZ7ADRXHxn9fu9pPLtY6Wv7qTm4
WQUxaCRcA3hAc6j5+e96IXVaG+juIvWSgGZPTbGgxNIuKCT1wNMPG8dNe+iBlOQ=
-----END CERTIFICATE-----
Generated at Fri Aug 8 19:30:26 2025 by rpki-client